Privacy Policy
Last updated July 25, 2026
PoolTidy is software that pool service companies use to run their routes, and that pool owners use to see what happened at their pool. This policy explains exactly what we store, why, and how to get rid of it. It is written to be read, not to be skimmed past.
The short version: we collect what the app needs to do its job, we do not sell anything to anyone, we do not run ads, and we do not put analytics or advertising trackers in the app.
Who is responsible for your information
PoolTidy is operated by Spindola Software. Reach us any time at support@pooltidy.com.
One important distinction: when a pool company enters details about its customers (name, service address, gate code, notes), that company decides what to collect and why. We store and protect it on their behalf. If you are a pool owner and want your information changed or removed from your company's records, ask your pool company — and see “Deleting your account” below for the part we control.
What we collect
Your account. Email address, name, and an optional phone number. Passwords are hashed by our authentication provider — we never see or store the password itself.
Pool company information. Company name, contact details, business address, timezone, service availability, and pricing settings.
Customer and pool records, entered by the pool company: customer name, service address, phone, email, gate or access codes, notes, and pool details such as type, size, service day, and rate.
Service records. Visit times, work performed, technician notes, skip reasons, water chemistry readings, and before/after photos of the pool taken by the technician. Photos are stored privately and are only viewable by the pool company and the pool owner they belong to.
Billing records. Invoice amounts, payment status, and payment method type (cash, check, card). We never store card numbers or bank account numbers. Subscription payments from pool companies to us are handled by Stripe, which stores its own payment details under its own privacy policy.
Messages and requests sent between a pool company and a pool owner inside the app, plus reviews a pool owner chooses to leave.
Service addresses.We convert service addresses into map coordinates so a technician's daily route can be put in driving order. This is done from the address on file, not from anyone's device.
Employee location (technicians only)
A pool company can switch on location sharing for its own field staff. If you are a pool owner or a customer, this never applies to you — your device's location is never collected, at any time.
If you are a technician, here is exactly how it works:
- Your employer must turn the feature on, and you must separately agree from your own Crew screen. Your employer cannot agree on your behalf.
- Your position is recorded only while you are clocked on and only while the app is open on your screen. Clock off and it stops immediately.
- It does not run in the background, and it cannot run after hours. There is no always-on tracking in this app.
- Only your own company's owners can see it. It is never shown to customers.
- Positions are deleted automatically after 30 days.
- You can withdraw at any time with one tap, and doing so erases the positions already collected about you.
Employers: laws on tracking staff vary by state, and several require that you tell employees in advance. Telling your crew before you switch this on is both the legal route and the decent one. You are responsible for that notice; we give you the controls and the consent record.
What we do not do
- We do not sell or rent personal information to anyone.
- We do not share it with advertisers or data brokers.
- We do not include advertising SDKs, analytics SDKs, or third-party trackers in the app.
- We do not use your information to train machine-learning models.
Who we share it with
Only the service providers that make the app run, and only for that purpose:
- Supabase — database, login, and private photo storage.
- Vercel — application hosting.
- Stripe — subscription billing for pool companies. Pool owners do not have a Stripe account with us.
- OpenStreetMap (Nominatim) — turns a service address into map coordinates for route ordering. The address is sent; your name is not.
- Google Maps— only when a technician taps “Navigate”, which opens the destination address in their phone's map app.
We may also disclose information if the law requires it, or to protect the rights and safety of our users.
Who can see what, inside the app
- A pool company's staff see only their own company's customers, pools, visits, and invoices.
- A pool owner sees only their own pool: their visits, photos, invoices, messages, and tasks.
- Water chemistry readings are for the company's records and are not shown to pool owners.
These boundaries are enforced by the database itself (row-level security), not just by the screens.
Our support staff. A small number of Spindola Software accounts can access company records in order to run the service — setting a new company up, fixing a problem you have reported, or recovering data. We use this to help you, never to market to you or to anyone on your customer list, and we do not sell or share anything we see. If you would rather we did not look at your account, email us and say so.
How long we keep it
Service and billing records are kept for as long as the pool company keeps its account, because those are the company's business records. Delete an account and the rules below apply.
Deleting your account
You can delete your account at any time from inside the app, or from pooltidy.com/delete-account. No reinstall and no phone call required.
If you are a pool owner: deleting removes your login, your name and profile, and your notifications, and unlinks you from your pool company. Your pool company keeps its own record of the work it performed and the money it billed — those are its business and tax records, not ours to erase. Ask your pool company directly if you want those removed too.
If you are a technician:deleting removes your login and profile and takes you off your company's team. Visits you completed stay on the company's books, no longer attributed to a named account.
If you are the last owner of a pool company: deleting your account gives you the choice to hand the company to another owner first, or to delete the entire company — which permanently removes every customer, pool, visit, photo, invoice, and message belonging to it. That one cannot be undone, so the app asks you to type it out.
Deletion takes effect immediately. Encrypted infrastructure backups roll off within 30 days. We may retain the minimum records required by tax or accounting law.
Prefer email? Write to support@pooltidy.com from your account's email address and we will handle it within 30 days.
Your rights
Depending on where you live (including California under the CCPA/CPRA, and the EU/UK under the GDPR), you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. Email support@pooltidy.com and we will respond within 30 days. We will not treat you differently for asking.
Security
Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Access between accounts is restricted at the database level. Pool photos are stored in a private bucket and served through short-lived signed links. No system is perfect, and we will notify affected users promptly if a breach ever affects their information.
Children
PoolTidy is a tool for businesses and homeowners. It is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, email us and we will remove it.
Changes to this policy
If we change this policy in a way that materially affects you, we will update the date at the top and notify you in the app before the change takes effect.
Contact
Spindola Software — support@pooltidy.com