Last updated: March 2026
Privacy Policy
Who we are
SiteTalkie is developed by Gridmark Technologies Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
Contact: [email protected]
What SiteTalkie does
SiteTalkie is a free offline Bluetooth mesh messaging app for construction sites. Messages travel phone-to-phone via Bluetooth Low Energy (BLE). No internet connection is required for core messaging.
No accounts, no tracking, no ads
SiteTalkie does not require an account, email address, phone number, or login. There are no analytics, no advertising IDs, no usage telemetry, no crash reporting, no cookies, and no third-party SDKs that collect data. We do not sell or share any data with advertisers.
Data stored on your device only
The following data is stored locally on your device and never sent to any server:
| Data | Purpose | Your Control |
|---|---|---|
| Display name | Shown to other mesh users | Editable in Settings |
| Trade (e.g. Electrician) | Shown to other mesh users | Editable in Settings |
| Preferred language | Translation service | Editable in Settings |
| Chat messages | Communication | Deleted on app uninstall |
| Nostr keypair (public + private key) | Cryptographic identity — no signup needed | Generated on first launch, stays on device |
| Location pins | Hazard and note markers | Created and deleted by you |
| Snag reports | Defect documentation | Created and deleted by you |
| Floor number | Floor identification | Editable in Settings |
| Ghost mode preference | Hides GPS from mesh | Toggle in Settings |
| Notification preferences | DM, channel, private channel toggles | Editable in Settings |
Your private key never leaves your device.
Data broadcast over BLE mesh
When you use SiteTalkie, the following data is broadcast to nearby devices via Bluetooth (not over the internet):
| Data | Purpose | Visibility |
|---|---|---|
| Display name | Identify you on mesh | Anyone within BLE range (~30-50m) |
| Trade | Show your trade to peers | Anyone within BLE range |
| GPS coordinates (optional) | Distance display on radar | Anyone within BLE range, unless Ghost Mode is on |
| Floor number | Floor display | Anyone within BLE range |
| Chat messages | Communication | Anyone on the same mesh channel |
| Site alerts | Emergency broadcasts | Everyone on mesh |
| Pins and snags | Location markers and defect reports | Everyone on mesh |
All BLE mesh communication is end-to-end encrypted using Noise Protocol XX (Curve25519 + ChaCha20-Poly1305) with forward secrecy. Messages are decrypted only on the receiving device.
Data sent to our servers
A small amount of data is synced with Supabase when an internet connection is available:
| Data | Purpose | When |
|---|---|---|
| Bulletin acknowledgments | Confirm you received a site notice | When you tap "Acknowledge" and internet is available |
| Referral public key | Track referrals | When you share a referral link |
| Dashboard auth event | Link identity to web dashboard | When you explicitly sign in to the dashboard |
We also fetch site-level data from Supabase (site config, equipment locations, bulletins). This is not personal data — it is set by the site manager and cached locally for offline use.
Encryption
All BLE mesh messages are end-to-end encrypted using Noise Protocol XX with Curve25519 key exchange and ChaCha20-Poly1305 authenticated encryption. Forward secrecy means past messages cannot be decrypted if keys are later compromised. No server-side decryption is possible.
Third-party services
| Service | Purpose | Data Sent |
|---|---|---|
| Supabase | Site config sync, bulletin sync, acknowledgments | Bulletin ack (public key + timestamp), referral public key |
| Apple Translation (iOS) | On-device message translation | Nothing — runs entirely on device |
| Google MLKit Translation (Android) | On-device message translation | Nothing — runs on device after language pack download |
No data is sold, shared with advertisers, or used for profiling.
Children's privacy
SiteTalkie is designed for construction workers aged 18 and over. It is not directed at children under 13. No data is knowingly collected from children.
Data deletion
All data is stored on your device. Uninstalling the app deletes all local data. There is no server-side account to delete.
Supabase stores only bulletin acknowledgments (public key + timestamp), which can be deleted on request to [email protected].
Open source
SiteTalkie is open source under the GNU General Public License v3 (GPLv3). The source code is publicly auditable:
Changes to this policy
We may update this policy as features change. The latest version is always at sitetalkie.com/privacy.
Contact
For privacy questions: [email protected]
Developer: Ed Wright — [email protected]
Gridmark Technologies Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ