Privacy Policy
About This Policy
Pipe Dreams Delivered (PDD, we, our, or us) is an Ontario-based marketplace platform that connects homeowners with independent licensed plumbing contractors. This Privacy Policy describes exactly what personal information we collect, why we collect it, how we use and share it, and your rights under the Personal Information Protection and Electronic Documents Act (PIPEDA).
This Policy applies to our mobile application (iOS and Android), our website at pipedreamsdelivered.com, and all related platform services.
Who We Are — Platform Only
PDD is a technology marketplace. We do not employ contractors or perform plumbing services. Contractors are independent businesses. This distinction matters for your privacy: your job data is shared with the contractor you select, not with PDD as a service provider.
What We Collect and Why
When you create an account, we collect the following based on your role:
- Full name
- Email address (stored in lowercase for matching)
- Password (authenticated and managed through Firebase Authentication — we never see or store your raw password)
- Role selection
- Consent timestamp (
consentGivenAt), consent version, and consent scope — recorded at signup and stored with your profile
- Business name
- Ontario licence number
- Insurance provider name
- Insurance policy number
- Insurance expiry date
- Job category selections
- Trade category and apprentice level
- Target and verified hour tracking data
When a homeowner submits a service request, we collect:
- Issue description and job category
- Service address
- Phone number
- Pricing, payment amounts, and job timestamps
- Job status history (e.g., pending, claimed, in_progress, completed)
- Scope change requests, dispute notes, and completion details
- Completion photos (for completed jobs and verified work certificates)
Our app does collect and share precise GPS location. The previous version of this policy incorrectly stated we do not track precise GPS location. That statement has been revised. Here is what we actually do:
When a contractor has an active job in ‘claimed’ or ‘in_progress’ status, the app collects the contractor’s real-time GPS coordinates (latitude and longitude) using the device’s location services. These coordinates are updated approximately every 15 seconds and are written to the job record in our database.
The homeowner assigned to that job can see the contractor’s live location on a map in the ‘Track My Pro’ screen, so they know the contractor is on the way. Location sharing stops automatically as soon as the job is no longer in an active status.
The contractor is notified in-app before location tracking begins, and a device-level location permission prompt is shown. Location data is not retained independently after a job closes — it is overwritten with each update and the final value remains only in the completed job record.
Purpose: Arrival transparency and ETA visibility for homeowners during active jobs.
Legal basis: Consent (captured at the start of location tracking, in addition to signup consent scope).
Chat messages between homeowners and contractors for a given job are stored in our database under the job record. Messages are used to facilitate communication, support dispute resolution, and maintain an audit trail. We do not use message content for advertising.
We use Expo Notifications to send push notifications to your device. Notification types include:
- Job status updates (e.g., claimed, arrival verified, completed)
- New chat messages
- Contractor approval decisions
- Payment and escrow events
- Warranty prompts after job completion
Push notification tokens are registered with Firebase and stored in your user profile. You can disable notifications at the device level at any time.
For Student accounts, we collect and store:
- Verified apprentice hour logs (submitted by approved contractors)
- Trade category, apprentice level, and Red Seal progress
- Contractor name and licence number on each hour log
- Work descriptions for each verified session
These records support OCOT-style progress reporting and grant eligibility tracking. Student public profiles (stored in the users_public collection) include name, role, email, and verified hours for contractor search functionality.
If you use Home Passport, Home Score, or certificate features, we store property address history, job history linked to an address, and inspection records. This data is associated with your account and the property address.
Payments are processed through Stripe, including escrow-style payment holds and Stripe Connect for contractor payouts. We do not store raw credit card numbers on our servers. Stripe handles all payment card data under their own PCI-DSS compliance program. We store payment intent IDs, escrow status, payout amounts, and transaction records for legal and tax purposes.
Certain contractor and student profile fields are stored in a users_public collection to enable platform features like the contractor directory and apprentice hour logging. Public contractor data includes: name, business name, role, job categories, account status, rating, and completed job count. Sensitive fields (licence number, insurance details, email) are not in public profiles.
We collect app usage events through our analytics utility (trackEvent). This includes actions such as login, signup, and job submission — used to improve the platform. Firebase may also collect device type, OS version, and app version.
Third-Party Service Processors
We rely on the following third-party processors. Where required by PIPEDA, we have data processing agreements in place:
All third-party processors are contractually bound to protect your data and use it only for the purposes we specify.
Consent
We capture your consent at account creation. Your user profile records:
consentGivenAt- The timestamp when you agreed.
consentVersion- The policy version in effect at signup (currently 2026-02-04).
consentScope- A list of the specific processing activities you consented to, based on your role (e.g.,
dispatch_matchingfor Homeowners,credential_verificationandpayout_operationsfor Contractors,apprenticeship_progress_trackingfor Students).
For live location tracking, an additional in-app disclosure is shown before tracking begins, and the device-level permission prompt is required. You may withdraw location permission at any time in your device settings.
You may withdraw consent for other processing activities by submitting a deletion request (see Section 8). Note that some processing is necessary to deliver the service and cannot be withdrawn without closing your account.
How We Share Your Information
When a contractor claims a homeowner’s job, the homeowner’s name, phone number, address, and issue description are shared with that contractor. The contractor’s name, phone number, and live GPS location (during active jobs) are shared with the homeowner.
As described in Section 4, we share data with Firebase, Stripe, SendGrid, Airtable, and Expo to operate the platform.
The platform includes affiliate and supplier links (Wolseley Canada, Noble Trade, Home Depot Pro, Amazon Associates, and others). When you click these links, you leave our platform. We do not share your personal information with affiliate partners. We may earn a commission on qualifying purchases at no cost to you.
We may disclose information to law enforcement, regulators, or courts where required by law, to protect the safety of users, or to enforce our Terms of Service.
If PDD is acquired or merges with another entity, your data may be transferred. The acquiring party will be required to honor this Policy.
Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy or as required by law:
| Data Type | Retention Period |
|---|---|
| Active accounts | Retained while your account is active |
| Job records | 7 years from job completion (payment, tax, legal dispute purposes) |
| Chat messages | Duration of the associated job’s legal retention period |
| Apprenticeship hour logs | 7 years to support OCOT and grant documentation |
| Payment & Stripe transaction records | As required by Canadian tax law (minimum 6 years) |
| Contractor credential records | 3 years post-deactivation for regulatory and fraud purposes |
| Anonymized deletion records | A deletion_requests record is created upon account deletion. Anonymized transactional records may be retained beyond deletion for legal, tax, fraud, and dispute reasons. |
When retention periods expire, we permanently delete or irreversibly anonymize the data.
Account Deletion
You can request deletion of your account through the in-app ‘Delete My Data’ option in the drawer menu, or by emailing info@pipedreamsdelivered.com. You may also submit a request at pipedreamsdelivered.com/account-deletion/.
When you delete your account, the following happens:
- Your personal identifiers (name, email, phone) are anonymized in the system
- A
deletion_requestsrecord is created to confirm the deletion was processed - You are signed out immediately
- Some records may be retained in anonymized or minimal form where required for payments, taxes, fraud prevention, legal obligations, or active disputes
We will confirm deletion within 30 days of a verified request.
Your Privacy Rights Under PIPEDA
As a Canadian resident, you have the following rights:
To exercise any of these rights, contact us at info@pipedreamsdelivered.com. We will respond within 30 days and may require identity verification.
Security
We implement the following safeguards:
- Firebase Authentication manages all passwords — we never see raw passwords
- Firestore security rules restrict data access by role and user ID
- Firebase App Check is enabled to prevent unauthorized API access
- All connections use HTTPS/TLS
- Stripe handles all payment card data under PCI-DSS standards
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at info@pipedreamsdelivered.com.
Children’s Privacy
The platform is intended for users 18 and older. We do not knowingly collect personal information from minors. If we learn we have collected data from a person under 18, we will delete it promptly.
Educational Content and Affiliate Disclosure
The platform includes DIY guides, videos, trade education resources, and supplier links. This content is informational only. Affiliate links may generate commissions for PDD at no extra cost to you. See Section 6.3 for details.
Changes to This Policy
We will update this Policy when our data practices change. We will notify registered users of material changes via in-app notice or email. Continued use of the platform after a policy update constitutes acceptance. The effective date at the top of this document reflects the most recent revision.
Contact Us
For privacy questions, access requests, corrections, or complaints: