Privacy Policy

Effective October 25, 2026

The short version

LawnClock helps lawn and landscape companies log when their crews arrive at and leave job sites, and send quotes and invoices.
The phone app uses location only to detect arrivals and departures at the job sites a worker is assigned to. It records a location at those moments. It does not record a continuous trail of where you go.
Card and bank numbers are typed only on Stripe's own pages. We never see or keep them.
We don't sell personal information, show ads or use advertising trackers.
Text messages go only to crew members who sign up themselves, and mobile information is never shared or sold to third parties or lead generators.
Each company controls the information about its own workers and customers. If you work for, or are a customer of, a company that uses LawnClock, that company decides how your information is used.

Who we are
Companies, workers and customers
Information we collect
Location data from the mobile app
How we use information
Who we share it with
Cookies
How long we keep it
Security
Your choices and rights
Deleting your account
Children
Changes to this policy
Contact us

1. Who we are

LawnClock (the website at lawnclock.com and the LawnClock apps for iPhone and Android) is operated by CostingPlus.com Inc., 12643 Williston Road, Suite 2, Alden, NY 14004, USA ("we", "us"). This policy explains what information LawnClock handles and why.

2. Companies, workers and customers

LawnClock is used by businesses. We call the business that signs up a Company. Three kinds of people show up in LawnClock:

Company owners and admins create the account and manage it.
Workers are the crew members an admin adds. They sign in to the mobile app so their arrivals and departures are logged.
Customers are the Company's own clients. They receive quotes, invoices and statements and may view them through a link. If the Company turns on its customer portal, they can also sign in to see their own invoices, quotes, visits and job photos, ask for service, update their phone and address, pay by card or bank, and turn on autopay.

We process information about workers and customers on behalf of the Company, following the Company's instructions and our Terms of Service. The Company is responsible for having a lawful basis to collect it. That includes telling its workers about location logging and getting any consent the law requires. If you're a worker or a customer, please send questions or requests about your information to the Company first. We will help them respond.

3. Information we collect

What	Examples	Where it comes from
Account information	Name, email address, phone number (optional), role, the language you choose for your pages and emails (English or Spanish), password and sign-in PIN if one is set (both stored only as one-way hashes), when you agreed to job-site tracking, and a pesticide applicator license number if the Company adds one	You, or the admin who created your login
Text message sign-up	Only for people who sign up for texts: the cell number they gave, when they signed up or stopped, the wording they agreed to, and the IP address they signed up from	The person, in their own Settings (or replying STOP)
Company information	Company name, time zone, billing address, phone and email, invoice and quote settings, the payment link the Company chooses, route start point	Company admins
Job sites and schedules	Property names, addresses, map coordinates, geofence radius, crews, visit schedules, notes	Company admins
Shifts and time off	Planned shifts (day, hours, crew for the day, notes) and time-off requests: the dates, the kind (vacation, personal, sick, unpaid or other), any note the worker adds, and the Company's answer	Company admins, and workers when they ask for time off
Work records	Arrival and departure times at each job site, the location and accuracy recorded at that moment, distance from the site, device type (iPhone or Android), manual time entries and notes; job checklist items ticked off at a job, by whom and when; records of fertilizer, weed control or other products applied at a job site (product, amount, area, target, temperature and wind, who applied it and their license number)	The worker's mobile app, or an admin
Hire and leave records	The days a worker started and left, how they left (for example end of season or quit), and dated notes the Company's owner or admins write, with who wrote them. Workers can't see them.	Company owners and admins
Injury and damage reports	When someone reports a work injury: who was hurt, when and where, what happened, the part of the body and the treatment (health information), photos, and the Company's follow-up (days away from work, notes). When something is damaged: what, whose, photos, and the cost. Only the Company's owner and admins see them.	Workers and admins who report them, and the Company's follow-up
Job site photos	Before and after photos the crew take at a job, with the job site, the day and who took it. Where a photo was taken isn't kept in it.	Workers, in the mobile app
Problem reports	When someone uses "Report a problem": what they wrote, an optional screenshot, and app details (app version, phone model and system, language, whether logging is on, the phone's location permissions, how many entries are waiting to upload). Never a location.	Anyone who sends one; it goes to LawnClock, not to the Company
Purchases	Purchases workers log (such as fuel, oil, parts and materials): date, amount, store, category, note, the property it was for, whether it was paid with the worker's own money and when it was paid back, and any receipt photo taken or chosen in the app	Workers and admins
Contacts	People a Company keeps on its contact list who aren't customers: employees (name, email, phone, address, job title, start date, pay rate, an emergency contact's name and phone), subcontractors (company, trade, how and what they're paid, when their insurance ends, whether the Company has their W-9, and the payments recorded to them) and suppliers. No Social Security or tax ID numbers are kept: columns with them are left out of an import, and notes that look like one are refused.	Company admins, typed in or imported from a file
Pay and pricing	Worker hourly rates, prices for services, labor cost totals	Company admins. Workers can't see prices or other workers' rates.
Customer information	Customer names, email addresses, phone numbers, billing addresses; the language a Company chooses for a customer's quotes and invoices (English or Spanish); quotes and invoices; photos a Company adds to a quote, with their captions; a customer's typed name and response when accepting or declining a quote; emails a Company sends to its customers in bulk (news and offers), who they went to, and whether a customer unsubscribed from them	Company admins, and customers themselves on the quote page
Connected mailbox	If a Company's owner connects the Company's own Gmail or Outlook mailbox so its emails go out from that address: the mailbox's email address, which provider it's with, who connected it and when, and a sign-in issued by Google or Microsoft that lets LawnClock send email from that mailbox. The sign-in is stored encrypted. We never receive or store the mailbox's password, and we can't read the mailbox.	The Company's owner, and Google or Microsoft when the owner gives permission
Customer portal	The email address a customer signs in with, the one-time sign-in links we email them (kept only as a one-way hash), their sign-in sessions (with the IP address and when they were last used), service requests they send and phone or address changes they make	Customers, when they use the portal
Card and bank payments	When a customer pays a Company through Stripe: the invoice, the amount, whether it was by card or bank, its status (paid, on its way, refunded, disputed), Stripe's reference numbers, and the card's brand, last 4 digits and expiry month. With autopay: Stripe's reference to the saved card, that card's brand, last 4 digits and expiry, and when and from which IP address the customer agreed, with the words they agreed to. For the Company: Stripe's reference to its Stripe account and what Stripe reports about it (whether it can take payments, what Stripe still needs)	Stripe, and the customer when they agree to autopay
Property measurements	With the Property Measure add-on: the outlines a Company draws on the map and their areas, and for a property looked up, its parcel outline, lot size, parcel number and owner of record, and roof faces	Company admins, and the providers below
Technical information	IP address, sign-in times, session identifiers, the date a customer first opened an invoice or quote link, basic server and error logs	Automatically, when LawnClock is used

We do not collect or store card numbers or bank account numbers. When a customer pays by card or bank, they type those details on Stripe's own page, and the money goes to the Company's own Stripe account; Stripe's privacy policy applies there. When a Company uses its own payment link instead, "Pay now" takes the customer to that provider (for example PayPal or Square), whose privacy policy applies.

If a Company's owner subscribes to the Equipment Service Log add-on by card, the card is entered on Stripe's own page, not on LawnClock. We never see or store the card number. We keep only what we need to run the subscription: Stripe's reference numbers for the Company and its subscription, whether it is paid up, how it's billed, and its renewal date.

4. Location data from the mobile app

The mobile app's main job is recording when a worker arrives at and leaves an assigned job site, without anyone having to tap a button. Here's exactly how that works:

Tracking is only for job sites. Before anything is logged, the app shows you how it works and asks you to tap I agree. We record the date and time you agreed. You can turn logging off at any time on the Tracking tab, and nothing is recorded while it is off.
After you sign in and turn on automatic logging, the app asks your phone to watch for entry to and exit from a circle (a "geofence") around each job site you are assigned to.
Your phone's operating system (iOS or Android) does the watching. It can do this in the background, even when the app is closed or not in use. That's why the app asks for "Always" or "Allow all the time" location permission.
When you enter or leave a job site's circle, the app records the time, the job site, and the location and accuracy your phone reported at that moment. It sends that to LawnClock, or saves it and sends it later if you have no signal.
Between those moments, the app does not record or send where you are. We don't build a route history of your day.
On Android, while automatic logging is on, a notification stays in your notification bar so you always know it's on. To keep the logging running, the Android app also gets a low-power location from your phone (Wi-Fi and cell towers, not GPS) about every 5 minutes. That location isn't recorded or sent anywhere. The phone uses it only to notice that you've left a job site if the departure was missed, and to send arrivals and departures still waiting on the phone.
When you open the app with logging on, it checks your location once for the same reason: if the phone still has you at a job site you've clearly left, it records the departure at that moment. That location is sent only as part of that departure.
The app also uses your location while it's open, to show you on the map when you add or edit a job site.
If you tap The app didn't log me right to report a location problem, the app gets your location once at that moment (if your phone allows it) and sends it with the report to your Company, so they can see whether the job site's pin is in the right place. It's kept with the report.
The app also tells LawnClock whether automatic logging is on or off on your phone (not where you are), so your Company can send a reminder at the start of your day when it's off.
The app uses your camera or photo library only when you choose to add a photo: a receipt, a before or after photo at a job, a photo with an injury or damage report, or a screenshot with a problem report. Job, report and quote photos are redrawn when they arrive, which removes where they were taken. Each photo is shrunk to a smaller size before it's sent. With Scan receipt, the photo is also read automatically to fill in the purchase. It doesn't use the microphone.
The app makes a random install number the first time it opens and sends it with the app and phone software versions, so we can count installs and see which app versions are still in use. It doesn't identify the phone or include anything else about it.

The Company's owners and admins can see your arrivals, departures, time on site and hours. The recorded arrival and departure locations are used to confirm you were at the site.

Mileage log: if the Company turns it on, LawnClock works out business miles from the job sites you arrived at and the Company's shop, in the order of your arrivals that day, or from odometer readings the crew or office types. It uses only those job-site stops; it never collects any other location for it.

You can stop location logging at any time. Turn off automatic logging on the app's Tracking tab, sign out, or remove the app's location permission in your phone's settings. While it's off, arrivals and departures aren't recorded, and your Company may need to enter your time by hand.

If you tap Navigate on a stop, the app opens Apple Maps or Google Maps with the address. What happens there is covered by Apple's or Google's privacy policy.

5. How we use information

To run LawnClock: log time, build timesheets and reports, plan schedules and routes, and create and deliver quotes and invoices.
To sign you in, keep your account secure, and prevent abuse (for example, limiting repeated failed sign-ins).
To send the emails you or your Company ask LawnClock to send (quotes, invoices, temporary passwords, crew routes, shift schedules and time-off answers, and news and offers a Company sends its own customers, each with an unsubscribe link), from LawnClock's address or, if the Company has connected one, through the Company's own mailbox, and to reply when you contact us.
To fix problems, keep the service reliable, and improve it.
To comply with law and enforce our Terms.

We don't sell personal information, and we don't share it for cross-context behavioral advertising. We don't use location data for advertising or sell it to anyone.

Within a Company, owners and admins see their Company's information. Workers see only their own hours, shifts and time off, and the job sites and schedule assigned to them. Companies can't see each other's data.

We use a small number of service providers to run LawnClock. They may process information only for that purpose:

Provider	What they do
GoDaddy	Hosts the LawnClock servers, database, receipt photos and quote photos in the United States
Cloudflare	Secure connection (HTTPS), network protection and delivery of the website
Anthropic	Reads receipt photos when someone uses Scan receipt (LawnClock Pro), to fill in the store, date, amounts and categories. Only the photo is sent. Anthropic processes it to return the result and does not use it to train its models.
Twilio	Only for people who signed up for text messages: delivers those texts. We send Twilio the cell number and the message, nothing else.
Mailgun	Delivers the emails LawnClock sends, such as quotes and invoices, to their recipients
Google (Gmail) and Microsoft (Outlook)	Only when a Company has connected its own mailbox: deliver the emails that Company sends through it. Each email (who it's to, the subject, the message and any attached quote or invoice PDF) is handed to the Company's own provider, which sends it and keeps a copy in the mailbox's Sent folder under the Company's agreement with that provider.
Stripe	Takes card payments for LawnClock plans and add-ons, on its own secure pages: we give Stripe the Company's name and the account owner's name and email so it can make the subscription and send receipts. When a Company connects its own Stripe account to take payments, Stripe also handles its customers' payments: we give Stripe the Company's name and the account owner's email to set up the account, and for each payment the invoice number and amount and the customer's name and email. Stripe handles card and bank details under its own privacy policy, and the Company's Stripe account is between the Company and Stripe.
Regrid	Only with the Property Measure add-on, when someone looks up a property's lines: we send the property's map location and receive its parcel outline, lot size, parcel number and owner of record
Google Maps	Only when a Company uses the mileage log with road miles: works out the driving distance between two places (a job site and the next one, or the shop). Only the two places' map coordinates are sent, never who drove or when. With the Property Measure add-on: satellite map pictures of a property, and roof measurements (Google's Solar API), from the property's map location.
OpenStreetMap	Map images and address search on the website. Your browser requests map tiles, and any address you search for, directly from OpenStreetMap servers.
Apple and Google	Deliver the mobile app. Their operating systems provide location and geofencing.

If a Company chooses Send from my email, the message goes out through the Company's own email provider (for example Gmail or Outlook), under that provider's terms.

Connected mailboxes (Gmail and Outlook). A Company's owner can connect the Company's own mailbox so its quotes, invoices, payment reminders and crew emails are sent from that address. Here is exactly what that involves:

The owner signs in on Google's or Microsoft's own page and gives LawnClock one permission: to send email on their behalf. We also receive the mailbox's email address, so we can show which mailbox is connected.
We can't read, search, change or delete anything in the mailbox, and we don't see its contacts or calendar. We don't ask for those permissions.
We use the permission only to send the emails the Company asks LawnClock to send. We don't use it, or anything we receive from Google or Microsoft, for advertising, to build profiles, or to train AI or machine-learning models, and we don't sell it or pass it to anyone else. Nobody at LawnClock reads the emails sent this way, except when the Company asks us to look into a problem, when it's needed for security (such as investigating abuse), or when the law requires it.
The sign-in is stored encrypted and is deleted when the owner clicks Disconnect or the Company's account is deleted. The owner can also remove LawnClock's access at any time in their Google or Microsoft account.
If the mailbox refuses an email, LawnClock sends it the usual way instead (through Mailgun, above) so it still arrives.

LawnClock's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If a Company has the Equipment Service Log add-on, opening it from LawnClock signs the person in at equipmentservicelog.com, another CostingPlus.com Inc. product. That's the owner, an admin, or a worker the Company has ticked as maintenance crew. To do that, LawnClock tells it who is signing in: their name, email and role, the Company's name, and the account owner's name and email. While they're signed in there, it also checks back with LawnClock that they are still allowed to be. Service records logged there show the name of the person who logged them to others in the same Company. For the Equipment maintenance card on the Home page, LawnClock asks the Equipment Service Log for a short summary of that Company's own records: how many jobs are due, the machines and jobs concerned, and the latest services with who logged them. No location data, customer data or pay rates are sent. Equipment records entered there are kept by the Equipment Service Log under its own terms.

If a Company has Our Game Plans, opening it from LawnClock signs the person in at ourgameplans.com, another CostingPlus.com Inc. product, and tells it their name and email and the Company's name, so it can set up their account there.

Text messages (SMS). LawnClock texts a crew member only if they signed up themselves, in their own Settings, with an unticked box they tick (their employer can't do it for them). The texts are alerts about urgent jobs their employer picked them for (and whether the job was taken or called off), and a reminder when automatic logging is off on their phone during their work hours. Message frequency varies. Message and data rates may apply. Reply STOP to stop, HELP for help. We use the cell number only to send those texts. Mobile information, including phone numbers and text message consent, will never be shared or sold to third parties, affiliates or lead generators for marketing or promotional purposes. Twilio delivers the texts and may use the number only for that. Full details: Text messages.

We may also disclose information if the law requires it, to protect the rights, safety or property of our users, the public or us, or as part of a merger, acquisition or sale of assets. In a sale, this policy would continue to apply to the information transferred.

7. Cookies

The LawnClock website uses one cookie of its own, a sign-in cookie that keeps you logged in. It expires after 12 hours of inactivity or when you sign out. Customers who sign in to a Company's customer portal get a separate portal sign-in cookie, which lasts 30 days or until they sign out. Cloudflare may set a short-lived security cookie to help block bots. The website also remembers in your browser (not in a cookie) whether you chose English or Español on that device, so the sign-in page opens in that language next time; it is used only to show pages and messages in that language. We don't use advertising or cross-site tracking cookies. The mobile app keeps your sign-in token and any unsent time records on your phone.

8. How long we keep it

Company data (work records, job sites, schedules, customers, quotes and invoices) is kept while the Company's account is active, so it can use its history for payroll, billing and taxes.
When a Company closes its account, we delete its data within 30 days. Backup copies expire within a further 30 days. A Company can ask for a CSV export of its timesheets before closing.
A photo on a quote is deleted as soon as the Company removes it from the quote. Otherwise it's kept with the quote.
Job site photos are deleted after about 400 days. Problem reports are deleted 6 months after we've dealt with them, and answered location problem reports after a year. Injury and damage reports and hire and leave records are kept with the Company's data, as its records.
A connected mailbox's saved sign-in is deleted as soon as the owner disconnects it, and with the rest of the Company's data when its account is closed.
Customer portal: a sign-in link works once, for 30 minutes. A portal sign-in lasts 30 days, or until the customer signs out, the Company turns the portal off or changes their email. Counts of sign-in requests per internet address are kept for a day, to stop abuse.
Payment records (what was paid, how, and its status) and autopay agreements are kept with the Company's data, as its records; a saved card itself is kept by Stripe, not by us. When autopay is turned off, the saved card's reference is no longer used.
Sign-in sessions expire after 90 days on the phone, or 12 hours of inactivity on the web. Sign-in attempt records (email and IP address) are deleted after 30 days.
One free trial per business: when a Company signs up, we keep a one-way scrambled copy (a hash) of the owner's email address and which of our sites it signed up on, so the same business can't start a second free trial. The email can't be read back from it, and it stays after the account is deleted. We also keep the IP address the Company signed up from with its account, to spot repeat sign-ups; the copy kept with the hash is removed 6 months after sign-up.
We may keep limited information longer when the law requires it, or to resolve disputes.

9. Security

All connections use HTTPS. Passwords and PINs are stored only as one-way hashes, and repeated wrong guesses are blocked. Every Company's data is kept separate, and each request is checked against the signed-in user's Company and role. Invoice and quote links contain a long random code that can't be guessed, and draft documents aren't viewable at all. Anyone who has a quote's link can see the photos on that quote. Photos added to a quote are redrawn as they arrive, which removes details a camera stores inside the file, such as where the photo was taken. No system is perfectly secure, though. Please use a strong, unique password, and keep invoice and quote links private.

10. Your choices and rights

Company admins can view, correct and export their Company's information in LawnClock, and can disable workers or archive customers and job sites. To permanently delete a particular person's information, email us and we'll do it on the Company's instructions.
Workers can see their own hours in the app, turn location logging off at any time, and change their password or PIN. For corrections or deletion of work records, contact your Company. Those records may be needed for pay.
Customers should contact the Company that sent the quote or invoice. A customer can stop a Company's bulk emails (news and offers) with the unsubscribe link in each one; invoices, quotes and receipts still come.

Depending on where you live, you may have the right to know what personal information we hold about you, and to ask for it to be corrected, deleted or copied. You also have the right not to be discriminated against for using those rights. To make a request, email [email protected]. We'll verify your request and respond within the time the law requires. Where we hold the information on behalf of a Company, we'll refer your request to it or act on its instructions.

11. Deleting your account

You can delete your account yourself, any time: Delete my account (also in Settings on the website and in the phone app). You'll be asked to sign in, then for your password (or sign-in PIN) to confirm. A company owner deleting the company needs the password, and the two-step code if two-step sign-in is on.

Company owners: deleting your account deletes your Company's whole LawnClock account, for everyone in it, right away: every login, job site, schedule, time record, purchase, receipt photo, customer, quote and invoice. Card subscriptions are cancelled first, so nothing more is charged, and the Company's customer record at Stripe (with any saved card) is deleted. Backup copies expire within 30 days. It can't be undone, so export your timesheets first if you need them.

Workers and office staff: deleting your account deletes your login right away: your email address, cell number, password, sign-in PIN, two-step sign-in, phones signed in, upcoming shifts and time-off requests still waiting for an answer. Your Company keeps the hours and purchases you already logged, which it needs for payroll, with your name on them marked "(deleted)". To have those deleted too, ask your Company, or email [email protected] and we'll work with your Company on the request.

Deleting the app from your phone stops location logging but doesn't delete your account. If you can't sign in, email [email protected] from the email address on the account.

12. Children

LawnClock is a business tool and isn't directed to children. We don't knowingly collect personal information from children under 13. Company accounts must be opened by adults. If a Company adds a worker under 18, the Company is responsible for any consent the law requires. If you believe a child under 13 has given us information, contact us and we'll delete it.

13. Changes to this policy

We may update this policy as LawnClock changes. We'll post the new version here with a new effective date. If the changes are significant, we'll tell Company owners by email or in the app before they take effect.

14. Contact us

CostingPlus.com Inc. (LawnClock)
12643 Williston Road, Suite 2
Alden, NY 14004, USA
[email protected] · 716-714-9933