Shared work, clear access.

Information used

GroupSignOff uses your Apple sign-in identifier and the name/email supplied during sign-in (including an Apple private relay address if selected). It does not receive your Apple password.

It processes the jobs, tasks, assignments, dates, dependencies, comments, photos, documents, activity and sign-off records you or your job teammates provide. Managers may optionally record job totals and amounts paid. GroupSignOff does not process payments or generate invoices.

Purpose and access

Information is used to identify accounts, coordinate work, control job membership, store evidence, synchronize records and show in-app Updates. Each job is shared only with its accepted members; membership is controlled separately for each job. Task details, task comments, files and sign-off records are restricted to the job manager and people currently assigned to that task. Other members can see overall job progress and anonymous task status totals. Job-wide conversations and files are shared with all accepted job members and labeled accordingly. Optional payment amounts are restricted to that job’s manager account.

Invitation codes are single-use and valid for seven days. Share them only with the intended recipient. Messaging and sharing services you choose process delivery under their own policies.

Storage and providers

GroupSignOff uses Apple for Sign in with Apple and Supabase for authentication, database records and private file storage. The current Supabase project is hosted in Canada Central. The app uses the device Keychain for its sign-in session, local app settings and temporary downloaded-file caches. Photos and documents are received through system pickers when you choose to upload them.

Notifications

The current beta shows Updates inside the app and refreshes shared information automatically while active. It does not send background push notifications when closed.

Your controls and account deletion

Signing out disconnects this device; it does not delete your account or shared records. Managers can explicitly delete jobs with confirmation and remove member access.

Delete account is available in Settings. It requires explicit confirmation and confirmation with Apple. Managers must first transfer or explicitly delete every job they manage; transferring management gives the new manager access to that job’s Payments. The deletion flow revokes Apple sign-in authorization for GroupSignOff, removes the app account, and removes your comments and uploaded files. Shared job/task definitions and anonymous historical references remain so teammates can continue their work. Text written or copies saved by other people are not automatically erased. A one-way account-identifier digest is retained to block old sessions from accessing shared work. This does not delete your Apple ID or iCloud account.

Contact debrito@yahoo.com with privacy questions or requests. Do not include passwords or invitation codes. Deletion removes personal content from the live app service. Previously downloaded or exported copies cannot be recalled from recipients. We do not promise a fixed timeline for removal from any provider backups; contact support for available retention information.

Changes

This policy describes the current development beta and may change as features are completed. The date above identifies the current revision.