OS Field — Privacy Policy

Last updated: June 28, 2026

1. Introduction

OS Field is a business-to-business field application provided by OS Underground LLC (“OS Underground,” “we,” “us,” or “our”) for use by our subcontractors and their field workers. The app lets a worker enroll their device using an enrollment token issued by their subcontractor, then capture jobsite photos that carry an overlaid timestamp and GPS location. Those photos and their metadata are uploaded to OS Underground servers as the subcontractor’s work record.

OS Field is not a general consumer application. It is intended only for authorized field personnel performing work on behalf of an OS Underground subcontractor.

For the data described in this policy, OS Underground acts as the data controller. The subcontractor organization to which a device is enrolled receives and uses the resulting work records.

2. What Data We Collect and Why

We collect only the information needed to operate the app and produce a reliable field-work record:

Photos / user content. Photos you take with the camera, with a timestamp and GPS coordinates embedded and overlaid on the image. These photos are uploaded to OS Underground servers so they can serve as the subcontractor’s jobsite record.
Precise location (GPS). Used only while the app is in use (“When In Use”) to stamp the capture location onto your photos. We do not track your location in the background.
Device identifier. The vendor device identifier (identifier-for-vendor on iOS / Android ID on Android), used to enroll the device and keep your session active. This is not an advertising identifier.
Device information. The device name and model, used during enrollment to identify the equipment associated with your subcontractor.
Enrollment token / subcontractor association. Links your device to your subcontractor’s organization so uploaded work is attributed correctly.
Optional photo library access. Only if you turn on “save to gallery.” When enabled, it is used to save copies of your jobsite photos to your device.

3. Device Permissions

OS Field requests the following device permissions, each tied to a specific function:

Camera — to take jobsite photos. Required to use the app’s core function.
Location (When In Use) — to overlay accurate GPS coordinates on the photos you capture. Location is only accessed while you are actively using the app.
Photo Library (optional) — only requested if you enable “save to gallery,” and used solely to save copies of your photos to your device.

You may decline or later revoke any of these permissions in your device settings, though declining the camera or location permission will prevent the app from performing its core function.

We use the data above to:

Capture and produce time- and location-stamped jobsite photos.
Enroll your device and maintain your authenticated session.
Deliver your work records to the correct subcontractor organization.

Sharing. Photos and their metadata are stored on OS Underground servers (https://tools.osunderground.com) and are made available to the subcontractor organization to which your device is enrolled. We do not share this data with any other third parties except service providers that host or process the data on our behalf, or where required by law.

We explicitly do not:

Use advertising or advertising identifiers.
Sell your data to third parties.
Include third-party analytics SDKs or cross-app tracking.
Track your location in the background.
Collect your contacts, messages, or any data unrelated to your field work.

5. Storage and Security

Your session/enrollment token is stored securely on your device using the platform’s encrypted storage (Keychain on iOS / Keystore-backed storage on Android). All data transmitted between the app and OS Underground servers is sent over encrypted connections (HTTPS/TLS). Uploaded photos and metadata are stored on OS Underground’s servers with access limited to authorized personnel and the relevant subcontractor.

6. Data Retention

We retain jobsite photos and their associated metadata for as long as needed to serve as the subcontractor’s work record and to meet our legal, contractual, and operational obligations. When data is no longer required for these purposes, it is deleted or anonymized. You or your subcontractor may also request deletion as described below.

7. Your Rights and How to Delete Your Data

You can:

Disconnect your device at any time from the app’s Settings, which ends the enrollment and stops further data collection from that device.
Request deletion of your data by contacting us at the address in Section 11.

Depending on where you live, you may also have rights to access, correct, or obtain a copy of your personal data, and to object to or restrict certain processing. We will honor valid requests in accordance with applicable law. Because work records may belong to your subcontractor, some requests may be fulfilled together with the subcontractor organization.

8. Children’s Privacy

OS Field is a workplace application intended for authorized field workers. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18.

9. Legal Compliance

We aim to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for individuals in the European Economic Area and the California Consumer Privacy Act (CCPA) for California residents. This includes processing data for the legitimate business purposes described above, limiting collection to what is necessary, and honoring applicable rights requests. We do not sell personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of OS Field after an update means you accept the revised policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: privacy@osunderground.com
OS Underground LLC, South Florida — Miami-Dade