Privacy policy
Last updated: May 19, 2026
MulchDeck is operated by Crux Labs ("we", "us"). This policy explains what data we collect, why, and what we do with it. We wrote it in plain language because nobody reads legalese.
What we collect
- Account info: name, email, password (hashed, we never see it in plain text).
- Company info: company name, logo if you upload one.
- Job data: job names, addresses, customer names, estimates, daily logs (hours, fuel, teeth), invoices, photos. This is your business data. You own it.
- Usage data: we use Plausible Analytics (privacy-friendly, no cookies, no personal data) to understand which features get used. We do not use Google Analytics.
- Device info: we store a device token if you check "remember this device" during login. It skips the verification code next time. You can revoke it by changing your password.
What we do NOT collect
- We do not sell your data. Ever. To anyone.
- We do not run ads or share data with ad networks.
- We do not track you across other websites.
- We do not use your job data to train AI models.
Where your data lives
Your data is stored on servers in the United States. Photos and documents are stored in Cloudflare R2 (object storage). The database is PostgreSQL. Offline data syncs via PowerSync when your device reconnects.
Who can see your data
Only members of your company can see your company data. We (Crux Labs) can access it for support and debugging, but we do not look at your data unless you ask us to help with something.
Data export and deletion
You can delete your account from the app. Deleting your account removes your user record and all associated data. If you are the sole owner of a company with no other members, the company and all its data are deleted too.
If you need a data export, email us at [email protected].
Cookies
We use one authentication cookie to keep you logged in. We use Plausible for analytics, which does not use cookies. That is the full list.
Third-party services
- Resend: sends verification codes and password reset emails.
- Plausible Analytics: privacy-friendly usage analytics. No cookies, no personal data.
- Google Maps: satellite imagery and address search in the estimate engine. Subject to Google's privacy policy.
- PowerSync: offline-first data sync between your devices and our servers.
- Cloudflare R2: photo and document storage.
Changes to this policy
If we change this policy, we will update the date at the top. For significant changes, we will notify you by email.
Contact
Questions about privacy? Email [email protected].
Frequently asked questions
Does MulchDeck sell my data?
No. MulchDeck never sells or shares your data, never runs ads or shares data with ad networks, and never uses your job data to train AI models.
What data does MulchDeck collect?
Account info (name, email, and a hashed password we never see in plain text), your company and job data (jobs, addresses, customers, estimates, daily logs, invoices, and photos), and privacy-friendly Plausible analytics that use no cookies and no personal data.
Can I delete or export my data?
Yes. You can delete your account and all associated data from the app at any time. If you are the sole owner of a company, the company and its data are deleted too. For a data export, email [email protected].
Where is my data stored?
On servers in the United States. Photos and documents are stored in Cloudflare R2, the database is PostgreSQL, and offline data syncs via PowerSync when your device reconnects.
Does MulchDeck use cookies?
Only one authentication cookie to keep you logged in. Analytics run through Plausible, which uses no cookies. That is the full list.