Security
How SIAPP looks after your project data
Site photos, plans and reports are evidence. This page explains, in plain words, how they are protected, backed up, shared and deleted.

In short
The essentials
The same protections apply on Android, iPhone and the web dashboard.
HTTPS on every connection
Passwords stored only as bcrypt hashes; Google and Apple sign-in supported
Daily backups, kept for 30 days; monthly backups kept for a year
Admin, member and viewer roles on Professional and Enterprise
Share links with password and expiry
Payments handled by Google Play and the App Store
Delete your account and data yourself, any time

FAQ
Common questions
Is my data encrypted?
Every connection between the app, the website and our servers uses HTTPS (TLS), so photos, plans, notes and reports are encrypted in transit. Photos and reports are only served to signed-in users with access to the project, or through a share link you created.
How are passwords stored?
Passwords are stored only as salted bcrypt hashes; nobody at SIAPP can read them. You can also sign in with Google or Apple, in which case SIAPP never receives a password at all.
Is my data backed up?
Yes. Your account data and project files are backed up every night to a separate backup store. Daily backups are kept for 30 days and monthly backups for up to a year. When files are deleted — because you delete them, close your account, or a free-plan account stays inactive for 60 days — they also disappear from the backups as those expire, within a year at most.
Who can see my projects?
Only you, unless you share. On Professional (up to 3 team members) and Enterprise (unlimited) you invite team members into a project with a role — admin, member or viewer — and can remove them at any time. Free and Solo are single-user plans.
How do share links work?
A share link opens one report or project view without an account. You can protect it with a password and an expiry date, and links are not indexed by search engines.
Does SIAPP see my card details?
No. Subscriptions are bought and billed through Google Play or the App Store. SIAPP only receives confirmation of which plan is active, never card or bank details.
Can I delete my account and data?
Yes, from Settings in the app or on the website. Deleting your account permanently deletes your projects, photos, plans and reports and closes your profile. If you signed in with Apple, the Apple sign-in link is revoked too.
Do you delete files on the free plan?
Files on the free plan are deleted after 60 days without signing in, with an email warning at 30 days and a final one 7 days before; signing in resets the timer. Your account is kept. Paid plans are not affected.
Is the server protected against abuse?
The API uses security headers, request rate limits, input sanitising against injection, and authentication on every project endpoint. Software is updated and audited regularly.
How do I report a security issue?
Email [email protected] with the details. A person reads every report and replies.
Questions about security?
Write to [email protected] — a real person replies.
Related: Privacy policy · Terms · About SIAPP