Privacy policy
This policy applies to the True Metal Supply contractor app
(com.truemetalsupply.contractor) on the App Store and Google Play,
and to the backend service the app talks to. It does not cover the True Metal
Supply website, which has its own policy.
Last updated: 21 August 2026.
The short version
- We do not track you across other apps or websites.
- We do not show advertising, and we do not use your data for advertising.
- We do not sell your personal information.
- The app contains no analytics, attribution, or advertising software.
- The app never reads your device location, camera, photos, contacts, or calendar.
Everything below is collected to make the app work — to sign you in, price and place your quotes and orders, measure the roofs you ask us to measure, and tell you when something you are waiting on is ready.
Who we are
True Metal Supply, LLC operates this app and is the controller of the personal information described here. For any privacy question, or to exercise a right described below, email customerservice@truemetalsupply.com or write to us:
True Metal Supply, LLC
1745 Louisville Drive
Knoxville, TN 37921
United States
What we collect
Information you give us
| What | When |
|---|---|
| Email address and password | When you create an account and each time you sign in. Passwords are handled by our authentication provider and stored only as a secure hash; nobody at True Metal Supply can read your password. |
| Your phone number | At sign-up. We use it to call or text you about your account and your quotes — for example while your new account is being set up. We do not send you a verification code, and we do not use it for marketing. |
| Your name | Optional, at sign-up. You can use the app without giving it. |
| Your company name | At sign-up. |
| Quote requests | Before your account is active, you can send us a list of products and quantities to price, along with contact details (your name, phone number, and email — pre-filled from your account, and you can change them). Our staff see the request to price it. The product list stays with your company’s record; if you delete your account, your contact details are removed from it. |
| Job-site addresses | When you request a TrueView measurement for an existing building. |
| Precise map coordinates | When you drop the crosshair on a roof in the aerial picker. These are the coordinates of the building you are asking us to measure, not of you or your device — see “About location” below. |
| Content you write | Job names on quotes, notes on measurement requests, and messages you send our estimators in a request thread. |
| Files you upload | PDF construction plans you attach to a measurement request. These are stored in private storage and are never publicly readable. |
Information collected automatically
| What | Why |
|---|---|
| A user ID | An internal identifier for your account, so your work is linked to you and your company. |
| A push notification token and whether your device is iOS or Android | So we can notify you when a quote is ready or a request needs your input. Collected only if you allow notifications when your device asks. If you decline, no token is collected and nothing is sent. |
| Your IP address | Recorded in our server logs for every request, and used to rate-limit abusive traffic. This is standard server diagnostic and security logging. |
| App version information | Your platform and app version, sent when the app checks for updates. |
Your catalog search history and the home-screen tiles you dismiss are stored only on your own device and are never sent to us.
About location
The app never asks for or reads your device location. There is no GPS permission, and the app contains no location software.
We do collect precise coordinates, and we declare them as precise location data on the App Store and Google Play, because they identify a specific building. They come from you placing a crosshair on an aerial photo of a roof you want measured. They describe that property, not your whereabouts.
Who we share information with
We do not sell your personal information and we do not share it for advertising. We use the service providers below to run the app. Each receives only what it needs.
| Provider | What it receives |
|---|---|
| Supabase | Our database, sign-in system, and file storage. Holds your account, your work in the app, and any files you upload. |
| Mapbox | Satellite map imagery. See the section below — this one is different from the others. |
| Expo | Delivers push notifications (receives your notification token and the text of the notification) and serves app updates (receives your platform and app version). |
| Resend | Sends our email. Receives your email address, name, and company name in the notices we send our own staff, such as a new-signup alert. |
| OpenStreetMap (Nominatim) | Converts a job-site address into map coordinates. Receives the address text you typed. It does not receive your identity or your IP address, because our server makes this request, not your device. |
| Paradigm | Our order and quoting system. Receives the quotes and orders your company places, and homeowner lead details as described below. |
| Railway | Hosts our backend service. Its logs include the IP addresses described above. |
We may also disclose information if the law requires it, or to protect the rights, safety, or property of True Metal Supply, our customers, or the public.
Satellite imagery and your IP address
This is the one place the app contacts an outside company directly, so we call it out specifically.
When you use the aerial picker to find a roof, your device loads satellite map tiles straight
from Mapbox (api.mapbox.com). Those requests do not pass
through our servers, which means Mapbox receives:
- your device’s IP address, and
- the map tiles you are looking at, which indicate the location and approximate address of the property you are measuring.
Mapbox does not receive your name, your email address, your account, or anything else about you. We do not send Mapbox your identity, and Mapbox is not able to link these requests to your account from anything we provide. Mapbox’s own handling of the requests it receives is governed by Mapbox’s privacy policy.
Every other provider listed above is contacted by our servers rather than by your device, and so receives our server’s IP address rather than yours — except Expo’s update service, which your device contacts to check for app updates and which therefore also sees your IP address. It receives no location information.
Homeowner leads
The app can show contractors homeowner leads. This is information about other people, not about you, and it is worth being plain about how it moves.
Homeowners give their details to a True Metal Supply representative — not through this app. Our staff enter those details, and the representative confirms with the homeowner that their information will be passed to a roofing contractor before the lead is created. Contractors cannot create leads in the app.
- Before a contractor claims a lead, the app shows only the city, state, project type, rough size, and timeline. No name, no phone number, no street address.
- When a contractor claims a lead, the app shows them the homeowner’s name, phone number, email address if given, and street address, so they can get in touch about the work.
- Lead details are also recorded in Paradigm, our internal order and quoting system, as a record of the referral.
If you are a homeowner and you want to know what we hold about you, or you want it deleted, email customerservice@truemetalsupply.com and we will help.
Deleting your account
You can delete your account yourself, from Account (the avatar at the top right of Home) → Delete account… — available from the moment you create the account, whether or not it has been activated yet. Deletion takes effect immediately. If you cannot sign in, email customerservice@truemetalsupply.com from the address on the account and we will delete it for you.
Removed immediately when you delete:
- Your sign-in. You are signed out everywhere, and your email and password stop working.
- Your name and email address.
- Your registered devices and push notifications.
We do not keep your personal information in the app after your account is deleted.
What stays:
- Quotes and orders your company has placed with True Metal Supply. These remain in our business system as business records — they are records of your company’s transactions, not of your personal account.
Deleting your personal account does not close your company’s account with True Metal Supply and does not remove your company’s order history. Colleagues who have their own accounts keep their access.
Full detail is on our account deletion page — including where in the app you delete from, what happens if you are your company’s only owner, and how to ask us to delete the account if you cannot sign in.
How long we keep things
- Your account information — until you delete your account, at which point it is removed as described above.
- Your company’s transaction records — records of your company’s transactions with True Metal Supply are retained as business records for as long as we do business together and as required for accounting and tax purposes.
- Server logs containing IP addresses — retained for a limited period by our hosting provider for security and diagnostic purposes.
Security
All traffic between the app and our servers is encrypted in transit using HTTPS. Uploaded files are held in private storage that is not publicly readable, and are served only through short-lived links to people entitled to see them. Access to your company’s data is restricted to your company’s own users and to True Metal Supply staff who need it to do their job.
Children
This is a business app for roofing contractors. It is not directed to children, and we do not knowingly collect information from anyone under 18.
Your choices
- Notifications — decline the permission prompt, or turn notifications off in your device settings at any time. No token is collected if you decline.
- Your name — optional at sign-up.
- Job-site addresses, coordinates, notes, and files — only collected when you choose to submit a measurement request.
- Your account and personal information — delete it yourself in the app, as described above.
To ask what we hold about you, or to ask us to correct or delete it, email customerservice@truemetalsupply.com.
Your privacy rights in Tennessee and other US states
If you are a resident of Tennessee, or of another US state with a comprehensive consumer privacy law, you have the rights below. We honour these requests from any of our users, wherever they live — we do not think it is worth making you prove which state you are in to ask us a straightforward question about your own information.
- Know — confirm whether we are processing your personal information.
- Access — see the personal information we hold about you, and the categories of third parties we disclose it to.
- Correct — have inaccuracies in your personal information corrected.
- Delete — have the personal information we hold about you deleted. You can do this yourself at any time; see Deleting your account.
- Obtain a copy — receive a copy of the personal information you gave us, in a portable and readily usable format, where technically feasible.
- Non-discrimination — we will not deny you service, charge you a different price, or give you a lower standard of service because you exercised any of these rights.
Several state laws also give a right to opt out of targeted advertising, the sale of personal information, and profiling that produces legal or similarly significant effects. We do none of those things, so there is nothing for you to opt out of.
How to exercise these rights
Email customerservice@truemetalsupply.com, or write to the address above, and tell us which right you want to exercise. Send it from the email address on your account where you can — it is the quickest way for us to confirm the request is really from you. If you cannot, we will ask you for other information to verify your identity before we act, and we will use that information only to verify you.
We will respond within 45 days. If we need longer because the request is complex or you have made several, we may take up to 45 more days, and we will tell you why within the first 45.
If we decline your request
You can appeal, and we will tell you how when we give you our decision. To appeal, reply to that decision or email customerservice@truemetalsupply.com with Appeal in the subject line.
We will respond to an appeal in writing within 60 days, with our decision and a plain explanation of the reasons for it. If we deny the appeal, we will tell you how to complain to your state’s attorney general. Tennessee residents can contact the Tennessee Attorney General’s Office.
Changes to this policy
If we change what we collect, or who we share it with, we will update this page and change the “last updated” date at the top. That date is how you can tell whether anything has moved since you last looked.
This page is the current version at all times, so it is worth checking back from time to time — particularly before you start using a part of the app you have not used before.