Privacy Policy

Last updated 11 August 2026 · CNR Nexus Consulting Inc.

Veriyard is a construction record-keeping app operated by CNR Nexus Consulting Inc., a company incorporated in Saskatchewan, Canada. This policy explains what we collect, why we hold it, who can reach it, and what you can ask us to do with it.

The short version: we collect what the app needs to keep your project record, we do not sell it, we do not advertise, and we do not use your receipts or project data to train anything.

1. Who we are

The data controller is CNR Nexus Consulting Inc., Saskatoon, Saskatchewan, Canada. For any privacy question or request, write to privacy@veriyard.com.

2. What we collect

Information you give us

Account details. Your email address, and a display name if you set one. We use email to sign you in, verify your address, and send service messages.
Project content. Projects, phases, budgets, contracts, expense entries, amounts, currencies, categories, dates and notes that you or the people you invite enter.
Receipt images. Photographs of receipts and related documents you upload against an entry.
Transfer records. Amounts you record as sent and received, and the exchange rate for each transfer.
People you invite. The email address of anyone you invite to a project, and the role you assign them.
Messages to us. Anything you send to our support address.

Information collected automatically

Authentication and session data, so you stay signed in and we can detect suspicious sign-ins.
A push notification token, if you allow notifications, so we can alert you to activity on your projects.
Basic technical data such as app version, device type and operating system version, used to diagnose faults.
Purchase records if you buy a Project Pass or subscription, handled by the app store and our payments provider.

We do not collect your location, your contacts, your photo library beyond the images you choose to attach, or advertising identifiers. Veriyard contains no advertising and no third-party analytics or tracking SDKs.

3. Why we hold it

Purpose	What it covers
Providing the service	Storing and displaying your projects, entries, receipts, budgets and approvals; syncing across devices.
Account security	Signing you in, verifying your email, enforcing who can reach which project.
Notifications	Telling you when an entry is added, approved or queried on a project you belong to.
Payments	Recording whether a project has an active Pass, and honouring refunds.
Support and faults	Answering your questions and diagnosing problems you report.
Legal obligations	Meeting tax, accounting and lawful-request requirements.

Our lawful basis is performance of our contract with you, our legitimate interest in keeping the service secure and working, your consent where you grant it (notifications, camera access), and compliance with law.

4. Who can see your data

Access inside Veriyard is enforced on our servers, not merely hidden in the interface.

You see everything on the projects you own.
People you invite see only the projects you grant them, at the level of access you assign. A supervisor can add to the record and cannot rewrite or erase it.
Nobody else's project is reachable from your account, and yours is not reachable from theirs.

We do not sell your personal information, and we do not share it with advertisers or data brokers. A small number of our staff can access production data only where it is necessary to investigate a fault or a support request you have raised.

5. Service providers

We rely on a short list of processors, each bound to handle data only on our instructions:

Provider	Role	Region
Supabase	Database, authentication, and private file storage for receipts	Cloud hosting
Google (Firebase Cloud Messaging)	Delivering push notifications to Android devices	United States
Expo	App build and delivery infrastructure	United States
Resend	Sending account and verification emails	United States
Cloudflare	Website hosting, DNS and email routing	Global network
Google Play / Apple	Processing purchases	Per store terms

We never send your card details anywhere ourselves. Payments are handled entirely by the app store; we receive only confirmation that a purchase succeeded.

6. International transfers

Veriyard is built for people managing a build in one country from another. Your data may therefore be stored or processed outside your own country, including in Canada, the United States and the European Union, depending on our providers' infrastructure. Where data leaves a jurisdiction with data-protection law, we rely on the safeguards our providers offer, including standard contractual clauses.

7. How long we keep it

Project data and receipts are kept while your account is active, because the point of the record is that it survives the build.
Deleted entries remain visible in your project's history, struck through and attributed, because a record that can be silently erased is not evidence. You can delete a project outright, which removes its entries and receipts.
Account deletion removes your personal data and content within 30 days, except where we must keep transaction records for tax and accounting purposes.
Backups are retained for a limited period and then overwritten.

8. Your rights

Wherever you live, you can ask us to:

Give you a copy of the personal data we hold about you
Correct anything inaccurate
Delete your account and its content
Export your project record, which you can also do yourself at any time from the app
Withdraw consent for notifications or camera access, from your device settings

Write to privacy@veriyard.com and we will respond within 30 days. If you are in Canada and are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada. If you are in Nigeria, you may contact the Nigeria Data Protection Commission. If you are in the UK or EU, you may complain to your national supervisory authority.

9. Security

All traffic between the app and our servers is encrypted in transit, and data is encrypted at rest by our hosting provider.
Receipt images are held in private storage. They are not publicly addressable and are served only to accounts entitled to that project.
Row-level security rules run on the database itself, so an account cannot reach another workspace's records even if the app were modified.
Server-side secrets are never shipped inside the app.

No system is perfect. If a breach affects your personal data, we will notify you and the relevant regulator as required by law.

10. Children

Veriyard is a tool for managing construction spending and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, write to us and we will delete it.

11. Changes to this policy

If we change this policy materially, we will update the date at the top and notify you in the app or by email before the change takes effect. Continuing to use Veriyard after that means you accept the revised policy.

12. Contact

CNR Nexus Consulting Inc.
Saskatoon, Saskatchewan, Canada
Privacy: privacy@veriyard.com
Support: support@veriyard.com