Privacy policy

Last updated: October 20, 2026

This Privacy Policy explains how Ruck ("Ruck", "we", "us") collects, uses, shares, and protects information when you use the Ruck mobile app for iOS and Android, the Ruck web app at app.ruck.com, the Anvil wearable when paired with Ruck, and our online store at ruck.com (together, the "Services"). Ruck is a project management app for trades and field crews: you use it to track projects, to-dos, notes, photos, time and change orders, to message your team and clients, and to capture work by voice with the Ruck Chat assistant and the Anvil.

We do not sell your personal information. Information you put into the Ruck app, including your work content, voice recordings, photos and assistant conversations, is never used for advertising. Section 5 explains the separate marketing and text-message choices that apply when you shop at ruck.com.

1. Information we collect

Information you give us

  • Account information. Your name, email address, password (stored only as a salted hash), phone number if you add one, profile photo, and the workspace (organization) you create or join, along with your role in it. If you sign in with Google, we receive your name, email address and profile picture from Google.
  • Work content. Everything you and your teammates put into a workspace: projects, to-dos, notes, calendar items, time entries, materials and equipment, change orders, quotes, documents, addresses of job sites, client and partner contact details you enter, chat messages, and files you attach.
  • Photos, videos and files. Items you take with the camera, choose from your photo library, or pick from your files and attach in Ruck. When you choose from your library, the app receives only the items you pick and never browses the rest of your library. Ruck only adds to your library when you tap Save on an item.
  • Voice recordings and transcripts. When you hold the microphone button in the app or press the talk button on an Anvil, Ruck records your voice for that turn only, turns it into text, and uses the text to answer you or to create and update your records. Ruck does not listen in the background and does not record when you are not dictating, filming, or recording a conversation you started.
  • Conversation recordings (paid plans). During a site walkthrough you can choose to record a conversation, for example with a customer. Before it starts, Ruck asks you to confirm that everyone being recorded has agreed, and it records on your phone until you stop it, for up to an hour. The audio is sent to ElevenLabs to be transcribed, and the transcript is sent to Anthropic to list what was asked for, promised and measured. The audio, the transcript and that list are visible only to you. Anything you choose to add from it becomes ordinary project content that your team can see. You are responsible for telling the people you record and for getting their agreement where the law requires it.
  • Change order approvals. When someone approves or declines a change order from the link in its email, Ruck stores the name they type, their answer, any reason they give, and when they answered, and shows it to the project's team.
  • Assistant conversations. What you type or say to the Ruck Chat assistant, the assistant's replies, and the actions it takes on your behalf.
  • Payment and order information. When you buy a plan or an Anvil, your purchase is processed by Apple (App Store), Google (Google Play), or Shopify (ruck.com). We receive the plan, price, order and shipping details needed to fulfil the order and provide the plan. We do not receive or store your full card number.
  • Support and communications. Messages you send us, and your choices about which notifications you want.

Information collected when you use the Services

  • Anvil device data. The Anvil connects to your phone over Bluetooth and, for large recordings and firmware updates, over your local Wi-Fi network. Ruck stores the device's identifier, firmware version, battery and connection status, and the audio, photos and video you capture with it, which are uploaded to the project you are working on.
  • Wi-Fi network name. When you set up an Anvil, the app reads the name of the Wi-Fi network your phone is on so it can fill it in for you, and sends the network name and the password you type to the Anvil so it can upload recordings. On iOS, reading the network name requires location permission, and on older Android versions Bluetooth scanning requires location permission. Reading the network name does not record your location.
  • Where your captures were taken (optional). Location on captures is off until you turn it on in the app. When it is on, Ruck records where your phone is when a photo, video or voice note from your Anvil reaches it, or when you take a photo or video with Ruck's own camera, and stores that position with the capture so it can be shown on a map in the app and on the web. Ruck asks your phone for its position only while the app is running, one capture at a time. It never tracks you in the background or keeps a history of where you go. Photos you choose from your library or upload may also carry a location that the camera recorded in the file. A capture's location is visible to whoever can see that capture: only you for your own Ruck Chat captures, and the members of your workspace who can open the project or to-do you add it to. You can turn Location on captures off at any time in Settings. Captures that already have a location keep it until you delete them.
  • Device and diagnostic information. App version, device model, operating system, push notification token, and crash and error reports (including stack traces) so we can find and fix problems. The mobile app sends error reports only, not product analytics.
  • Usage information on the web. On the web app we collect product analytics about how features are used, such as pages viewed and buttons clicked, together with your IP address and browser type.
  • Cookies and local storage. The web app and store use cookies and browser storage to keep you signed in, remember preferences such as theme, run your cart, and measure usage. You can clear or block cookies in your browser, although some features will stop working.

Information from services you connect

If you choose to connect another service, we receive the data that service shares with your permission: Google Calendar and Gmail (see "Google user data" below), and construction platforms such as Procore, Autodesk Construction Cloud and JobTread (the project, to-do and contact records you choose to sync).

2. How we use information

  • To provide the Services: store and sync your workspace, show it to the teammates you share it with, send the messages, quotes and change orders you ask us to send, and deliver notifications.
  • To power voice and AI features: transcribe your voice notes, read replies aloud, answer questions about your work, and create or update records when you ask the assistant to.
  • To pair, configure and update your Anvil.
  • To show where your photos, videos and voice notes were taken, when you turn on Location on captures.
  • To process purchases, manage subscriptions and seats, and ship hardware.
  • To keep the Services secure, prevent abuse and fraud, and enforce our Terms of Service.
  • To diagnose crashes and errors and to improve the Services.
  • To communicate with you about your account, billing, security and changes to the Services.
  • To comply with legal obligations.

We do not use your workspace content, voice recordings or assistant conversations to train our own or anyone else's general-purpose AI models.

3. How voice and AI processing works

  • On-device first. On every plan, Ruck can transcribe speech and read replies aloud on your phone without sending audio off the device. Your phone's built-in speech recognition, provided by Apple or Google, may also be used when you dictate, under their own privacy terms.
  • Cloud voice (paid plans). On a paid plan with a connection, audio for transcription (including conversation recordings you start) and the text of replies to be spoken are sent to ElevenLabs, our speech provider, which returns the transcript or audio.
  • AI assistant. When you use Ruck Chat, the content needed to answer you (your message, relevant workspace records and attachments, and recent conversation) is sent to Anthropic, which provides the AI model. If a question needs current information from the web, the search query is run through Anthropic's web search tool.
  • These providers process the data only to provide the service to us and are contractually prohibited from using it to train their models.

4. How we share information

We share information only as described here:

  • With your workspace. Content you add to a workspace is visible to the members of that workspace according to their roles and project access. Messages you send to clients or partners are visible to them.
  • With service providers who process data on our behalf, under contracts that limit their use of it:
    • Convex (application database, file storage and backend hosting)
    • Anthropic (AI assistant and web search)
    • ElevenLabs (cloud speech-to-text and text-to-speech)
    • Google (Sign in with Google, Google Calendar, Gmail, Google Maps Places address lookup, and the map of your captures on Android)
    • Apple and OpenFreeMap (the map of your captures on iPhone and on the web; like any map, they receive the area of the map you are viewing)
    • Twilio (SMS messages)
    • Brevo (email delivery)
    • Expo, Apple Push Notification service and Firebase Cloud Messaging (push notifications)
    • PostHog (crash and error reports, and web product analytics)
    • RevenueCat, Apple and Google (in-app subscriptions)
    • Shopify (online store, checkout, subscriptions and order fulfilment)
  • With services you connect, such as Procore, Autodesk or JobTread, when you ask us to sync with them.
  • For legal reasons, when required by law or legal process, or to protect the rights, safety or property of Ruck, our users or others.
  • In a business transfer, such as a merger, acquisition or sale of assets, with notice to you.
  • With your consent, in any other case.

5. Shopping at ruck.com, marketing and text messages

Relationship with Shopify. Our online store at ruck.com is hosted by Shopify, which collects and processes personal information about your visit and purchases in order to provide and improve the store for you. Information you submit in the store is shared with Shopify and with third parties that may be located in other countries. We use certain Shopify enhanced features that combine information from your interactions with our store, with other merchants and with Shopify, and for those features Shopify is responsible for processing your personal information, including responding to your requests to exercise your rights. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Marketing. When you shop at ruck.com, we may use your contact and store activity information to send you marketing emails and to show you advertising for our products, and Shopify supports personalized advertising with third-party services based on your activity across merchants and websites. You can opt out of that sharing here, and you can unsubscribe from marketing emails using the link in any of them. If you visit ruck.com with the Global Privacy Control signal enabled, we treat it as a request to opt out for that browser and device, and for your Shopify account if we can associate the signal with it. We do not recognize other "Do Not Track" signals. None of this uses information from the Ruck app.

Mobile information and text messaging. If you provide your mobile phone number and opt in to receive text messages from us, we use that number to send the messages described in our SMS Terms, including follow-up on carts or quotes you did not complete, order and delivery updates, and occasional offers. Consent to receive text messages is not a condition of any purchase.

We do not sell, rent, or share mobile phone numbers or SMS consent with third parties or affiliates for their own marketing or promotional purposes. Mobile numbers are shared only with the service providers that operate our messaging program on our behalf, and only for the purpose of delivering those messages.

You may opt out at any time by replying STOP to any text message from us. For help, reply HELP, call 435-654-6688, or email Office@wasatchtimber.com. Message frequency varies and message and data rates may apply.

Text messages that you or your teammates send to clients from inside the Ruck app, and the account and security texts we send you, are not marketing and are not part of this program.

6. Google user data

When you choose to connect your Google account, Ruck requests only the access its features need:

  • Google Calendar (create and manage Ruck's own calendar). Ruck creates one secondary calendar named "Ruck" in your Google Calendar and mirrors your Ruck tasks onto it as events. Ruck can read, change, and delete events only on that calendar. It cannot modify or delete anything on your other calendars.
  • Google Calendar (read your events). Ruck reads the events on your existing calendars so it can display them in the Ruck calendar as read-only busy blocks, giving you scheduling context alongside your project work. Ruck stores each event's title, start time, end time, and identifier for this purpose. It never edits those events and never converts them into Ruck tasks.
  • Gmail (send only). If you connect Gmail, Ruck sends client-facing messages you initiate, such as quotes, change orders, and messages you approve, from your own address. Ruck cannot read, search, or modify your mailbox.

How this data is stored and shared. OAuth tokens are encrypted at rest with AES-256-GCM and are never exposed to the client or to other users. Calendar event data is stored only for your own account and is visible only to you. Ruck does not sell Google user data, does not use it for advertising, does not use it to train generalized artificial intelligence or machine learning models, and does not transfer it to third parties except as needed to provide the feature you enabled, to comply with law, or as part of a merger or acquisition with notice to you. No humans read your Google user data except with your explicit permission for a support request you raise, or where required by law.

Retention and deletion. Disconnecting Google Calendar or Gmail in Settings revokes Ruck's access at Google and deletes the stored tokens and cached calendar events. Deleting your Ruck account removes them as well.

Limited Use. Ruck's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data retention and deletion

  • We keep your account information for as long as your account exists.
  • Workspace content is kept for as long as the workspace exists, because it belongs to the workspace and your teammates rely on it. Deleted attachments are removed permanently 30 days after deletion.
  • A conversation recording, with its transcript, is kept until you delete it, its project is deleted, or you delete your account.
  • Deleting your account. You can delete your account at any time in the app (Account, then Delete account) or at app.ruck.com/account-deletion. We then sign you out everywhere, delete your sign-in credentials, push tokens and personal records, revoke any Google, Procore or Autodesk access you granted, and remove your name and contact details from your profile. Content you contributed to a shared workspace, such as messages and to-dos, stays with that workspace and is shown as written by "Deleted User".
  • We may keep limited records where the law requires it, such as purchase and tax records, or to resolve disputes and prevent fraud.

8. Security

All data is encrypted in transit using TLS. Third-party access tokens are additionally encrypted at rest. Access to production data is limited to staff who need it to operate and support the Services. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach as required by law.

9. Your choices and rights

  • Device permissions. You can turn off microphone, camera, photos, Bluetooth, location and notification access in your phone's settings at any time. Features that need that access will stop working until you turn it back on.
  • Notifications. You can choose which notifications you receive, and by which channel, in Settings.
  • Connected services. You can disconnect Google, Procore, Autodesk or JobTread in Settings.
  • Access, correction, deletion and portability. You can view and edit most of your information in the app. Depending on where you live, including California and other US states, you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to not be discriminated against for exercising these rights. To make a request, contact us using the details below. We will verify your identity before acting on it, and you may use an authorized agent.
  • Sale and sharing. We do not sell personal information, and we never share information from the Ruck app for cross-context behavioral advertising. For the store at ruck.com, see section 5 for how to opt out of advertising-related sharing.

10. Children

The Services are designed for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

11. Where we process data

Ruck is based in the United States, and our service providers process data in the United States and other countries. If you use the Services from outside the United States, your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date, and if a change is material we will notify you in the app or by email before it takes effect.

13. Contact us

If you have questions about this policy or want to exercise your privacy rights, contact us:

Ruck
PO Box 1822
Provo, UT 84603
United States
Email: chandler@ruckdelivery.com
Phone: +1 385-332-8057