Effective 15 July 2026 · Applies to the Butterfly iOS app
Butterfly is built and operated by Andrew Eastley, trading as Subbi (“we”, “us”). Questions about this policy or your data: [email protected].
Butterfly is a work tool for utility field crews. It replaces the hand-drawn “butterfly diagram” manhole-inspection paperwork: you photograph each wall of a manhole, mark the duct positions, record the circuits and their condition, and the app produces the finished inspection deliverable.
It is not a consumer app, it carries no advertising, and it is not directed at children.
Your account. When you create an account we receive your email address. If you use Sign in with Apple, we receive whatever Apple sends us — a private relay address if you chose “Hide My Email”, plus your name the first time you sign in (Apple only provides it once). We store your name so the app can show who is signed in rather than a scrambled relay address.
Your inspection work. Everything you record: work-order numbers and titles, manhole identifiers, addresses, dates, walls, duct positions, circuits, splices, condition notes, and the wall photographs you take. Photos are downsized on your phone before they are stored or uploaded.
Your organization membership. Which organization your account belongs to, and your role in it (field, office, or admin).
Crash diagnostics. If the app crashes, we receive a technical crash report — what the app was doing, your device model, your iOS version. These reports are not linked to your account or your name. We use them only to find and fix bugs.
App integrity checks. The app proves to our servers that it is the genuine Butterfly app on a real Apple device (Apple’s App Attest). This attests the app, not you, and identifies no person.
“We don’t track you” is easy to say and easy to check, so we’ll be specific:
Your inspections and photographs are stored in Canada. We deliberately host them in
Google’s Montréal region (northamerica-northeast1), because this is Canadian utility
infrastructure work.
We would rather be precise than flattering, so two honest exceptions:
So: the work stays in Canada; the account plumbing may not. If you need a stricter guarantee for a specific contract, talk to us before you start capturing.
This matters and it is unusual, so please read it.
The organization owns the inspection data — not us, and not the individual who captured it. When you record an inspection it is stored in your organization’s space. If you belong to a company’s organization, that work is the company’s. If you are working on your own, you are an organization of one and it is yours.
We access your organization’s data only to operate the service, to fix a problem you have asked us to fix, or where the law requires it.
We use a small number of service providers, and only to run the app:
| Provider | What they handle | Where |
|---|---|---|
| Google (Firebase) | Inspection data and photos (Firestore + Cloud Storage) | Canada — Montréal |
| Google (Firebase Authentication) | Your email address and sign-in records | Not region-pinned; may be outside Canada |
| Google (Firebase Crashlytics) | Anonymous crash diagnostics | Outside Canada |
| Apple | Sign in with Apple, App Attest integrity checks | Per Apple’s privacy policy |
| Resend | Sending account emails, e.g. a password reset | Processes your email address only |
That is the complete list. We do not share your data with anyone else, and we do not sell it, rent it, or use it to train anything.
Your inspections and photos are kept for as long as your organization has an account with us. We do not delete them on a timer, because a job can be invoiced a year or more after the inspection and your records need to still be there.
Photos on your phone are treated as a cache. After 90 days the app frees the local copy of photos from inspections you have not touched — but only once it has confirmed they are safely in the cloud. The cloud copy is untouched, and the photos come back automatically when you open the inspection or generate a report. This is only about your phone’s storage. It never deletes your work.
Deleted inspections are marked deleted rather than erased instantly, so an accidental deletion is traceable and a deletion cannot be silently undone.
You can delete your account at any time, from inside the app: Account → Account Management → Delete Account. You will confirm twice and re-enter your password (or re-authenticate with Apple). You do not have to email us or wait on support.
What happens depends on your situation, and the app tells you which one applies before you confirm:
Either way, deleting your account erases the app’s data from your phone — inspections, photos, and exported files. Export anything you want to keep first.
Butterfly is built to work with no signal. Everything you capture is saved on your phone first and uploaded when you have a connection. If you never sign in, or your organization has cloud backup turned off, your data never leaves your phone — which also means we cannot recover it if you lose the device.
No system is perfect, and we will not pretend otherwise. If we ever discover a breach affecting your data, we will tell you and the relevant regulator as the law requires.
Depending on where you live — and in Canada, under PIPEDA and BC’s PIPA — you have the right to ask what personal data we hold about you, to have it corrected, and to have it deleted. Deletion is built into the app (above). For anything else, contact us and we will respond within 30 days.
If you are unhappy with how we have handled your data, you can complain to the Office of the Privacy Commissioner of Canada, or to the BC Information and Privacy Commissioner.
Butterfly is a professional tool for working crews. It is not intended for anyone under 16, and we do not knowingly collect data from children.
If we change how we handle your data we will update this page and change the effective date at the top. If a change is significant, we will tell you in the app before it takes effect.
Andrew Eastley, trading as Subbi
444 Fader St
New Westminster, BC V3L 3T3
Canada