This Privacy Policy explains how The Journeyman ("we," "our," or "us") collects, uses, shares, and protects information across our mobile application and website (the "Platform"). By using the Platform, you agree to this Policy.
Our Privacy Commitments
SelectedWe want to be precise rather than absolute, because precision is what you can actually hold us to:
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California and other state privacy laws.
- We do not use your data to train our own artificial intelligence models.
- We do not share your data with advertisers, data brokers, or marketing platforms.
- We do share data with the service providers listed in Section 8, each of which receives only what is required to perform its function. One of those providers is OpenAI, which powers our optional AI assistant — see Section 3 for exactly what is sent and why.
Information We Collect
We collect the information necessary to operate the Platform for firefighters and companies working in the wildland fire industry.
Account and Profile Information
Name, email address, phone number, role (firefighter, company, medical director, administrator), profile photo, job title, certifications and their expiration dates, qualifications, and documents you upload.
Company Information
Company name, contact details, rosters, teams, job postings, equipment and gear records, inventory, agreements, and internal operational records.
Incident and Operational Data
Incident records, resource orders, shift tickets and hours, checklists, tasks, attachments, timestamps, signatures, and operational notes.
Location Information
Precise and approximate location, as described in Section 4.
Communications Data
In-app messages, comments, posts, notifications, emails, and SMS messages sent through the Platform.
Audio (Voice-to-Text)
When you use the dictation feature, your device captures audio and converts it to text. This is processed by your device's operating system speech recognition service (Apple or Google). We receive the resulting text, not the audio recording.
Camera, Photos, and Scanning
Photos you capture or upload, documents you scan, QR codes you scan, and signatures you draw.
Device and Technical Data
Device type, operating system, app version, IP address, push notification tokens, crash logs, diagnostic data, and usage analytics.
Feedback Submissions
When you submit in-app feedback, we collect your message and may collect a screenshot of the screen you were viewing, along with device and app metadata.
AI Features
The Platform includes an optional AI assistant. When you use it:
- Your prompts and conversation history are transmitted to OpenAI, which generates the responses. Conversation threads persist on OpenAI's systems.
- When a company administrator requests an AI summary of a firefighter's profile, a filtered copy of that firefighter's profile record is transmitted to OpenAI. This includes name, job title, certifications, and certification expiration dates. It excludes document contents, images, and file storage links, which are stripped before transmission.
- AI conversations are also stored in our database so you can return to them.
- OpenAI states that data submitted through its API is not used to train its models by default. We do not use AI conversations to train any model of our own.
AI output can be wrong. Do not rely on AI-generated summaries as verification of a firefighter's certifications, currency, or qualifications. Always confirm against the underlying records.
Location Information
Location is central to incident and resource management, so we want to be clear about it.
- What we collect: precise location (GPS-level) and approximate location, depending on the permission you grant.
- When we collect it: while you are using the app. On iOS, if you grant "Always" location access, location may also be collected when the app is not in the foreground.
- Who sees it: your location may be shared with the company roster you are assigned to, so your company can coordinate personnel and resources during operations.
- Resource and asset locations shown in the Platform are derived from active resource orders and operational records, not from continuous tracking of individuals.
- How to turn it off: revoke location permission in your device settings at any time. Some features — map views, location-tagged records, and resource positioning — will stop working or become less accurate.
- Retention: location attached to an incident, resource order, or shift ticket is retained as part of that record, as described in Section 7. Location used only to display live positions on a map is not retained beyond 30 days.
How We Use Information
We use collected information to:
- Provide core functionality and maintain user accounts
- Enable company rosters, communications, and incident management
- Deliver notifications, messages, and alerts
- Provide search across firefighters, companies, jobs, and posts
- Power optional AI features you choose to use
- Maintain system security, detect abuse, and investigate safety reports
- Diagnose crashes and improve reliability
- Process payments and manage subscriptions
- Provide customer support
- Comply with legal and regulatory obligations
We may use aggregated and de-identified data for internal analysis and product improvement. We do not attempt to re-identify de-identified data, and we do not disclose metrics that identify an individual company.
Data Visibility and Access Control
How the Platform is designed
The Platform's interfaces are built so that users and companies see only the information relevant to their role and their organization. Company administrators see records for their own company and the users connected to it. Firefighters control their profile visibility and choose what information is visible to companies.
Cross-company sharing you enable
Some features share information across organizations by design. Mutual Aid partnerships allow a company you partner with to view roster information you have made available for that purpose. This sharing happens only through features you explicitly enable.
Journeyman staff access
Journeyman personnel have role-based access to systems for support, troubleshooting, billing, security monitoring, and legal compliance. As the operator of the Platform, our infrastructure administrators necessarily hold technical access to the underlying database — this is inherent to running any hosted service, and we would rather state it plainly than imply otherwise.
What protects your data is therefore a combination of role-based access controls, access logging, and binding internal policy, described further in our Disclosure & Ethics Statement, which sets out what we commit not to access and how that commitment is enforced.
Data Retention and Security
We retain data as long as necessary to provide the Platform, meet legal obligations, resolve disputes, and enforce our agreements.
| Category Retention | |
|---|---|
| Account and profile data | Life of the account; removed from active systems within 30 days of a deletion request |
| Incident and operational records | Life of the owning company’s account; purged within 90 days after the company closes its account, unless subject to a legal hold |
| Messages and communications | Same as incident and operational records — they form part of the company’s operational record |
| Location records | 30 days for live map positions; where attached to an operational record, retained with that record |
| Crash logs and analytics | Crash logs 90 days; usage analytics up to 14 months |
| Backups | Rolling encrypted backups, each expiring no more than 14 weeks after it is taken |
What deletion does and does not do. Deleting your account removes your profile and personal data from active systems. It does not remove: records a company owns and is legally required to retain (such as incident documentation and payroll-related records); data in encrypted backups until those backups expire on their normal cycle; or records subject to a legal hold.
Security. We use encrypted data storage and transmission, authenticated access, role-based permissions, and infrastructure monitoring. No system is perfectly secure, but we take commercially reasonable measures to protect your information.
Breach notification. If we become aware of a security breach affecting your personal information, we will notify you and any required regulators without undue delay, consistent with applicable law.
Third-Party Service Providers
We use the following providers to operate the Platform. Each receives only the data required for its function.
| Provider Purpose Data involved | ||
|---|---|---|
| Google / Firebase | Authentication, database, file storage, cloud functions, hosting, push notifications | Substantially all Platform data |
| Google Analytics for Firebase | Usage analytics | Usage events, device data |
| Firebase Crashlytics | Crash reporting | Crash logs, device data |
| Algolia | Search indexing | User, firefighter, company, and post records |
| OpenAI | AI assistant | Prompts, conversation history, filtered firefighter profile data (see Section 3) |
| Stripe | Company subscription billing (web) | Billing contact, transaction data |
| Apple App Store / Google Play | In-app purchases, sign-in | Purchase and subscription status |
| Twilio SendGrid | Transactional and notification email | Email address, message content |
| Twilio | SMS messaging | Phone number, message content |
| Wiredash | In-app feedback | Feedback text, screenshots, device metadata |
| Apple / Google speech recognition | Voice-to-text dictation | Captured audio |
| Geocoding and map tile providers | Address lookup, map display | Location coordinates, address queries |
We do not authorize any of these providers to use your information for their own marketing purposes.
Payments, Subscriptions, and Billing
Company Subscriptions (Web). Processed securely by Stripe. The Journeyman does not store or process full payment card details.
Firefighter Premium (In-App Purchases). Offered through the Apple App Store and Google Play. All in-app payments are processed by Apple or Google. The Journeyman does not receive or store payment card information for in-app purchases.
Subscription Management. Subscriptions renew automatically until canceled. In-app subscriptions are managed and canceled through your Apple ID or Google Play account settings. Refunds for in-app purchases are governed by Apple's or Google's policies, not ours.
Children's Privacy
The Platform is not directed to and not intended for anyone under 16, and we do not knowingly collect personal information from children. Consistent with the Children's Online Privacy Protection Act (COPPA), if we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us information, contact us at the address in Section 14.
Our Role: Service Provider vs. Controller
This distinction determines who you should contact about a given record.
- For account data — your profile, credentials, subscription, and the personal information you provide directly — The Journeyman is the controller (or "business"). Direct your requests to us.
- For company-entered data — rosters, incident records, shift tickets, personnel documents, and operational records a company creates about you — The Journeyman acts as a service provider (processor) on that company's behalf. Direct access, correction, and deletion requests for those records to the company. We will assist the company in responding.
Your Privacy Rights
Depending on where you live, you may have the following rights. We extend the core of these rights to all U.S. users regardless of state.
- Know / Access — what personal information we collect, use, and disclose, and to whom
- Access a copy — obtain a copy of your personal information
- Delete — request deletion, subject to the exceptions in Section 7
- Correct — request correction of inaccurate information
- Portability — receive your information in a portable, machine-readable format
- Opt out of sale or sharing — we do not sell or share personal information as defined by state privacy law, so there is nothing to opt out of, but we state the right explicitly
- Limit use of sensitive personal information — we do not use or disclose sensitive personal information for purposes beyond those permitted by law
- Non-discrimination — we will not deny service, charge different prices, or provide a different level of service because you exercised a privacy right
These rights are available to residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws, and the list expands as new laws take effect.
How to submit a request. Email support@livetjm.com or use the in-app support option. We will verify your identity before acting, typically by confirming control of the email address on your account.
Authorized agents. You may designate an authorized agent to submit a request on your behalf. We will require proof of authorization and may require you to verify your identity directly.
Response times. We will confirm receipt within 10 business days and respond substantively within 45 days, extendable by an additional 45 days where reasonably necessary. We will tell you if we need the extension.
Appeals. If we decline your request, you may appeal by replying to our decision or writing to the address in Section 14. We will respond to appeals within 45 days and, if we deny the appeal, tell you how to contact your state attorney general.
Global Privacy Control. We honor the Global Privacy Control (GPC) signal where required by law. Because we do not sell or share personal information, a GPC signal does not change how we handle your data.
Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date. For material changes, we will provide additional notice through the Platform or by email before the change takes effect.
Contact Us
The Journeyman
2614 Elm Ave
Rapid City, SD 57701
United States
General: support@livetjm.com
Privacy requests: support@livetjm.com