SBPM Installer - Mobile App Privacy Policy

Applies to: the SBPM Installer mobile app (iOS/Android, bundle ID com.sbpmpartners.installer), used by installers to receive, execute, and document Starlink installation field work. SBPM Partners' general Privacy Policy, available at starlink.sbpmpartners.com/privacy-policy/en, applies to our customers and website visitors. This notice applies specifically to installers using the app.

Last updated: September 7, 2026. Contact: privacy@sbpmpartners.com. Data controller: SBPM Partners LLC (United States)

1. Who this is for

You are an installer performing field work for a partner organization on the SBPM Partners platform. This notice explains what the SBPM Installer app collects about you (and, incidentally, about the customers whose sites you visit) while you use it, why, and what your rights are.

This app is a professional field-work tool. It is not directed to, and must not be used by, anyone under 18.

This notice applies wherever SBPM Partners and its partner organizations operate - currently the European Union, United Kingdom, Canada, and Japan, with more markets added as SBPM expands. The app itself is available for download worldwide; you can only sign in and receive work once a partner organization operating in one of these enabled markets has invited you.

2. Information the app collects

2.1 Account and profile information

When you sign in or complete onboarding, we (through our identity provider, Amazon Cognito) collect and process:

Your email address and password - used solely to authenticate you. We never see or store your password ourselves; Cognito handles it.
Multi-factor authentication (TOTP) setup - a one-time authenticator code/secret shown to you to add to your authenticator app.
Your display name, mobile phone number, base market/region code, base postal code, service coverage radius, and Starlink certification number - collected during onboarding so we and your contracting organization can verify your qualification and route work to you.
A profile photo, and qualification/certification documents (e.g., your Starlink installation certificate) which may be an image or a PDF - collected during onboarding so SBPM can verify you're qualified to install.

2.2 Precise location (while you're actively working a job)

The app uses your device's precise (GPS) location - both while the app is open and, for a limited purpose described below, in the background. Location is only collected while you have an active, assigned installation job "in flight" - specifically, from the moment you start travel to a job until it's completed, cancelled, or you leave/reassign it. The app does not track your location when you have no active assigned job, and it does not track you outside of work.

What we collect: date/time, latitude/longitude, and GPS accuracy - and, when available, altitude, speed, and heading. Each sample is tied to the specific job it was recorded for, not to you as a general "tracked person."

Why: to confirm you actually travelled to and arrived at the job site (a safety and service-verification requirement of field installation work), and to support the "can't confirm my location" exception flow when GPS truly isn't available.

While location is being recorded in the background, the app shows a persistent notification/indicator (a system-level requirement on both iOS and Android) so it's always visible that location is active - it is never collected silently.

The app requires precise location; if your device is set to share only approximate location, the app will ask you to switch to precise so field records are accurate. The app also validates that location samples are genuine (not from a "fake GPS" / mock-location app) and will reject a sample it detects as mocked.

Location samples are deleted from this device once they're no longer needed for the job they were recorded for (for example, when the job is completed, reassigned, or you sign out).

2.3 Camera and photo library

The app asks for camera and photo library access to let you:

Take or choose installation evidence photos (e.g., the property/dish/cable routing/router, speed-test and alignment screenshots) at each step of the install workflow.
Take or choose a profile photo and qualification document photos during onboarding.

You choose per-photo whether to use the camera or your photo library; the app does not access your photo library or camera at any other time, and does not scan or browse your library beyond the picker you interact with. The app does not use your microphone (we do not request microphone access and cannot record audio or video).

2.4 Digital signatures

As part of the install workflow, the customer (or their authorized representative) signs directly on your device to acknowledge the site survey and confirm job completion. This is captured as an image of the signature, the same way a photo is - it is not used for identity verification or biometric matching.

2.5 Site-safety and site-survey records

To meet health-and-safety obligations for the work you perform, the app has you complete:

A structured risk assessment / site survey (e.g., access, weather, equipment, drilling, electrical, and general safety questions) before starting work, including a corrective-action note if any answer flags a risk.
Obstruction acknowledgments during survey and validation (photos/screenshots and, where applicable, a note) if something at the site may affect system performance.
If something goes wrong on site, an incident ("near miss" or accident) report - event type, date/time, severity, a description of what happened, immediate cause, any people involved, and corrective actions taken. Depending on what happened, this report may occasionally include health- or injury-related details about you, the customer, or a bystander. We collect this only when you choose to file a report, and only to meet workplace safety, insurance, and legal record-keeping obligations.

2.6 Customer and site information

To do the assigned job, the app shows you information your contracting organization/SBPM has already collected about the customer and site: name, contact phone/email, service address, appointment window, and order/service details (e.g., Starlink account and kit information). You don't enter this - you view it to complete the job, and (for jobs you completed) it is intentionally not retained in your on-device job history once the job is closed, to limit how long customer personal data sits on your phone.

2.7 Device and app identifiers

The app generates a random identifier on your device (not your phone's hardware serial number, IMEI, or advertising ID) to tell your location samples apart from another device's. It's stored securely in your device's Keychain/Keystore and is only used to attribute location data to the correct device for a given job.

2.8 What we do not collect

No advertising identifiers, no ad tracking, no cross-app tracking.
No contacts, calendar, or messages access.
No microphone or audio/video recording.
No analytics or usage-tracking SDK is active in this app today, and no crash-reporting service is active today.
No advertising, and no sale of your personal information.

3. How we use this information

To assign, route, and let you execute installation jobs (the core purpose of the app).
To verify your qualification to install Starlink systems.
To confirm safe and correct job execution (arrival confirmation, photographic evidence, signatures, risk assessment).
To meet workplace health-and-safety, insurance, and legal record-keeping obligations (incident reports).
To provide support when something goes wrong (e.g., a sync failure) and you contact us.
To keep the service secure - e.g., detecting spoofed/mock location data.

We do not use your information for advertising, and we do not build an advertising profile of you.

4. Who we share it with

Your contracting/partner organization (the company or team that assigned you the job): sees your assigned-work status, on-site arrival/GPS confirmation for that job, submitted evidence photos, signatures, and safety records for jobs they've assigned you. This is part of how we deliver the service (job assignment, dispatch, and quality assurance) - we treat this as our own service delivery, not as selling or independently disclosing your information to an outside company, and it's never used by that organization for its own separate marketing purposes.
SBPM Partners' own operations staff, for qualification review, dispatch, quality assurance, and support.
Amazon Web Services (AWS), as our cloud infrastructure and identity provider (Amazon Cognito for sign-in; cloud storage/hosting for the backend this app talks to). AWS processes this data on our behalf under contract; it does not use it for its own purposes. Our infrastructure is hosted in the United States.
We do not sell your personal information, and we do not share it with data brokers or advertisers.
We may disclose information if required by law, or to protect safety, rights, or property.

We do not share your information with Starlink or SpaceX. The systems this app connects to have no integration that sends your personal information to Starlink/SpaceX.

5. How long we keep it

On your device: job data, evidence, and location samples are kept only as long as needed to complete and sync a job, and are deleted after a job closes, is reassigned, or you sign out. Closed-job history intentionally drops customer contact/site-address details.
On our servers: GPS location samples are automatically deleted 90 days after they're recorded. Evidence photos and signatures, onboarding/qualification documents, and incident report records do not currently have a fixed maximum retention period - we keep them as long as needed to operate the service and meet legal, safety, and audit record-keeping obligations. We are working on formal retention limits for these records; this notice will be updated when they're defined.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or request deletion of your personal information, and to object to or restrict some processing. Some data - particularly safety-incident records and records needed to verify your qualification history - may need to be retained even after a deletion request, where the law allows or requires it (for example, workplace safety record-keeping requirements).

To exercise these rights, contact us at privacy@sbpmpartners.com. The partner organization that invited you can also remove your access to their jobs at any time. We're adding an in-app way to request account deletion directly from the app; until then, requests made by contacting us are handled manually. If you're in the EU/UK, you can also lodge a complaint with your local data protection authority. If you're in California, you have rights under the CCPA/CPRA (including for workforce-related personal information) to know, delete, and correct your information, and to non-discrimination for exercising these rights; some of these rights have exceptions for information we need to keep for safety, legal, or business-record purposes as described above.

You can revoke camera, photo, or location permission at any time in your device settings - note that revoking location permission will prevent you from starting or continuing an active field job, since location confirmation is part of how the job is executed.

7. Security

Your session credentials and device identifier are stored using your device's secure credential storage (Keychain on iOS, Keystore on Android). All data sent between the app and our servers is encrypted in transit (HTTPS/TLS). Evidence photos are transmitted using checksummed, authenticated uploads, and the app rejects GPS samples it detects as spoofed or mocked.

8. Children's privacy

This app is a professional tool for field installers and is not directed to, marketed to, or intended for use by children. We do not knowingly collect information from anyone under 18.

9. Changes to this notice

We'll update this notice as the app changes, and post the updated version at this same link with a new "last updated" date. If we make a material change to how we handle your information, we'll take reasonable steps to let you know in the app.

10. Contact us

Questions about this notice or your information: privacy@sbpmpartners.com.

For SBPM Partners' general Privacy Policy, covering our customers and website, see starlink.sbpmpartners.com/privacy-policy/en.

11. Delete your account

To request deletion of your SBPM Installer account and the data associated with it, email privacy@sbpmpartners.com from the email address on your account, with the subject line "Account Deletion Request." We will confirm once your request has been processed.

The partner organization that invited you to SBPM Installer can also remove your access to their jobs at any time by contacting them directly - this doesn't require a separate account-deletion request.

What gets deleted: your profile information (name, phone number, email, postal code, coverage radius), certification number, profile photo, qualification documents, and your sign-in credentials.

What's retained, and why: GPS location samples are already deleted automatically 90 days after they're recorded, regardless of any request. Safety incident reports and job/qualification history tied to work you performed may be retained even after your account is deleted, where needed to meet workplace safety, insurance, or legal record-keeping obligations.