Who we are
STU ("STU", "we", "us") provides construction management software for small and medium construction firms, through our website, web platform and mobile apps for iPhone and Android. STU is a trading name of S.T.U. Solutions Limited, registered in England and Wales (company number 16490334), registered office 16b, Market Square, Potton, Sandy, SG19 2NP, United Kingdom.
For data you give us through this website (for example when you book a demo or subscribe to our newsletter), we are the data controller. For data our customers store in the STU platform about their own people, the customer is the controller and we act as their processor.
Questions about this policy or your data are always welcome at privacy@stu.solutions.
What we collect
We collect three kinds of information:
- Information you give us: your name, work email, company, and anything you add to a demo request, partner application, or newsletter signup.
- Information collected automatically: page views, approximate location from your IP address, device and browser type, and how you move through the site. We use this to understand what content helps and what doesn't.
- Platform data: the people records our customers store in STU. We process this only on our customers' instructions, under our data processing agreement.
Our mobile app
The STU app for iPhone and Android works with the same account and data as the STU web platform. Your employer sets up your account and controls the data the company keeps in STU; we process it on their behalf.
What the app collects:
- Account details: your name, email address, phone number and user ID, so you can sign in and colleagues can find you.
- Work records you enter: timesheets, time off, training, tasks, site issues, vehicle and stock checks, purchase orders and expenses.
- Emergency contacts you choose to add to your profile.
- Photos and files you choose to attach: for example receipts, site issues, vehicle defects and stock checks.
- Documents you upload, such as training certificates and documents your employer asks you for.
- Absence and health records, if your employer uses STU for absence: sickness reports, fit notes and return-to-work forms you submit, and any health and safety work restrictions your employer records. This is health information, and only the people your employer authorises can see it.
- A notification token for your device, if you allow notifications, so we can send you approval requests and updates.
- Error reports, if your employer turns them on: when something goes wrong in the app, we receive the screen, the error message and your device and app version, so we can fix it.
Camera, photos and Face ID:
- The app uses the camera and photo library only when you choose to take or attach a picture, or to scan an equipment label.
- Face ID and fingerprint unlock are optional. Your biometric data stays on your phone and is never sent to us.
Reading receipts:
- When you scan a receipt, the image is sent to an AI service (Anthropic or Google) to read the supplier, date and amounts, so you don't have to type them. These providers process the image only to return the result to us, and may not use it to train their models or for any other purpose.
What the app does not do:
- It shows no advertising and doesn't track you across other companies' apps or websites.
- It contains no third-party analytics or advertising tools.
- It doesn't use your location. Weather forecasts are based on the project's address, not on where your phone is.
All data is encrypted in transit. Your rights, how long we keep data and how to contact us are the same as for the rest of STU, and are set out in this policy. To ask about, correct or delete your data, email privacy@stu.solutions.
How we use your information
- To respond when you ask us something: demo requests, partner applications, and support questions.
- To send you content you have asked for, like our newsletter. Every email includes one-click unsubscribe.
- To run, secure, and improve the website and the platform.
- To meet our legal obligations, including accounting and tax rules.
We do not sell your personal data, and we do not share it with third parties for their own marketing.
Our legal bases
Where UK and EU data protection law applies, we rely on: consent (newsletter and marketing), contract (providing the platform and responding to your requests), legitimate interests (site analytics, service improvement, and fraud prevention), and legal obligation (records we must keep).
For data in the STU platform, including health information, our customer (your employer) decides the legal basis and we process it only on their instructions.
International transfers
Some of our providers, including our AI and push notification services, process data in the United States. Where data leaves the UK or EEA, we rely on an adequacy decision such as the UK–US Data Bridge, or on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
How long we keep data
We keep website enquiry data for as long as we are talking to you, and for up to 24 months after our last contact. Newsletter data is kept until you unsubscribe. Error reports from the app are deleted after 90 days.
Platform data belongs to our customers: when a customer leaves, they can export everything in one click, and we delete their data from live systems within 30 days.
Your rights
You can ask us to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent at any time. Email privacy@stu.solutions and we will respond within one month. If your data is held in the STU platform by your employer, we will pass your request to them and help them respond.
You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
Changes to this policy
When we change this policy we will update the date at the top of this page, and for significant changes we will tell you by email or in the product. The current version always lives at this address.