Trust & Security

The Grid is an internal tool for shop staff. It is not a public-facing customer product. Customers do not create accounts here, and the app does not expose customer data to the public internet.

• Sign-in is required to view or modify any shop data.
• Each technician uses their own account; actions are attributed to a user.
• Administrative functions are gated by a server-side role check.

The app stores the operational records the shop needs to do repair work: customer contact details, devices brought in for service, jobs and their history, photos taken during repairs, invoices, and payments. Data is entered by shop staff and used to run the business.

Device repair photos and staff avatars are stored in private storage buckets. Read access requires an authenticated session — these files are not served to anonymous visitors.

The Grid is built on Supabase (Postgres, Auth, Storage). Data access is protected by row-level security policies that limit reads and writes to authenticated shop accounts. Hosting is owned and operated by the business.

The Grid uses Supabase as its database, authentication, and file-storage provider. Additional integrations (such as IMEI lookup providers) are only contacted when a staff member explicitly triggers them.

Customer, device, and job records are retained to support warranty, follow-up service, and accounting needs. To request correction or deletion of your information, contact the shop directly.

If you believe you have found a security issue affecting The Grid or customer data held by Sarnia Phone Guy, please contact the shop and ask for the owner. We take reports seriously and will respond.