Sun Sub help center

What is a worksite?

A worksite is a place you work that you set up yourself: a name (say, "Maple St. duplex"), an optional address, and, if you want your punches there verified, a location pin with a radius. Worksites belong to you. They live on the Work tab under My worksites, next to any Company jobs a linked company has put you on. A company can't see your worksites or the hours you record at them unless you choose to share them (see Company link).

Adding a worksite

1. On the Work tab, tap Add a worksite.
2. Type a name and, if you like, the address.
3. If you're standing on the site, switch on Use my current location as the site pin and pick a radius. Otherwise leave it off and set the pin later from the site.
4. Tap Save.

The first worksite you add is what makes the Work tab useful: until you have one (or a company job), the tab says "Add your first worksite to start recording hours."

Setting the site pin and radius

Open the worksite and tap Set site pin here while you're on the site. The app takes one location fix and saves it as the centre of the site, with the radius you choose (50 to 500 metres; 150 m is the default and suits most houses and small commercial sites). The card shows Pin set once there is one, or No pin until then.

A pin only affects punches made after it was set: earlier shifts aren't re-judged, and on a signed report a shift is shown as on site only when the pin existed before that shift began. Because you set the pin yourself, a report labels these checks "worker-set pin" rather than "company fence", and prints the pin's coordinates and radius so whoever reads it can see what the check was made against. Setting a pin needs location access; with it off, the button explains why and offers a shortcut to Settings.

Editing or archiving a worksite

Open the worksite to rename it, change the address, move the pin (tap Set site pin here again from the new spot) or change the radius. Archive hides a worksite you no longer use; you can't archive one while you're clocked in there. Archived worksites are hidden, not deleted, so the shifts you recorded there keep their site name on reports.

What location does Sun Sub record, and when?

Sun Sub takes a single, one-shot location fix at these moments and sends it with that action:

• when you clock in and when you clock out;
• when you choose to set a worksite's pin (the fix becomes the site's centre);
• for foremen on company jobs: when you confirm the day's crew, submit a before/after photo report, or propose a jobsite pin.

What is sent: latitude and longitude, the accuracy of the fix, your location permission level, whether the phone reported the location as simulated, and the time. Three other actions reuse the most recent fix the app already has rather than taking a new one, and only if there is one: accepting the terms, a foreman signing the scope of work, and each photo a foreman uploads. Between those moments nothing is recorded: no continuous tracking, no periodic upload, no location sent while the app sits in your pocket. Each of the moments above happens only when you tap the button for it. The one other thing the app does with your location is a check on the phone, each time you open it while clocked in, that you're still at the site (see below); that check is never sent.

Why does Sun Sub need my location at all?

To verify your hours. Each punch is compared with the site's location, and a shift that was clocked in and out on site is marked Verified on site without anyone having to call and ask. It's your own record that the hours were worked where the work was, and it's why the app won't clock you in without location: a punch it can't place can't be verified. The app explains this on a screen before iOS asks for permission the first time, and again from the Why location? link on the site screen and the Account tab.

Does the app use my location in the background, or when I'm not working?

Never when you're not working. When you're not clocked in, the app does not ask for, record or send your location at all (setting a worksite pin is the one exception, and only because you tapped the button for it). It never asks for "Always" access; "While Using the App" is the only location permission it requests.

While you're clocked in, yes — on your phone. From version 1.4, from the moment you clock in until you clock out your phone keeps comparing its own location with the site's circle, with the app open or in the background, and iOS shows its blue location indicator the whole time. If you've been outside the circle for more than 10 minutes you're clocked out automatically, as of the moment you left, and the phone shows you a notification (created on the phone; Sun Sub sends no push notifications). While you're off site but not yet clocked out, the Work screen says so and shows the time the clock-out will happen unless you're back.

That check stays on your phone. None of its readings are sent to us or kept anywhere. The server gets what it always got, your clock-in and clock-out punches; an automatic clock-out carries the last reading taken inside the site, so where you went afterwards is never recorded. The one other thing your phone says is whether the check ran for the whole shift. If it couldn't (the app was closed, or location was turned off, for 10 minutes or more), the shift is still recorded but marked not verified, with the number of minutes it wasn't watching. Keeping location on through a shift uses some extra battery; the check is deliberately coarse to keep that small. Builds before 1.4 only check when you open the app and show a reminder instead.

What if I deny location access?

You can't clock in with location off — Sun Sub uses it to place your hours at the site, so the site screen replaces the Clock in button with a note and a Turn on location shortcut. You can still clock out of a shift you already started even if location later drops; that clock-out is recorded with "no location" and marked not verified. If you turn location off after allowing it, the next time you open Sun Sub it explains that clocking in needs location and offers a shortcut to Settings. The Account tab shows Location access: Denied with an Open Settings button. Restricted means a device restriction (Screen Time or a company-managed phone) is blocking location, and the app can't change that. You can't set a worksite pin, and foremen can't use "Set the site location here", without location access.

Who sees where I was?

Only at the moments listed above, and only as part of that record. At your own worksites, nobody sees anything until you create a report or share your hours with a linked company; a report shows, for each shift, whether it was on site and the pin you set (its coordinates and radius), never your punch coordinates. On a company job, when a supervisor reviews a shift they see, for each punch, whether it was inside or outside the site circle, roughly how far it was from the centre, the accuracy of the fix, and flags such as "recorded offline" or "mock location"; the coordinates are kept with the punch record. You don't see coordinates in the app; you see the verified chip and a plain-language note.

What happens when I have no signal?

Every punch is written to your phone first, then sent. With no signal you'll see "Clocked in. No signal right now — this will upload automatically." (or the clock-out equivalent) and the app behaves as if the punch landed. When a connection comes back, or when you next open the app, the saved punches upload on their own. A punch recorded offline is timed by your phone's clock; a live punch is timed by the server. A signed report shows which was which ("server" or "device, offline") for every shift.

The limits on offline punches

Because an offline punch carries your phone's time rather than ours, the server checks it before accepting it. An offline punch is refused when:

• its time is more than 7 days in the past (or earlier than your account), or more than 2 minutes in the future;
• it would overlap a shift already recorded for you;
• it would push that day past the 16-hour daily limit.

A refused punch is dropped from the phone and the app tells you: "N punch(es) could not be uploaded. Check My hours and re-enter them if needed." Nothing on the phone can change a punch's time, so if a shift is missing, clock in again for the time you actually work from now on and keep your own note of the missed hours.

"Waiting to upload" and "Upload now"

While anything is waiting, the Work and My hours tabs show an orange bar, "N punches waiting to upload", with a Retry button. The Account tab shows the same count under "This phone" and an Upload now button. Uploads also try automatically whenever the app comes to the foreground and each time it refreshes, so normally the count returns to 0 without you doing anything.

Get the count to 0 before you sign out. Punches waiting on the phone are not removed by signing out; they upload the next time someone signs in on that phone.

Could a punch be counted twice?

No. Every punch carries a unique ID created on the phone. If the same punch is sent again (for example the upload went through but the reply never reached you), the server recognises the ID and returns the original shift instead of opening a second one.

"N punch(es) could not be uploaded. Check My hours and re-enter them if needed."

If a punch keeps failing (25 attempts), or the server refused it for one of the reasons above, the app stops retrying it and shows this message on the Account tab. The hours aren't recorded, so check My hours; on a company job tell your supervisor the job, date and times so they can sort it out.

Creating a report

1. On My hours, tap Send hours to employer.
2. Pick This week, Last week or a custom range (up to 62 days; weeks start on Monday). The screen shows a live summary of what would be counted and what would be left out.
3. Enter the employer's name and, if you want to email it, their email address.
4. Tap Create signed report. Our server builds the PDF, signs it and shows you the report id and totals.

The button is disabled when there is nothing to count in that period (for example only an open shift). Creating and emailing reports needs an active subscription, and it has to be switched on on our side; while it isn't, the button isn't offered.

What's in a report?

Your name and the last four digits of your mobile number, the period and time zone, the employer's name, and four totals: Hours counted, Server-stamped (hours whose punches were timed by our server rather than your phone), On site (hours the app could place at the site) and Excluded. Then a table with one row per shift:

• Date, Site, In, Out, Hours — for company-job shifts the hours are the supervisor-confirmed figure, and the row says so when it differs from what was recorded;
• Time source — "server", "device, offline" or "mixed";
• Location — "On site (company fence)", "On site (worker-set pin)", "Off site" or "—" when nothing could be checked; a worksite row also lists the pin's coordinates, radius and when it was set;
• Employer review — confirmed or pending for company jobs, "n/a" for your own worksites.

A second table, Not counted, lists shifts left out and why: still open, auto-closed, rejected by the company's supervisor, or over the daily limit. A "How to read this report" box repeats these definitions on the PDF itself. The footer of every page prints the report id, the key id, the fingerprint of the signed record, the verify link and a QR code that opens the report's record page.

What does "signed" mean, honestly?

When a report is created, our server writes the report's data as a fixed record, signs that record with its private key (RSA-PSS with SHA-256), stores both, and embeds the record and the signature inside the PDF as an attachment (sunsub-hours.json). It also stores a fingerprint (SHA-256) of the exact PDF file it handed you.

Any change to the file is detected by the online verifier (byte-exact match against the file we issued). The embedded record is digitally signed and can be checked offline with our public key. The printed pages themselves are not signed — always trust the verifier's numbers, not the numbers printed on a file that fails the byte-exact check.

In other words: an edited PDF can still look right, so anyone who is relying on the numbers should check the file at the verifier, or scan the QR code, and read the numbers there. Our public keys are published at /sunsub/keys for anyone who wants to check the embedded record offline; the verifier page explains how.

Checking a report at the verifier

Go to /sunsub/verify and either upload the PDF (up to 3 MB) or type the report id printed on it. Scanning the QR code opens the report's record page, which shows the totals we hold for that report (uploading the file shows the full per-shift record). No sign-in is needed. Every check is logged (verdict, time, network address) so we can spot forged files. The result is one of:

Emailing, sharing and finding old reports

From the result screen (and later from Account → My reports) you can Email to employer (we send the PDF from our address, with the employer's name and your name in the message), Share PDF through the iPhone share sheet, or View PDF. My reports lists every report you've created with its period, totals, status and when it was sent; a report can be re-sent to a different address at any time. Reports are kept on our server, so a report you already handed to someone stays checkable even after you delete your account.

What is a company link?

Companies that run their crews through Sun Painting Virginia's system can receive your hours directly, without a report: once your account is linked to a company, its jobs appear under Company jobs on the Work tab and the shifts you record on those jobs go to that company's supervisors, the same way they always have for rostered crews. A link is made only with your consent, in one of the three ways below. The first two need an active subscription unless the company's office has marked your account complimentary; the third never does. It also has to be switched on on our side; while it isn't, the Company link screen isn't offered.

Accepting an invite from your foreman or the office

When a foreman or the company's office adds your number, you get a text ("Sun Sub (Sun Painting Virginia): [company] wants to add you to [job]. Open the app to accept or decline. Reply STOP to opt out.") and an invite card at the top of the Work tab. Tap Accept to link, or Not now to decline; an invite expires after 7 days. On the card you can also switch on sharing your worksite hours (off by default). No code is needed, because you're already signed in on that phone.

Linking by typing the company's name

1. Go to Account → Company link and type the company's name exactly as they use it in Sun Sub.
2. Choose whether to share your worksite hours with them, then tap Continue.
3. If your number is on that company's pre-approved list, we text you a second code. Enter it and the link is made.

The screen always says a code was sent, so it can't be used to test which companies know which numbers. If no code arrives, or the code screen says "We couldn't match that company and your number", ask the company to add your number to its Sun Sub roster (its office does this on the company's Sun Sub hours page) and try again.

Your own company links by itself

If you run a company that works through Sun Painting Virginia's system and the mobile number you signed in with is the number on file for your company there, your account is your company's account: it is linked the moment you sign in, with no name to type, no second code and no subscription. Company jobs appear on the Work tab right away, and the office sees the account on the company's Sun Sub hours page. If the office puts your number on the company later, the link is made the next time the app refreshes. You can unlink in Account → Company link at any time; the app then leaves you unlinked until you next sign in with the company's number, which links you again.

What does a linked company see?

Your name and number on its roster, and every shift you record on its jobs, with the punch evidence its supervisors use for review. Hours at your own worksites are shown to the company only while Share my worksite hours with my company is on (Account → Company link); switch it off and they disappear from the company's view. Your reports, your other worksites' details and your subscription are never shown to a company.

Unlinking

If you created the account yourself, Account → Company link → Unlink removes you from the company's jobs and stops sharing (clock out first). The hours you already recorded on its jobs stay in the company's records. Accounts a company's office or foreman created for their crew show "[company] set up this account, so only they can remove the link. Ask the office if you're leaving."; ask the company to remove you, or delete your account.

What does the subscription unlock, and what is free?

A Sun Sub subscription is billed monthly per account: US$119.99 a month as an in-app subscription through the App Store, or US$120 a month by card on our website (Apple's price grid has no exact $120 step; the App Store price is shown in your local currency on the Subscribe button). It unlocks creating and emailing signed hours reports, and linking your account to a company yourself (by name or by accepting an invite). Everything else is free and stays free: signing up, worksites, clocking in and out, offline punches, My hours, and anything a company's foreman or office sets up for you (their jobs, crew tools, supervisor review). If the office has marked your account complimentary, you have the same access without paying, until the date they set.

Buying it

In the app (App Store). Go to Account → Subscription and tap Subscribe — [price]/month. Apple's purchase sheet appears and the subscription is charged to your Apple Account, like any App Store subscription. Apple handles the payment; we never see your card. When Apple confirms the purchase, the app sends Apple's signed receipt to our server and your status flips to subscribed within a few seconds. If the button shows a spinner, the app is still fetching the product from the App Store; if it says "Subscriptions are temporarily unavailable", the App Store couldn't return it (no Apple Account signed in, no connection, or the product not yet live) — try again later, or tap Restore purchases if you've already bought one.

On our website (card). On the US App Store storefront the same screen also offers a plain link, Subscribe on our website instead. It opens a browser sheet to our payment provider's (Stripe's) checkout page, where you enter your card. Your card details go to Stripe and never touch our server. When you finish, the page offers an Open Sun Sub button and the app refreshes your status; if it hasn't caught up yet, tap I've subscribed — refresh. Details are on /sunsub/subscribe. The website link isn't shown on other storefronts, or while it's switched off on our side; the in-app purchase always is.

One subscription is enough: an account is subscribed if either route is active. If you somehow hold both, the app shows the one it's using and you should cancel the other.

Managing, cancelling and failed payments

The Subscription screen says which way you're billed: Billed through the App Store or Billed by card on our website, with the renewal or end date.

• App Store subscriptions: Manage subscription opens Apple's subscription sheet (also reachable in the iPhone Settings app → your name → Subscriptions). Cancel, change your payment method or ask for a refund there; refunds for App Store purchases are decided by Apple under its policies, not by us. If Apple can't charge your card at renewal, Apple retries and may keep the subscription active for a short grace period; while it's retrying, the app treats you as subscribed only during that grace period.
• Card subscriptions on our website: Manage subscription opens Stripe's customer portal, where you can update your card, see invoices and cancel. If a renewal payment fails, you keep access for 3 days while Stripe retries the card; after that, creating and sending reports and linking pause until a payment goes through.

Either way, cancelling stops the next renewal; the features stay unlocked until the end of the period you've paid for, and there are no partial refunds from us for the unused part of a month. Refresh status on the Subscription screen asks our server for the latest state. Restore purchases asks the App Store for your current subscription and sends it to our server again — use it after reinstalling the app, on a new phone, or if the app shows you as unsubscribed right after buying.

Subscription in test mode

In test mode the sample account starts without a subscription, so you can see the gate. Tapping Show subscribed state (sample) flips the sample to "Billed through the App Store" without any real purchase (Restore purchases does the same). Nothing is charged, no App Store sheet appears, and no website is opened in test mode.

Adding someone to the crew

1. Open the job, tap Crew and daily check-in, then Add someone to the crew.
2. Enter their full name and mobile number, and switch on Prefers Spanish if they'd rather read the scope in Spanish.
3. Tap Add to crew.

They get a text from Sun Painting Virginia telling them they've been added to the job by you, with the download link. They sign in with that number, no password. Until they do, their row shows "Hasn't signed in yet". By adding someone you confirm they gave you the number for work and agreed to be texted about the job; their first text includes opt-out instructions. If that number has previously replied STOP to Sun Painting Virginia, the roster entry is still created but no invite text is sent, and the app doesn't tell you. If they say no text arrived, give them the download link and the sign-in steps in person; they can still sign in.

If the number already has its own Sun Sub account (one the person created themselves), they aren't added straight away: they get an invite to accept in the app, and their row shows Pending until they do. If instead you see "That number already has a personal Sun Sub account. Ask them to link your company from the app.", invites aren't switched on yet on our side; ask the person to link your company from Account → Company link once your office has put their number on the company's roster.

If the number already belongs to a crew member of another subcontractor, the app says "That number is already registered to another subcontractor" and won't add them; ask the office.

Removing someone from the crew

In the crew list, swipe left on their row and tap Remove. They must be clocked out first; otherwise you'll see "Clock this person out before removing them." Removing someone takes them off this job only. Their recorded hours are untouched, and they can be re-added later. You can't remove yourself from the app.

Confirming who is on site each day

In Crew and daily check-in, tick everyone who is on site (people already clocked in are pre-ticked), add a note for the supervisor if you want, and tap Confirm N on site today. The app takes one location fix so the office can see the confirmation was made on site. One confirmation per job per day: confirming again replaces today's list. Crew on the job can see how many people were confirmed and when; the office sees the names.

Reviewing and signing the scope of work

Tap Review scope on the job screen. If the job is linked to an estimate you'll see the estimate itself with all prices removed, in English or Español (use the toggle). Jobs without a linked estimate show the job's written description instead; if there's none, the app tells you to ask your supervisor before starting.

As foreman you're asked to sign that you've read it: draw your signature, type your full name, and tap Sign scope of work. Do this before the crew starts; until then the job card shows Scope unsigned. Crew members can read the scope but don't sign it. Your signature, typed name and the time are kept with the job, and the screen then shows "Signed by [name]".

Before / after photo reports

1. Open the job, tap Before / after photos, then New BEFORE photos (every area the scope covers, before work starts) or New AFTER photos (the same areas again, with the work complete).
2. Take a photo with the camera or Choose from library. Add a short note to each photo saying what it shows. You can also add a scope summary and notes for the whole set. The first time, iOS asks for camera or photo-library access; Sun Sub uses it only to attach the photos you pick to this report.
3. Tap Submit. A report needs at least one photo; Submit is disabled until there is one.

Photos are resized on your phone before upload (to at most 2048 px, as JPEG), which also removes the camera's embedded metadata, and they're uploaded three at a time. If the upload fails partway, tap Submit again; the whole set is resent, and the office may see the incomplete attempt marked "draft". The report takes one location fix when you submit; the office sees each set as Taken on site or Not confirmed on site, and you'll see "Photos filed, but your location wasn't confirmed on site" if it was the latter. Photos are viewed by supervisors in the office; they can't be viewed again in the app, and crew on the job only see how many photos were filed and the notes.

Proposing a corrected jobsite pin

If the job shows No site location, or the pin is in the wrong place so honest punches keep coming up "outside_fence", stand somewhere central on the site and tap Set the site location here, then Send to supervisor. Your current position is sent as the proposed centre of the jobsite, with the standard circle size.

The proposal goes to the office's Field App Review page for approval. It changes nothing until it's approved: punches keep being judged against the existing site location (or stay unverifiable if there is none). Once approved, the new location is used for future punches; past punches aren't re-judged. The tool is disabled when location access is off or hour recording is switched off. (Pins on your own worksites work differently: you set them yourself and they take effect at once; see Worksites.)

What happens to my data?

What Sun Sub records (your name and number, your worksites and their pins, punches with their location, shifts, the reports you create and who you sent them to, and, on company jobs, roster confirmations, signatures and, for foremen, photos and proposed pins) is stored on Sun Painting Virginia's server. Hours at your own worksites are used only to show you your hours and to build the reports you ask for. Hours on a company's jobs go to that company's supervisors for review and into that company's weekly timesheet. The full picture, including retention and who we use to deliver texts and take payments, is in the Sun Sub Privacy Policy; the rules you agree to are in the Terms of Use.

Three things worth knowing day to day: everyone on the same company job's crew list can see your name, phone number, role and whether you're clocked in (that's how a foreman reaches the crew); supervisors, project managers and admins in the office can see your company-job shifts and the punch evidence behind them; and anyone who holds one of your reports, or scans its QR code, can see the numbers we hold for that report (your name, the last four digits of your number, the employer's name, the period and the totals) at the verifier, and whoever uploads the file itself also sees the per-shift record we hold for it (not the pin coordinates). Your punch coordinates and your signatures aren't shown in the app to you or to other crew.

Requesting a copy, a correction, or deletion

Deleting your account is a button in the app: Account → Delete account (see Deleting your account). For a copy of your data, a correction, or if you'd rather a person handled the deletion, email support@sunpaintingva.com (or call (434) 207-2025) with your name and the phone number you sign in with, and say what you want. We'll confirm by reply and aim to answer within 45 days.

Some records are kept even after deletion: shifts you recorded and reports you already issued (so a report you handed to someone stays checkable), hours and punches on company jobs that have been confirmed or paid, signed acknowledgements, SMS consent and opt-out records, and photo reports attached to a project, because we're required to keep payroll, consent and project records and because a report's verifiability depends on the record behind it. The Privacy Policy explains what is kept and why.

Stopping text messages: STOP and HELP

Reply STOP to any Sun Painting Virginia text to opt out of notification texts (crew invites, company invites and consent confirmations). STOPALL, UNSUBSCRIBE, CANCEL, END and QUIT do the same. Reply HELP for a message with our support email. Reply START to opt back in. Opting out doesn't stop you using the app or working on a job; we never block a sign-in code or a company-link code on our side, and those are only sent when you ask for one in the app. Message and data rates may apply.

Signing in

"Hour recording isn't switched on yet"

Recording in Sun Sub is controlled by one switch on our side. While it's off you can sign in and look around, but clocking in, worksites, adding crew, photo reports and pins are all disabled, and the Work and Account tabs say so. Nothing is wrong with your phone; check back later or ask us. Signed reports, company links and open sign-up each have their own switch too; while one is off, the app hides that feature or says it isn't switched on yet.

"The app couldn't read the server's response. Please update the app."

Your copy of the app and our server are out of step. Update Sun Sub to the latest version (download link) and try again. If the latest version still shows this, report it with the screen you were on.

Clocking in and out

Reports, company link and subscription

Location shows "Denied" or "Restricted"

Open the iPhone Settings app → Sun Sub → Location and choose While Using the App (the Account tab's Open Settings button takes you there; the app never needs Always). Also make sure Precise Location is on; an approximate location can't place you inside a site circle. "Restricted" is set by Screen Time or a device-management profile and has to be changed there. If you tap "Set site pin here" or "Set the site location here" and see "Couldn't get your location. Try again outdoors.", the phone couldn't get a fix within a few seconds; step outside and try again.

Photo upload rejected

The office system accepts JPG, PNG and HEIC photos, up to 15 MB each and 12 per upload. Sun Sub normally converts every photo to a smaller JPEG before sending, so these limits are rarely hit. If you see "Only JPG, PNG and HEIC photos are accepted", "File too large", or "Add at least one photo before submitting", make sure the items you picked are photos (not videos or documents), remove any that failed, and tap Submit again. If you can't add photos at all, check Settings → Sun Sub → Camera / Photos.

Where are app hours reviewed?

In spvaTrack, on the Field App Review page: the Field App Review page (you'll be asked to log in). It's open to supervisors, project managers and admins: admins and technicians see every job; supervisors and project managers see only the jobs they supervise or manage. The page has five tabs: Shifts, On site now, Geofences, Daily crew and Before / after. If hour recording is switched off, an amber banner at the top says so. Only shifts on company jobs appear here; hours at a worker's own worksites are the worker's, not the office's, and are never part of the review flow.

Shifts tab: confirming hours into the weekly subcontractor timesheet

1. Set the filters: From / To dates, Status (Awaiting review, Confirmed, Rejected, All) and Geofence (Any, Verified only, Unverified only), then Load. Totals appear for shifts, hours recorded, hours geofence-verified and hours selected.
2. Shifts are grouped by job, subcontractor and day. Each row shows the crew member, their role, a Verified or Unverified pill (hover for the reason), the review status, clock-in → clock-out, the recorded time, and the geofence note if any. Rows already rolled into a timesheet say in timesheet.
3. The Hours box is pre-filled with the recorded (or previously confirmed) figure; change it if you're confirming a different number. A shift noted "exceeds 16h — needs supervisor review" or "auto-closed: no clock-out recorded" has no confirmed figure yet and the box shows the full recorded duration, so set the real figure before confirming it.
4. Click Confirm or Reject on each row (click again to clear). The map-pin button opens the evidence: each punch's time, inside/outside, distance from the fence centre, accuracy, and flags for recorded offline, mock location or missing location permission. Select all verified confirms every geofence-verified shift at its recorded hours in one go.
5. Click Confirm into timesheet and accept the prompt. Confirmed shifts are rolled into that subcontractor's weekly form ("App hours — week of …"), and the expense approvals for any affected pay period are regenerated. Confirming here counts as the supervisor's expense review: the expense approval row those hours become is approved at the supervisor step automatically (its memo names who confirmed the shifts and when), so app hours are not reviewed twice; the PM, admin and CFO steps are unchanged, and a row anyone has already acted on is never touched. (Feature flag Field app → supervisor expense auto-approval, on by default.) Confirmed hours carry their geofence result (verified hours vs. total) through to the supervisor, PM, admin and CFO expense approval tables. Rejected shifts stay on record but don't reach the timesheet.

Tickets on the row. The ticket picker shows, for every ticket the sub may bill on that job, the hours used against the authorized figure and whether it is open or closed; under the picker, the chosen ticket's status, authorized / used / remaining hours, type and a line of its description, with History (every timesheet and app shift on it, and its change log) and Close ticket / Reopen ticket. The hour-limit auto-close only fires when every authorized hour is on a timesheet, so a ticket finished under its hours (or one that should stop taking clock-ins for any other reason) is closed here; closing is recorded in the ticket history and can be undone the same way. Reopening a used-up ticket is allowed but warned about: the next roll-up or timesheet save closes it again unless its hours are raised on the Tickets tab.

Only closed shifts are listed. A shift someone forgot to clock out of is closed by the server 16 hours after it began (every half hour) with the auto-closed note and no confirmed figure; see I forgot to clock out. Reviewing never edits punches: the punch record is append-only, and supervisors only set the confirmed hours. A confirmed figure is also what the worker's signed hours reports use for that shift; a rejected shift is listed on their reports as "not counted — rejected by employer".

Geofences tab: approving, adjusting or rejecting a foreman's proposed pin

Each card shows the job and address, who proposed the pin and its coordinates and radius, and the job's current fence (or "This job has no fence yet — nothing can be verified until one is approved"). View on map opens the proposed point in Google Maps in a new tab so you can check it's on the property. Approve makes it the job's live fence; Adjust opens the proposed pin on a map so you can nudge or resize it before saving it as the fence; Reject discards the proposal and leaves the existing fence alone.

Until a proposal is approved, punches are judged against the existing fence (or are unverifiable if the job has none). Approving changes what future punches verify against and nothing else: every punch froze the distance and radius it was judged at, so history is never rewritten. After approval, crew phones pick up the new fence on their next refresh. Pins on workers' own worksites don't come here: workers set those themselves, and a signed report labels the resulting checks "worker-set pin" so a reader can tell the two apart.

Geofences tab: setting or moving a job's location yourself

Below the proposed pins, Job locations lists every unarchived job you supervise or manage (admins: every job) with its current fence, who set it and when, how many crew are assigned and the last shift date; type in the search box to narrow the list. Set location (or Move) opens a map editor: look the street address up and pick a match, click the map, or drag the pin; set the radius (25–1000 m); save. You don't need a foreman to request a pin first. The grey dashed ring on the map is the fence that is live now, and an orange dot marks a foreman's pending proposal, so you can see what you're replacing.

Saving writes the fence immediately (source "office"), clears any pending proposal on the job, and crew phones pick it up on their next refresh. As with approvals, only future punches are judged against the new fence: every past punch keeps the distance and radius it was judged at.

On site now tab: who is clocked in at each job

The live view of open shifts on your jobs, grouped by job: each person, their role, company, the clock-in time, how long they have been on the clock, the ticket they are on, and where the phone was at clock-in (inside or outside the fence, with the distance from the fence centre and the fix's accuracy). Flags call out a shift open past the 16-hour cap (a missed clock-out: the server closes it at the cap for you to set the real hours on the Shifts tab), an offline clock-in, a mock location, or a missing location permission; the map-pin button opens the punches. The tab badge shows the count, the list refreshes itself every minute while it is open, and Refresh reloads it now.

Under the live cards, Jobs with a crew assigned lists every job that has an active crew in the app, with how many are assigned, how many are on the clock now, how many the foreman confirmed on site today, the last shift date and whether the job has a fence, so a quiet job is visible too. The phone watches the fence on the device during a shift and reports nothing in between punches, so the location shown is the clock-in fix, not a live track.

Daily crew tab: reading a foreman's confirmation

Each card is one job on one day: the foreman who confirmed it, a Confirmed on site or Confirmed off site pill (from the location fix taken when they tapped Confirm), the names marked on site, any marked absent, and the foreman's note. A foreman confirming again the same day replaces that day's card. Use it alongside the Shifts tab: a person confirmed on site with no shift, or a shift with no confirmation, is worth a question.

Before / after tab: photo reports

Each card is one photo set: the job, a Before or After tag, the foreman and date, a draft marker if it was never submitted, and Taken on site or Not confirmed on site from the location fix at submission. The scope summary and notes come first, then the photos with their captions; click a photo to open it full size. Photos are served only through this page to users in the job's scope; the app itself can't display them again, and no part of spvaTrack shows them to customers; if a supervisor wants to show a customer a photo as a record of completed work (which the crew terms allow), that is done by hand outside this page.

The company Sun Sub hours page (subcontractor accounts)

A subcontractor company signed in to spvaTrack has its own page, Sun Sub hours (admins open it with a subcontractor_id), showing: the workers linked to the company and whether each shares their worksite hours; the company's pre-approved roster of phone numbers (add a number and name, or remove one), which is what lets a worker link the company by typing its name; pending invites; and the last 60 days of shifts with a Source column (company job or personal site) and the verified flag, plus a CSV export. Invite on that page creates the roster entry and, if the number already has its own Sun Sub account, sends the invite text at once. Personal-site rows appear only for workers who turned sharing on.

Independent accounts and complimentary access

People who signed up on their own appear in the Field App Review crew directory as Independent (Sun Sub) (filter with the independent scope). Their worksite shifts are not reviewed here. Admins can grant an account complimentary access to reports and company linking until a date, which is how a company can cover its crew's report costs without each worker subscribing; the worker's Subscription screen then shows the complimentary status and end date.

The feature flags

Recording is gated by the Field app → subcontractor hours flag on the technician-only Feature Flags page. While it's off, crew can sign in and read but every write (clock in/out, worksites, crew changes, confirmations, photos, pins) is refused with "Hour recording isn't switched on yet", and this review page shows the amber warning. Anything already recorded is still listed and can still be confirmed. Devices can be provisioned and sign in ahead of turning it on. Three more flags on the same page gate the 1.2 features separately, each off until switched on: Sun Sub: open sign-up (new accounts from any US/CA number), Sun Sub: signed hours reports, and Sun Sub: company link / employer sync (invites, roster linking and the company hours page). A fourth, Sun Sub: show Subscribe link in app (US storefront), controls whether the app offers the "Subscribe on our website instead" card link next to the App Store purchase; the in-app purchase itself is never flag-gated. Two Apple settings live in system_settings rather than on that page: sunsub_apple_product_id (the App Store product) and sunsub_apple_accept_sandbox, which makes sandbox purchases count as paid while App Review is testing and should be set to false after launch.