Paint & Protect Team ("the app") is an internal workforce app used by employees ("workers") of Paint & Protect Pty Ltd ("we", "us", "the company") to manage shifts, attendance, and on-site communication. This policy explains what information the app collects, why, and how it's used. The app is not available to the general public — it is provided to our employees for work purposes only.
Information we collect
- Location. While a worker is clocked in, the app records GPS location (including in the background) to confirm they are on-site and to detect gaps in location reporting (e.g. the device losing signal or being powered off). Location is not collected while a worker is clocked out.
- Camera and photos. Used to attach photos to safety reports, work journal entries (before/after site photos), expense receipts, and an optional profile picture.
- Microphone and voice. Used to record voice notes on safety reports. Speech-to-text transcription happens entirely on the device using Apple's on-device speech recognition — audio is never sent to a third-party AI service for transcription.
- Face ID / Touch ID. If enabled, used only to unlock the app faster. Biometric data is processed entirely on-device by Apple's Face ID/Touch ID system and never leaves the device or reaches our servers — the app only stores a simple on/off preference.
- Account and profile information. Name, phone number, and (optionally) home address. Home address is used to estimate commute time for shift wake-up reminders and is only geocoded to map coordinates by an administrator.
- Work data. Shift schedules, attendance/clock-in records, safety reports, work journal entries, expense submissions, and messages exchanged with the office.
- Push notification token. Used to deliver alerts about shifts, messages, and report replies.
How we use this information
Solely to operate the app for its intended purpose: scheduling, attendance verification, safety reporting, internal communication, and expense reimbursement for Paint & Protect employees. We do not sell this information, and we do not use it for advertising.
Third parties we share data with
- Supabase — our database and file storage provider, which hosts all app data on our behalf.
- Google Maps Directions API — receives only origin/destination coordinates and a requested arrival time to estimate drive time; not linked to a worker's identity.
- Open-Meteo — receives only site coordinates to retrieve weather forecasts; no personal information.
- Apple (Expo/APNs push service) — used to deliver push notifications.
None of these providers are permitted to use this data for their own purposes.
Data retention and deletion
Work-related records (attendance, reports, expenses) are retained for as long as required for payroll and business records. A worker may request deletion of their account and personal information by contacting the company using the details below; some records may be retained where required by law (e.g. payroll records).
Children's privacy
This app is a workplace tool for employees and is not directed at, or intended for use by, children.
Changes to this policy
If this policy changes, the "last updated" date above will be revised. Material changes will be communicated to workers directly.
Contact us
Paint & Protect Pty Ltd