Privacy Policy
In effect from 13 September 2026
traqR (“we”, “us”, “our”) is committed to protecting your privacy. This policy covers how we collect, use, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1.Information We Collect
1.1 Information You Provide Directly
Account & Identity
- Full name
- Email address
- Phone and mobile number
- Profile photograph
Employment Information
- Job title and role
- Employment type
- Start / end date
- Hourly and overtime rate
- Employee ID
Personal Details
- Date of birth
- Residential address
Emergency Contact
- Name, phone number, and relationship
Sensitive Financial Information
- Tax File Number (TFN)
- Superannuation fund name and member number
- Bank account name, BSB, and account number
TFN and bank details are collected solely for payroll administration. They are encrypted at rest and never used for any other purpose.
Compliance Documents
- Licences, certificates, right-to-work documents
- Issue date and expiry date
Job & Work Data
- Timesheet entries (date, hours, job)
- Purchase orders and invoices
- Task completions and job notes
1.2 Information Collected Automatically
Device & Usage Data
- Device type, OS, app version
- IP address and general location (country/city)
- Features accessed and timestamps
Location data (with your permission)
Precise GPS location is collected via the mobile app for job site check-ins. Location is only collected while the app is in use and is never tracked in the background.
1.3 Information From Third Parties
| Supabase | Authentication credentials and session tokens |
| Name, email address and profile photo (if you choose to sign in with Google) | |
| Stripe | Subscription and billing data for business accounts |
| Xero | Job financial data (if your organisation has connected Xero) |
Google Sign-In
If you choose to sign in with Google, we receive your name, email address and profile photo from your Google account. We use this only to create your traqR account and sign you in. We do not use it for advertising or sell it, and we share it only with Supabase, our authentication provider, to operate sign-in. You can remove traqR's access at any time in your Google Account settings, and you can ask us to delete your account data by contacting us.
2.How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Performance of contract |
| Delivering platform features | Performance of contract |
| Processing timesheets and payroll data | Contract / legal obligation |
| Sending shift, timesheet, and task notifications | Legitimate interest / consent |
| Verifying compliance documents | Legitimate interest / legal obligation |
| GPS check-in and attendance verification | Consent |
| Transactional emails | Performance of contract |
| Improving the platform | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We do not use your information for advertising, sell your data to third parties, or apply automated decision-making that produces legal effects without human review.
3.Disclosure of Your Information
Your Employer: Business administrators of your organisation can access your profile, timesheets, and compliance documents.
Service Providers
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Auth, database, file storage | United States / EU |
| Vercel | Web and API hosting | United States |
| Resend | Transactional email | United States |
| Stripe | Subscription billing | United States |
| Apple APNs | iOS push notifications | United States |
| Google FCM | Android push notifications | United States |
| Xero | Accounting integration (if enabled) | NZ / Australia |
We may also disclose information where required by law, court order, or regulatory authority.
4.Data Storage & Security
All data is stored on Supabase (PostgreSQL) and Vercel infrastructure with the following protections:
- Encrypted in transit using TLS 1.2+
- Encrypted at rest within Supabase's infrastructure
- Access restricted to authenticated application processes and authorised personnel
- Regular automated backups
5.Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of your account |
| Timesheet and payroll records | 7 years (Fair Work Act / ATO requirement) |
| Compliance documents | Until expiry + 2 years |
| TFN and bank account details | Duration of employment record |
| Notification history | 90 days |
| Location data | Not persistently stored; real-time check-in only |
| Deleted account data | 30 days, then permanently deleted |
6.Your Rights
Under the Privacy Act 1988 and the APPs, you have the right to:
- Access.
- Request a copy of the personal information we hold about you. We will respond within 30 days.
- Correction.
- Request correction of inaccurate or incomplete information.
- Withdraw consent.
- Withdraw consent for location access or push notifications at any time via device settings or in-app.
- Complaints.
- Lodge a complaint with us first; if unresolved, escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.
7.Mobile App Permissions
| Permission | Why It's Needed |
|---|---|
| Location | GPS verification at job sites during check-in |
| Camera | Capture photos of job sites, receipts, and documents |
| Photo Library | Upload existing photos and compliance documents |
| Push Notifications | Receive alerts for shifts, timesheet updates, and tasks |
All permissions can be managed in your device's Settings app at any time.
8.Children's Privacy
traqR is not intended for individuals under 16. We do not knowingly collect information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9.Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notification, and the “Last Updated” date above will be revised. Continued use of traqR after changes are posted constitutes acceptance of the updated policy.
Contact
For privacy questions, access requests, or complaints, contact our Privacy Officer. We aim to respond within 5 business days.
admin@traqr.com.au
0413 111 890
Prepared in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the Privacy (Tax File Number) Rule 2015.