Privacy policy

Information collected and why

• Account name, email, user ID, role and organisation identify you and control access to assigned work.
• Job assignments, clock-in and clock-out times, shift notes and timesheets support scheduling and work records. Work records are linked to your account.
• Photos you choose or take, variation descriptions, quantities, prices, client names and signatures document extra work and client approval. A photo stamp includes the assigned site, your name and the time the photo was taken in the app or added from your library.
• Plans and documents shared by your office are available according to your role. Downloaded documents may be cached on your device for offline access.
• Server and authentication logs can include IP addresses, request details and errors for operation, security and troubleshooting. Do not include passwords in support messages.

The web workspace may also hold business contacts, project addresses, builder emails, files and financial records managed by your organisation. Only upload information needed for the work.

Mobile permissions

The current mobile app records shifts when you tap the clock controls. It does not request GPS, background location, motion, microphone or tracking permission. Site addresses come from job records, not your phone’s location.

Camera access is requested only when you choose to take a work photo. You can choose an existing photo through the system photo picker instead. Denying camera access does not prevent sign-in, viewing assignments or clocking shifts. You can change camera access in device Settings.

Opening directions launches your maps app, which handles its own permissions and privacy settings. Older shift records or separate web clocking tools may contain locations recorded with permission; removing GPS from this mobile release does not erase those existing records.

Who can access work records

Workers can access records permitted by their role and assignments. Authorised supervisors and office staff can review their organisation’s work records, photos, client approvals and requests. Workspaces are separated by organisation. Service providers process information needed to operate the service.

Hosting and connected services

HiGrade uses Supabase for authentication, database and file storage, and Vercel for the web service and APIs. Apple handles App Store and TestFlight distribution. Resend handles office email when configured. The web workspace can use connected mailbox providers, OpenFreeMap maps and owner-configured AI processing for plans or email; those features may process relevant business content. Providers may process information outside Australia.

The mobile app contains no advertising SDK or cross-app tracking implementation. Its work records are used to provide the workspace, not to target advertising.

Account and data requests

To request account or work-data deletion, email Quiet Frontier at dev@quietfrontier.studio. Include your account email, organisation and what you want deleted. Never send your password.

In the mobile app, open Account, then Request account or work-data deletion. The Email Quiet Frontier button opens a draft in your email app. Review it and press Send; opening the draft does not submit a request automatically.

Quiet Frontier handles the request with your organisation and will email you when complete. Account deletion includes associated information that does not need to be retained. Required payroll, signed agreements or other business records may remain; deletion is not immediate. You may also request access to or correction of your information.

How long records are kept

Work records are retained according to your organisation’s operational and record-keeping requirements. Required records may remain after account deletion. Ask your organisation which records it must retain and for how long. Removing access alone does not delete work records.

Offline shift actions remain on the device until they can sync. Sign-out does not discard unsent shift actions. Downloaded document caches are cleared on sign-out or when access is removed.

Contact

Your organisation is the first contact for account access and its work records. For deletion requests, contact Quiet Frontier at dev@quietfrontier.studio. CloudYard provides technical support at hassan@cloudyard.ai. Include your organisation, account email and the issue or request.

Material changes to this policy will be reflected on this page with an updated date.