Privacy policy
Last updated: November 2026
This policy explains what OzHub collects, why, and your choices. OzHub is operated from Sydney, New South Wales, Australia. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). In this policy "we" means OzHub.
What we collect
- Account details: your name, email address and sign-in method (email, Apple or Google).
- Business details you enter: business name, ABN, address, logo, bank details for invoices, clients, invoices, team members, job sites, shifts and chat messages.
- Time clock data: clock-in and clock-out times and, when you use job-site checks, your phone's location at that moment.
- Inspection records: photos you take in the app, notes, voice notes turned into text, the time from our server, the phone's location, a flag if the phone reports a mock location, and a fingerprint (hash) of each photo.
- Device and use data: device type, app version, notification token and basic logs used to keep the service secure and working.
- Messages to us: what you send through the contact form or email.
Camera, location and notifications
The app asks permission before using the camera, location and notifications. Location is used when you clock in or out or take an inspection photo, not to track you in the background. You can turn permissions off in your phone settings, but some features will stop working.
How we use it
- To run the app: invoices, time clock, team, chat, inbox and inspection records.
- To send emails and notifications you ask for, such as an invoice to a client or an inspection link.
- To keep OzHub secure, prevent misuse and fix problems.
- To answer your messages and give support.
- To meet legal duties.
Who sees your data
Your business data is visible to the members of your business, according to the role each person has. When you send an inspection link or invoice, the person you send it to can see that content. We use trusted service providers to run OzHub: Supabase (database, sign-in and server functions, hosted in Sydney, Australia), Cloudflare (website and private file storage), Amazon Web Services (email sending) and Firebase Cloud Messaging by Google (push notifications). The Australian Business Register (ABN Lookup) is queried when you look up an ABN. These providers process data for us under their own terms and may process it outside Australia.
Inspection links
A client link is long and random, expires after 30 days, and lets the holder view that one record and make one decision. We store only a hash of the link token. Photos are shown through short-lived private links. Anyone who has the link can open it, so send it only to the intended person.
How long we keep it
We keep your data while your account is active. If you delete your account we remove your personal profile and sign-in, and keep business and tax records for 5 years as the law requires, no longer linked to your sign-in. See Delete your account.
Security
Data is encrypted in transit. Files are stored privately. Access is limited by role and by database security rules. No system is completely secure, so please use a strong password and keep your phone locked. Tell us straight away if you think your account was accessed by someone else.
Your rights
You can ask to see or correct the personal information we hold about you, or ask us to delete it. Email support@ozhub.app. If you are not happy with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Children
OzHub is for businesses and is not intended for children under 16.
Changes
If we change this policy we will update the date above and, for important changes, tell you in the app or by email.