Privacy Policy

We collect only what is needed to run jobs, pay people correctly and stay compliant:

• Account details — name, email address, phone number, trade, role and employment type, and (for subcontractors) an ABN.
• Emergency contact — name, phone and relationship, where you choose to provide one.
• Check-in location — a single GPS position and accuracy reading captured at the moment you check in and again when you check out, used to confirm you were on site. See “Location” below.
• Check-in selfie — a photo taken at check-in to confirm identity.
• Work records — attendance times, hours, breaks, timesheets, tasks, leave requests and the daily site updates you write.
• Site photos and documents — job photos you upload, and compliance documents you provide (White Card, licence, visa, insurance) together with their expiry dates.
• Device and notification data — device type, operating system and a push-notification token so we can send you roster and task alerts.

We do not collect your Tax File Number, your personal bank account details, or any continuous location trail. The app does not track you in the background, between check-in and check-out, or outside work hours. It has no face-recognition, vehicle-tracking or always-on location feature of any kind.

Location is read at two moments only: when you tap check in, and when you tap check out. Each reading is a single point, stored with the attendance record so we can confirm the check-in happened within the site geofence. Nothing is recorded in between. You can refuse the location permission — the rest of the app keeps working, but you will not be able to check in from your phone and will need your supervisor to record your attendance instead.

The camera is used for check-in selfies and site photos, and the photo library is used when you attach an existing photo or a compliance document. Images are uploaded only when you submit them. The app does not scan or read your photo library in the background.

To roster and coordinate work, build timesheets and pay wages and subcontractor invoices, track job progress and costs, meet workplace health-and-safety and licensing obligations, remind you before a compliance document expires, and send you notifications about your roster, tasks and approvals. We do not sell personal information, and we do not use it for advertising or profiling.

Administrators at Fateh Group can see the records described above. Workers can see their own records, plus the projects and tasks they are assigned to. Clients can see only their own projects — progress, photos marked client-visible, quotes, invoices and signed variations. These boundaries are enforced on the server, not just in the app.

We rely on a small number of providers to run the app:

• Google Firebase / Google Cloud — sign-in, database and file storage. Our data is stored in Google’s Australian region (australia-southeast1, Melbourne).
• Expo and Google Firebase Cloud Messaging — delivery of push notifications to your device.
• Vercel — hosting for the web app.
• Google Maps and MapLibre — site maps and address lookup.
• Open-Meteo — weather for site diaries. It receives a job site location, never anything about you.
• Resend — sending invitation, invoice and reminder emails.

Some of these providers may process or back up data outside Australia. We only use providers that commit to protecting the information they handle for us.

Employment, attendance, timesheet and payment records are kept for at least seven years, as Australian workplace and tax law requires. Site photos and job records are kept for the life of the project and our warranty period. Check-in selfies and location points are kept with the attendance record they belong to. When a worker leaves, their account is deactivated rather than deleted, so historical timesheets stay accurate.

Access requires a password or Google sign-in. All traffic is encrypted in transit, and data is encrypted at rest by Google Cloud. Server-side rules restrict every record to the people listed above, and sensitive actions — attendance, timesheets, invoice numbering and signed variations — can only be written by our server, never directly from a phone or browser.

You can ask us for a copy of the personal information we hold about you, ask us to correct anything that is wrong, or ask us to delete information we are not legally required to keep. You can also turn off push notifications, and revoke the location, camera or photo permissions at any time in your device settings. To make a request, or to complain about how we have handled your information, email us at the address below. We will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

The app is for our workforce and clients. It is not intended for, and is not made available to, anyone under 16.

If we change this policy we will update the date at the top of this page, and notify you in the app if the change is significant.

Fateh Group — Victoria, Australia
fatehrendering@gmail.com