LEGAL
Privacy Policy
Summary: Elemetric Australia Pty Ltd collects name, email, licence number, job photos, GPS location, and payment details to provide documentation services. Data is stored via Supabase (Sydney), processed by OpenAI and Anthropic for AI analysis, Stripe for payments, and Resend for email. Job records are retained for 7 years. Contact cayde@elemetric.com.au for access, correction, or deletion requests.
1. Who We Are
Elemetric Australia Pty Ltd (ABN 83 696 666 672, ACN: 696 666 672) is based in Ballarat, Victoria, Australia. We operate the Elemetric mobile application and website at elemetric.com.au. We are the "APP entity" for the purposes of the Privacy Act 1988 (Cth).
Contact us at: cayde@elemetric.com.au — PO Box W129 Ballarat West VIC 3350
2. What Personal Information We Collect
Account Information
- Full name and email address
- Password (hashed — we never store plaintext passwords)
- Trade licence number and trade type
- Business name (if applicable)
Job and Documentation Data
- Job site address and GPS location coordinates
- Photographs taken at job sites
- Checklist responses and job notes
- Digital signatures captured within the app
- AI analysis results and documentation scores
- Generated PDF documentation records
Payment Information
- Subscription plan and billing status (stored in Supabase)
- Payment card details are processed directly by Stripe — Elemetric Australia Pty Ltd does not store card numbers
Usage and Technical Data
- Device type, operating system, and app version
- App usage logs and crash reports
- IP address and general location derived from IP
Voice and Audio Data
When you use the voice note feature:
- Audio recordings are processed by OpenAI's Whisper API for transcription. Audio is transmitted securely and is not stored by Elemetric Australia Pty Ltd. OpenAI processes audio in accordance with its own privacy policy.
- Text transcripts generated from voice notes are stored as part of your job records in our database.
- You can disable voice note functionality at any time by simply not using the feature. No audio is recorded without your active initiation.
Offline and Local Storage
When you use the App in offline mode:
- Job data, photos, checklist data, and signatures are temporarily stored on your device using encrypted local storage (AsyncStorage with device encryption)
- This locally stored data is synchronised to our secure Supabase database when you reconnect to the internet
- We do not access locally stored data except during synchronisation
Referral Program Data
When you participate in our referral program:
- Your unique referral code is stored in your profile
- Referral conversions (when someone signs up using your code) are tracked to calculate and apply subscription rewards
- We do not share referral data with third parties
3. How We Collect Personal Information
We collect personal information directly from you when you:
- Create an Elemetric account
- Complete a job checklist or capture photos within the app
- Subscribe to a paid plan via Stripe
- Contact us by email
We also collect technical information automatically when you use the app, including device identifiers and usage logs.
4. Why We Collect Personal Information (APP 3)
We collect and hold personal information for the following primary purposes:
- Providing the Elemetric documentation service, including job creation, checklist completion, AI analysis, and PDF generation
- Managing your account and subscription
- Processing payments via Stripe
- Sending transactional emails (account confirmation, password reset) via Resend
- Maintaining your 7-year job documentation timeline
- Improving the app and AI analysis accuracy
- Complying with legal obligations
We will not use your personal information for a secondary purpose unless that purpose is related to the primary purpose and you would reasonably expect such use, or you have consented.
5. Third-Party Services and Data Disclosure (APP 6)
We disclose personal information to the following third-party service providers to operate the Elemetric service:
Supabase (Database and Storage)
All account data, job records, photos, and PDF files are stored in Supabase. Supabase's primary data storage for Australian customers is located in Sydney, Australia (AWS ap-southeast-2). Privacy policy: supabase.com/privacy
OpenAI and Anthropic (AI Analysis)
Job photos are transmitted to our Railway-hosted API endpoint, which forwards them to OpenAI (GPT-4o) and Anthropic (Claude) for AI-powered photo analysis. Your photos may be processed on servers located in the United States. We do not permit these providers to use your data to train their models under our current API agreements. Privacy policies: openai.com/privacy, anthropic.com/privacy
Stripe (Payments)
Subscription payments are processed by Stripe. Card details are entered directly into Stripe's secure payment interface and are not transmitted to or stored by Elemetric Australia Pty Ltd. Privacy policy: stripe.com/privacy
RevenueCat, Inc. (In-App Subscriptions)
In-app subscription and purchase management on iOS is handled by RevenueCat. Subscription status and transaction data are shared with RevenueCat to validate and manage your subscription. RevenueCat is located in the United States. Privacy policy: revenuecat.com/privacy
Railway (API Hosting)
Our AI review API endpoint is hosted on Railway. Request logs may be retained by Railway for operational purposes. Privacy policy: railway.app/privacy
Resend (Transactional Email)
Account confirmation and password reset emails are sent via Resend. Your email address is shared with Resend for this purpose. Privacy policy: resend.com/privacy
Replicate (AI Image Generation)
Where the optional job visualisation feature is used, job photos or site images may be processed by Replicate to generate AI-assisted visual representations using Stable Diffusion. Images are transmitted to Replicate's servers, which may be located in the United States. Privacy policy: replicate.com/privacy
We do not sell your personal information to third parties. We do not share your information with advertisers.
6. Cross-Border Disclosure (APP 8)
Some of your personal information is disclosed to overseas recipients, specifically:
- OpenAI and Anthropic — United States (for AI photo analysis)
- Stripe — United States (for payment processing)
- RevenueCat, Inc. — United States (for iOS subscription management)
- Railway — United States (API hosting)
- Resend — United States (transactional email)
- Replicate — United States (AI image generation, optional feature)
Before disclosing your information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a way consistent with the Australian Privacy Principles (APPs). By using the Elemetric app, you consent to cross-border disclosure for these operational purposes.
7. Data Quality (APP 10)
We take reasonable steps to ensure that the personal information we hold is accurate, up-to-date, and complete. You can update your account information at any time within the Elemetric app under Settings. If you believe information we hold about you is incorrect, contact us at cayde@elemetric.com.au.
8. Data Security (APP 11)
We protect your personal information through:
- Supabase Row Level Security (RLS) — users can only access their own data
- SHA-256 hashing of job photos for tamper detection
- HTTPS encryption for all data in transit
- Supabase Auth for secure authentication with hashed passwords
- Stripe's PCI-DSS compliant payment processing
If we become aware of a data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme.
9. Retention and Destruction (APP 11.2)
Job records, photos, and associated documentation are retained for 7 years from the date of job creation to support liability documentation for licensed tradespeople.
Account information is retained for the duration of your subscription and for a reasonable period after account closure. Payment records may be retained as required by Australian taxation law.
When information is no longer required, it is securely deleted from Supabase storage.
10. Access to Your Information (APP 12)
You have the right to access the personal information we hold about you. To request access, email cayde@elemetric.com.au with the subject line "Privacy Access Request". We will respond within 30 days.
We may charge a reasonable fee to cover the cost of providing access. We will not charge for making a request.
We may refuse access where required by law (for example, where access would unreasonably impact another person's privacy). If we refuse access, we will provide reasons in writing.
11. Correction of Your Information (APP 13)
If you believe personal information we hold about you is incorrect, outdated, incomplete, irrelevant, or misleading, contact us at cayde@elemetric.com.au. We will take reasonable steps to correct it within 30 days.
If we do not agree the information needs correction, we will provide you with written reasons and advise you of how to make a complaint.
12. Complaints (APP 1.4)
If you have a complaint about how we handle your personal information, please contact us first at cayde@elemetric.com.au. We will respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective" date at the top of this page. Continued use of the Elemetric app after any changes constitutes your acceptance of the updated policy.
The current version of this Privacy Policy is always available at elemetric.com.au/privacy.
Contact
For any privacy-related queries, access or correction requests, or complaints:
Elemetric Australia Pty Ltd
ABN 83 696 666 672 — ACN: 696 666 672
PO Box W129 Ballarat West VIC 3350
cayde@elemetric.com.au