Privacy Policy

Only what the app needs to do its job:

• Account — your name, email address, and either a hashed password or a Google sign-in identifier. We never store your password itself.
• Business details — trading name, ABN, address, phone, GST registration, and the bank account name, BSB and account number that appear on your invoices.
• Visa settings — the visa type or work condition you select, your fortnightly hour cap, and your tracking start date.
• Work records — employers, hourly rates, and each shift you log (date, times, break, hours, pay, whether you have been paid).
• Invoices — including the name, email and address of the client you invoice.

We do not collect payment card details, and we do not use advertising or analytics trackers. We do not record your screen or session.

When you create an invoice you enter your client's details, and when you add an employer you enter their name. That is personal information about someone who is not a user of this app. You are responsible for having a proper basis to provide it, and for telling those people if they ask who holds their details.

To provide the service: calculating your hours against your visa condition, generating invoices, and letting you sign in. We do not sell personal information, and we do not use it for marketing without your consent.

We use these service providers, and only for the purposes shown:

• Supabase — database hosting (Singapore (AWS ap-southeast-1))
• Vercel — application hosting (United States and global edge locations)
• Resend — sending verification and password-reset email (United States); receives your email address only
• Google — only if you choose to sign in with Google (United States)
• Sentry — error monitoring (United States). Error reports are automatically stripped of your identity, request contents, and any field resembling an ABN, BSB, account number, address, phone or token before they are sent.

Your information is stored and processed outside Australia — primarily in Singapore (AWS ap-southeast-1), and in the United States by the providers listed above. By using the service you consent to this disclosure. We take reasonable steps to ensure these providers handle your information consistently with the APPs, but overseas recipients may not be subject to Australian privacy law.

• Encrypted in transit (HTTPS) and at rest by our database provider.
• Passwords are hashed, never stored in readable form.
• Every record is tied to your account, and every query is restricted to the signed-in account.
• Backups are encrypted with AES-256 before leaving the server.

No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

You can view and edit everything the app holds about you from within your account. Settings → Account → Delete my account permanently deletes your account and all associated business details, employers, shifts and invoices immediately.

Encrypted backups may retain a copy for up to 90 days after deletion, after which they expire automatically. To request access or correction another way, email krishmikaabisheka1@gmail.com.

For as long as your account exists. Note that Australian tax rules generally expect invoices and business records to be kept for five years — that obligation is yours, so export any invoices you need before deleting your account.

If you think we have mishandled your personal information, email krishmikaabisheka1@gmail.com with the details. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, or 1300 363 992.

We will update this page and change the "last updated" date above. Material changes will be notified by email.

Invoice HQ — krishmikaabisheka1@gmail.com