Privacy Policy
Last updated: 10 August 2026
Grounded is a small business operated under ABN 79 554 876 311. This explains what we collect through the Owner App and Manager App, and what we do with it.
1. What we collect
From owners: your email, business name, and site details you enter.
From managers: your name and role, as added by your owner. Your PIN is never stored in readable form — only a one-way cryptographic hash that can't be reversed back into your PIN.
Shift data: tasks completed, timestamps, scores, written shift reports, and any photos taken during a shift.
Payment: handled entirely by Stripe. Grounded never sees or stores your card number — only Stripe does, under its own privacy policy.
2. Why we collect it
To run the service: to show owners what's happening across their sites, to show managers what a shift requires, and to bill active subscriptions.
3. Where it's stored
Data is stored with our infrastructure providers (Supabase for the database and file storage, Stripe for payments), hosted in Asia-Pacific data centres. We don't sell your data, and we don't share it with anyone outside the account it belongs to, except where the law requires it or where a provider above needs it to run the service.
4. If you're a manager, not the account owner
Your account owner controls what's collected about your shifts — the photos, scores, and reports are visible to them by design; that's the point of the system. If you have questions about what's recorded about you, your owner is the first point of contact, since they set up your access.
5. How long we keep it
For as long as the account is active. If an owner deletes their account, all shifts, notes, reviews, managers, sites, and the account record are deleted immediately and permanently — this can be done at any time from Settings → Account.
6. Security
We use industry-standard measures — encrypted connections, access controls scoped to your own account, and hashed (not plaintext) PINs. No system is completely immune to risk, and we keep improving this as the product grows.
7. Small business exemption
Grounded may fall under the small business exemption in the Privacy Act 1988 (Cth). Regardless, we aim to handle personal information consistent with the Australian Privacy Principles as a matter of good practice.
8. Your rights
You can ask what we hold about you, correct it, or ask for it to be deleted, by emailing source.grounded@gmail.com.