PRIVACY POLICY
PRIVACY POLICY
Sift & Screen — Independent Developer Application
Sift & Screen — Independent Developer Application
Last Updated: May 2026
Last Updated: May 2026
1. DATA CONTROLLER
1. DATA CONTROLLER
Sift & Screen is developed and operated by an independent, self-employed software developer (the "Developer"). The Developer acts as the Data Controller under applicable privacy legislation, including the Australian Privacy Act 1988 and, where applicable, the General Data Protection Regulation (GDPR).
Sift & Screen is developed and operated by an independent, self-employed software developer (the "Developer"). The Developer acts as the Data Controller under applicable privacy legislation, including the Australian Privacy Act 1988 and, where applicable, the General Data Protection Regulation (GDPR).
For all data enquiries or deletion requests, contact:
For all data enquiries or deletion requests, contact:
📧 jrhayward93@gmail.com
📧 jrhayward93@gmail.com
2. PRINCIPLE OF DATA MINIMISATION
2. PRINCIPLE OF DATA MINIMISATION
The Developer is committed to collecting only the absolute minimum data necessary for the application to function. Sift & Screen processes only the following categories of personal information:
The Developer is committed to collecting only the absolute minimum data necessary for the application to function. Sift & Screen processes only the following categories of personal information:
• Worker first names (as entered by the site administrator)
• Worker first names (as entered by the site administrator)
• 4-digit PIN hashes (stored locally for device authentication)
• 4-digit PIN hashes (stored locally for device authentication)
• Machinery metadata (hour meter readings, maintenance notes, fuel logs)
• Machinery metadata (hour meter readings, maintenance notes, fuel logs)
• Company identifiers (used to isolate your company's data from other tenants)
• Company identifiers (used to isolate your company's data from other tenants)
The application does NOT collect, process, or store: full legal names, government identifiers, financial information, GPS location, biometric data, health information, or any data unrelated to fleet maintenance operations.
The application does NOT collect, process, or store: full legal names, government identifiers, financial information, GPS location, biometric data, health information, or any data unrelated to fleet maintenance operations.
3. PURPOSE OF DATA PROCESSING
3. PURPOSE OF DATA PROCESSING
All data collected is processed exclusively for the following legitimate operational purposes:
All data collected is processed exclusively for the following legitimate operational purposes:
• Enabling worker authentication via PIN on registered devices
• Enabling worker authentication via PIN on registered devices
• Recording and synchronising machinery pre-start checks and maintenance logs
• Recording and synchronising machinery pre-start checks and maintenance logs
• Generating operational reports for site administrators
• Generating operational reports for site administrators
• Providing offline-first functionality in low-connectivity work environments
• Providing offline-first functionality in low-connectivity work environments
4. DATA STORAGE AND SECURITY
4. DATA STORAGE AND SECURITY
Your data is stored in two locations:
Your data is stored in two locations:
(a) On-Device (SQLite): Data is stored locally on the registered tablet/device. Physical security of the device is the responsibility of the Company administrator.
(a) On-Device (SQLite): Data is stored locally on the registered tablet/device. Physical security of the device is the responsibility of the Company administrator.
(b) Cloud (Supabase): Data is synchronised to a Supabase-hosted PostgreSQL database, isolated by your unique Company ID. Supabase complies with SOC 2 Type II standards.
(b) Cloud (Supabase): Data is synchronised to a Supabase-hosted PostgreSQL database, isolated by your unique Company ID. Supabase complies with SOC 2 Type II standards.
5. DATA SHARING AND THIRD PARTIES
5. DATA SHARING AND THIRD PARTIES
Your data is NEVER sold, rented, traded, or shared with any third party for commercial, marketing, or analytical purposes. The Developer has zero commercial interest in your operational data. Data may only be disclosed if required by law (e.g., a lawful court order).
Your data is NEVER sold, rented, traded, or shared with any third party for commercial, marketing, or analytical purposes. The Developer has zero commercial interest in your operational data. Data may only be disclosed if required by law (e.g., a lawful court order).
6. DATA RETENTION AND DELETION
6. DATA RETENTION AND DELETION
You may request deletion of all data associated with your account at any time by contacting the Developer at the email address above. The Developer will action verified deletion requests within 30 days. On-device data can be cleared immediately via the "Unlink Device" function in the application.
You may request deletion of all data associated with your account at any time by contacting the Developer at the email address above. The Developer will action verified deletion requests within 30 days. On-device data can be cleared immediately via the "Unlink Device" function in the application.
7. YOUR RIGHTS
7. YOUR RIGHTS
Depending on your jurisdiction, you may have the right to access, correct, or erase your personal data. To exercise these rights, contact the Developer directly.
Depending on your jurisdiction, you may have the right to access, correct, or erase your personal data. To exercise these rights, contact the Developer directly.