Privacy Policy

MyDocketApp keeps the records of your work: your dockets, your clients and the photos you attach. We collect what the app needs to do that job and nothing else. We do not sell your data, we do not run advertising, and there is no third-party analytics or tracking in this app.

This policy applies to the MyDocketApp mobile and web app. It covers you as the account holder, and the client and site details you enter about the people you work for.

• Your account — email address, password (stored only as a hash by our authentication provider), and, if you use it, your Apple sign-in identifier. If you verify a mobile number, we store that number.
• Your business profile — business name, ABN, address, contact name, contact email, mobile, and the logo you upload for your docket PDFs.
• Your clients and jobs — the names, contact names, email addresses, mobile numbers and site addresses you enter so dockets can be addressed and sent.
• Your dockets — dates, shifts, start and finish times, breaks, travel, plant and equipment, billable items, descriptions, notes, and any photos you attach from your camera or gallery.
• Subscription status — whether your plan is active, trialing or expired, and when the period ends. Card numbers never touch the app: payment details go directly to the payment provider.
• On your device only — a local copy of the above so the app works offline, plus your app-lock PIN, which is held in the device's secure storage and is never sent to us. Face ID and fingerprint checks happen on the device; we never receive your biometrics.

• Run the app: store your dockets, generate PDFs, and keep everything in sync across your devices.
• Send dockets you choose to send, by email or SMS, to the recipient you name.
• Send you an approval link's outcome and the alerts you have switched on in Settings → Notifications.
• Verify your mobile number when you ask us to.
• Take payment for a subscription and keep your plan status current.
• Investigate a problem when you report one through Settings → Support.

We do not use your dockets, photos or client lists for advertising, profiling, or training any product other than the service you are using.

Only the providers we need to run the service, each handling one part of it:

• Supabase — our database, file storage and authentication. Your rows are isolated to your account at the database level.
• Our email provider — delivers the dockets you send and the support messages you write to us.
• Twilio — delivers docket SMS and verification codes.
• Stripe (web) and Apple or Google (in-app purchases), through RevenueCat — take payment and tell us whether your subscription is current.
• The person you send a docket to — they receive the docket you addressed to them, and if you request approval, a link that shows them that docket. Anyone with that link can view and respond to it, so send it only to the person you mean to.

We will also disclose information if the law requires it. We do not sell your personal information, and we never have.

Your dockets stay until you delete them or delete your workstation. Deleting your workstation from Settings → Security removes your account and the data attached to it — dockets, clients, jobs, photos and your business profile. That cannot be undone, so export or share anything you need to keep first.

A copy also lives in the app's local cache on each device you have signed in on. Signing out clears it; uninstalling the app removes it entirely.

• Everything travels over an encrypted connection (TLS), and is encrypted at rest by our infrastructure provider.
• Database access rules scope every row to the account that owns it — one user cannot read another's dockets.
• Uploaded logos and attachments are scoped to your own folder.
• You can add an app lock — a PIN, Face ID or fingerprint — from Settings → Security.

No system is perfect. If we ever discover a breach that affects you, we will tell you and the relevant regulator as the law requires.

• See and correct your details: everything is editable in the app — your profile in Business Details, your clients in Clients, your dockets in Dockets.
• Take your data with you: any docket can be exported as a PDF, and Summary produces a report of a period's work.
• Delete it: remove individual records at any time, or the whole workstation from Settings → Security.
• Turn off optional messages: Settings → Notifications controls the alerts we send you. Messages needed to run your account — such as a password reset — will still be sent.

Depending on where you live you may also have the right to ask for a copy of what we hold, to object to certain handling, or to complain to a privacy regulator. Ask us through Settings → Support and we will help.

When you add a client's contact details, you are asking us to store information about someone else. You are responsible for having the right to share it with us, and for making sure the dockets you send go to the right recipient.

MyDocketApp is a tool for running a business and is not intended for anyone under 16. We do not knowingly collect their information.

If we change how the app handles your information, we will update this page and the date at the top. Significant changes will be flagged in the app.

Questions about this policy, or a request about your data: Settings → Support → Contact Support. It reaches us directly and we will reply to the email address on your account.