Privacy Policy

Last updated 23 September 2026

AuditCapture is an app for recording safety, environmental, quality and facility findings at a workplace: you photograph what you found, describe it, assign someone to fix it, and track it through to closure. This policy explains what the app stores, who can see it, and how to get it removed.

What the app stores

• Your account — your name and email address. If you sign in with Apple or Google, we receive an identifier and the email address from them; we never see your password for those accounts.
• The findings you record — the description, category, severity, type and source, where it was observed (building, department, area, floor, room), due dates, who it is assigned to, and anything written when it is closed out: root cause, corrective and preventive actions, and closure notes.
• Photos you take of a finding, including any mark-up you draw on them.
• Precise location, but only if you allow it — the coordinates where a finding was recorded, so whoever fixes it can find the spot again. Findings save normally without it, and you can refuse or withdraw this permission at any time in your phone's settings.
• The model of the device a finding was recorded on.
• People you add to a site — their name, and their email address or phone number if you enter one, so findings can be assigned to them and sent to them.
• A notification token for your device, if you turn on reminders, so the app can tell you when something you own is coming due.
• A record of changes to a finding — who closed, reopened or edited it, and when. An audit trail is the point of the app, so this cannot be switched off.

What the app does not do

• No advertising, and no advertising identifiers.
• No tracking of you across other apps or websites.
• No analytics or behaviour-tracking software of any kind.
• Your data is never sold, rented or shared for anyone else's marketing.

Your phone's contacts

If you choose to fill in someone's details from your contacts, the app asks your permission and opens your phone's own contact picker. Your contact list is not uploaded or searched: only the single person you pick is saved, and only their name, email address and phone number. You can decline and type the details instead.

Who can see your findings

Findings belong to the organisation they were recorded for. People in your organisation can see findings for the sites they have access to, and administrators can see the sites they administer. Nobody outside your organisation can see them. When you share a finding by email or message, you choose the recipient and what is sent.

Services we rely on

These companies process data on our behalf, only to make the app work:

• Supabase — hosts the database, the photos and the sign-in system.
• Brevo — sends account email such as confirmation and password reset messages.
• Apple and Google — deliver push notifications, and handle sign-in if you choose to sign in with them.
• Expo — routes push notifications to Apple's and Google's services.

How long it is kept

Findings and their photos are kept for as long as your organisation keeps using AuditCapture — an audit record that disappeared on its own would not be much of an audit record.

You can delete your account at any time from Settings → Delete account in the app. That removes your account, your access to every site, your reminders and the notification token for your phone.

Findings you reported are not deleted, and your name stays on them. They belong to the organisation you reported them to, they are the record other people rely on to show what was found and fixed, and who observed a finding is part of that record. What is removed is the link to your account: the finding no longer points at a user, and anything still assigned to you is handed back to the site. If you would rather your name were removed as well, write to auditcapture@gmail.com and we will discuss what your organisation's record-keeping obligations allow.

Your choices

• Location and notifications are optional, and can be turned off in your phone's settings at any time without stopping the app from working.
• You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted, by writing to auditcapture@gmail.com.

Security

Data is encrypted in transit. Access is restricted at the database itself, so a person can only read the sites and organisation they belong to — not by the app asking nicely, but by rules the database enforces on every request.

Children

AuditCapture is a workplace tool and is not directed at children.

Changes

If this policy changes, the date at the top changes with it. Material changes will be announced in the app.

Contact

Questions about privacy, or a request about your data: auditcapture@gmail.com.