Privacy policy

Last updated 5 October 2026

Who we are

BuildersFlow runs the BuildersFlow website and the BuildersFlow app. Builders use them to run site sign-on, inductions and safety paperwork, and the people who work on and visit their sites use them too. This policy says what we collect, why, and who sees it. We follow the Australian Privacy Principles.

Questions or requests: support@buildersflow.com.au.

What we collect

  • Your account: your name, email address and phone number, and who you work for. You sign in with a code emailed to you.
  • Your time on site: when you sign on and off, which site, and whether you were there as a worker or a visitor.
  • Where you signed on: your phone's location at the moment you sign on, so the builder can see you signed on at the site.
  • Your induction: your answers, your signature, and photos of your White Card and trade licence, with the details read off them (name, card number, date of birth, state and date issued).
  • Site paperwork: SWMS you sign, inspection checklists you fill in, incidents and hazards you report, notes and photos you add when you sign off, and the signatures on them.
  • Contractor businesses: business details such as the ABN, insurance and licence documents, pre-qualification answers and the team list.
  • Your phone: an ID the app makes for itself when it's installed, the phone's model and Android or iPhone version, the app version, and when you signed in and last used the app.
  • A record of changes: who did what and when, so the site register can be trusted.

We don't track you. The app checks your phone's location once, when you sign on, and never again: not while you work, not when the app is closed. The app asks for your camera, your location and notifications when you first open it, and needs all three to work. There are no ads, and we don't sell personal information.

Where it comes from

Mostly from you, in the app or on the website. Some comes from the builder or the business you work for, for example when they add you to a crew or give you a checklist to fill in.

Why we use it

  • To sign you on and off site, and to keep the site register.
  • So builders can meet their work health and safety duties: inductions, SWMS, inspections and incident reports.
  • To email you sign-in codes and messages about your sites.
  • To keep accounts secure and fix problems.

Who sees it

  • The builder running the site and their team see what you do on their sites: your sign-ons (and whether you signed on at the site), induction, credentials, signatures and reports.
  • The business you work for sees its own crew and paperwork.
  • Services that run BuildersFlow for us, only to do that job: Amazon Web Services (file storage) and MongoDB (the database), both in Sydney; Resend (sending email); a card-reading service that reads the details off White Card and licence photos; and Google Maps (addresses only). Our website may use Google Analytics to count visits. The app doesn't.
  • BuildersFlow staff can see which phones are signed in to the app and sign one out, to keep accounts secure and help if a phone is lost.
  • Anyone the law requires us to tell, such as a regulator.

Outside Australia

Our database and files are kept in Australia. Sending email and reading card photos may happen outside Australia, including in the United States.

Keeping it safe

Everything travels over encrypted connections. A record can only be seen by the people it belongs with, and the app keeps its sign-in in your phone's secure storage.

How long we keep it

Builders have to keep site safety records, such as sign-ons, inductions, SWMS and incident reports, for as long as the law says. Those stay on the builder's register even after you delete your account.

Deleting your account switches your login off straight away and signs you out everywhere.

Seeing, fixing or complaining

To see what we hold about you, correct it, or complain about how we handled it, email support@buildersflow.com.au from your account's address. We'll reply within 30 days.

If you're not happy with our answer, you can go to the Office of the Australian Information Commissioner (oaic.gov.au), or in New Zealand the Privacy Commissioner (privacy.org.nz).

Changes

If we change this policy, we'll update it here and change the date at the top.