Privacy Policy

This Privacy Policy explains how Polypal ("we", "us", or "our") collects, uses, stores, and shares your personal information when you use the Polypal mobile application (the "App"), our website at polypal.au (the "Site"), and any business or supervisor portal we make available (together, the "Services").

We are based in Australia and handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you use our Services from outside Australia, please see the section on international users below.

By using our Services, you agree to the collection and use of information in accordance with this policy.

Who we are and how to contact us

Polypal is a HDPE (poly) pipe butt-fusion welding assistant that helps welders calculate correct welding parameters to recognised standards, work through a guided welding process, and keep compliance records of completed welds.

If you have any questions about this policy or your personal information, contact us at:

• Email: privacy@polypal.au
• Business: Davin Lord (Sole Trader), ABN 56 288 452 168

Information we collect

We only collect information we need to provide the Services.

• Account information. Using an account is optional; if you use Polypal without one, your information stays on your device and we don't collect personal information about you. When you create an account, we collect your name, email address, and password. You may optionally provide a company name and, where relevant, a company code. Passwords are handled by our authentication provider and are stored in a hashed, non-readable form — we never see or store your password in plain text.
• Weld records and job data. When you record a weld, we collect the details you enter or that the App calculates, such as pipe specifications, machine details, welding method, welding parameters (pressures, times, temperatures), timestamps, the region in which the weld was performed, pass/fail status, and any notes you add. These records are created to help you meet compliance obligations for your work.
• Location information. With your permission, the App accesses your device location. See the dedicated section below for exactly how this is used.
• Submitted machine data. If you submit details of a welding machine that is not yet in our list, we collect that information so we can review it and, if suitable, add it to the shared machine database for other users.
• Enquiries and correspondence. If you contact us through the Site's contact or "register your interest" forms, or by email, we collect the information you provide — typically your name, email address, company name, and message — so we can respond and, where relevant, follow up about the business portal.
• Technical and usage information. When you use the Services, we may collect limited technical information such as device type, operating system, app version, and basic diagnostic data needed to keep the Services working and secure.

How we use your information

We use your information to:

• provide the core functions of the App, including parameter calculations, guided welding, and weld record-keeping;
• create, store, and sync your account and weld records across your devices and our systems;
• determine the applicable pipe standard for your region;
• review and, where appropriate, add submitted machines to the shared machine database;
• respond to your enquiries and provide support;
• maintain the security, integrity, and reliability of the Services;
• comply with our legal obligations.

We do not sell your personal information, and we do not use your weld records or account details for advertising.

Location permission

The App requests permission to access your device location. We use location for two purposes:

1. Standard and region detection — to automatically determine which pipe standard applies to your region, so the App shows you the correct welding data by default.
2. Weld record context — to record the precise location at which a weld was performed, as part of your compliance record.

You control this permission through your device settings and can turn it off at any time. If you decline or disable location access, the App will still work — you can select your region and applicable standard manually.

The App stores your precise location (latitude and longitude) on the weld record when location permission is granted, and falls back to your selected region when it is not.

How your information is shared

We share personal information only as described below.

With your organisation. If you use a company code to link your account to an organisation, weld records you create under that organisation may be shared with, and accessible to, that organisation, including its supervisors or administrators. Those records remain associated with the organisation, including if you later leave it. If you do not use a company code, your records remain associated with your individual account.

With service providers. We use trusted third parties to run the Services. Each only receives the information needed to perform its function, and is required to protect it:

• Supabase — database, authentication, and cloud storage/sync of your account and weld records.
• PowerSync — synchronisation of data between your device and our database.
• Cloudflare — website hosting, content delivery, and DNS.
• Web3Forms — processes submissions from our Site contact and interest forms and forwards them to us by email.
• Zoho — our email provider, used to send and receive correspondence with you.
• Apple App Store and Google Play — distribute the App and are subject to their own privacy policies.

For legal reasons. We may disclose information where required by law, to enforce our terms, or to protect the rights, safety, and property of Polypal, our users, or others.

Where your data is stored and international users

Our systems and some of our service providers store or process data outside Australia. In particular, our form-handling provider (Web3Forms) processes data in the United States, and our database provider (Supabase) stores data in Northeast Asia (Tokyo).

Where personal information is transferred outside your country, we take reasonable steps to ensure it is handled consistently with this policy and applicable law. If you are located in the European Economic Area or United Kingdom, you may have additional rights under the GDPR; contact us and we will do our best to accommodate them.

Offline use and on-device data

The App is designed to work offline. Weld records and reference data you use are stored locally on your device so you can work in areas with no connectivity. When your device is next online and you are signed in, your records are synced to our cloud database. Data held locally on your device is protected by your device's own security; we recommend you use a device passcode.

Data security

We take reasonable measures to protect your information, including encrypted connections, access controls, and database-level security rules that restrict each user's data to their own account (and, where relevant, their organisation). No method of transmission or storage is completely secure, but we work to protect your information and to keep our systems up to date.

Data retention

We keep your information for as long as your account is active or as needed to provide the Services. Weld records may be retained as compliance records, including by your organisation where a company code has been used. Enquiry and correspondence data is kept for as long as needed to respond and for our reasonable business records. When information is no longer needed, we take steps to delete or de-identify it. You can request deletion of your account and data at any time — see below.

Your rights and choices

You can:

• Access and correct the personal information we hold about you, including through your account settings or by contacting us.
• Request deletion of your account and associated data. You can do this through our account and data deletion page at polypal.au/delete, or by contacting us.
• Control permissions, such as location access, through your device settings.
• Withdraw consent where our processing relies on consent, by contacting us or adjusting the relevant setting.

Please note that some information may need to be retained where we have a legal obligation to keep it, or where records belong to an organisation you welded for.

Children's privacy

The Services are a professional tool intended for use by welding professionals and businesses. They are not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will take steps to remove it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above and, where appropriate, notify you through the Services. We encourage you to review this policy periodically.

Complaints

If you have a concern about how we have handled your personal information, please contact us first and we will do our best to resolve it. If you are in Australia and are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.