Privacy Policy

1. About This Policy

This Privacy Policy describes how Amzint (“we”, “us”, or “our”) collects, uses, holds, and discloses personal information through the StaffHawkmobile application and web dashboard (collectively, the “Service”).

We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service, you consent to the practices described in this policy.

2. Who We Are

StaffHawk is operated by Amzint, a business based in New South Wales, Australia. For privacy-related enquiries, contact us at support@staffhawk.com.au.

3. Information We Collect

We collect the following categories of personal information:

Account Information

• Full name and email address
• Profile photo (optional)
• Password (stored as a one-way hash; we cannot recover it)

Sign-In via Google or Apple

If you choose to sign in using Google or Apple, we receive from those providers only the information needed to create or link your account:

• Google Sign-In: your name, email address, and profile photo as provided by your Google account
• Sign in with Apple:your name and email address (or Apple's private relay email address if you choose to hide your email)

We do not receive your Google or Apple password, and we do not access any other data from your Google or Apple account.

Location

• GPS coordinates recorded at the moment you perform a check-in or check-out, used solely to verify you are within range of the job site
• Location is collected only when you actively tap check-in or check-out - never continuously or in the background

Camera & Photos

• A photo taken at check-in and check-out to verify on-site presence
• The camera is accessed only when you initiate a check-in or check-out action
• Photos are stored securely and are accessible only to you and your employer

Work Data

• Shift times, hours worked, and attendance records
• Job assignments and roster information

Device Information

• Push notification token, used to send shift reminders and assignment notifications to your device
• An authentication token stored locally on your device to keep you signed in (mobile app) or in your browser's local storage (web dashboard) - this is not a tracking cookie

4. How We Use Your Information

We use your personal information to:

• Create and manage your account
• Verify your identity and on-site presence during check-in and check-out
• Calculate hours worked and generate invoices and payroll records
• Send shift notifications and reminders
• Provide employers with attendance records for their workforce
• Respond to your support enquiries
• Comply with legal obligations

We do not use your personal information for marketing purposes without your explicit consent, and we do not sell your data to third parties.

5. Disclosure of Personal Information

We may share your information with:

Your Employer / Company Owner

Attendance records, check-in/out photos, GPS verification status, and hours worked are shared with the company owner or job manager who assigned you to a job. This is the core function of the Service.

Service Providers

• Google LLC (United States) - Google Sign-In (identity verification only); Google Cloud Platform for infrastructure, file storage, and application hosting (Singapore region); and Google Maps and Places API for job site address search (see also below)
• Apple Inc. (United States) - Sign in with Apple (identity verification only)
• Expo / Expo Push Notification Service (United States) - push notification delivery
• Brevo (European Union) - transactional email delivery
• Xero Limited (New Zealand / United Kingdom) - if your employer has connected their Xero account, we transmit invoice and billing data on their behalf. If the employer uses Xero Payroll, we also transmit your name, mapped employee ID, and hours worked per day as timesheet data. This occurs only when an employer explicitly initiates a push from StaffHawk to their Xero account.
• Sentry (Functional Software, Inc.) (United States) - error monitoring and crash reporting. If the app encounters an error, technical diagnostic information (device type, OS version, error stack trace, and anonymised usage context) is sent to Sentry to help us identify and fix issues. No personally identifiable information is intentionally included in error reports.

All service providers are contractually bound to protect your information and may only use it for the specific purposes we have engaged them for.

Overseas Disclosure

Some of our service providers are located overseas (United States, European Union, Singapore). By using the Service, you consent to your personal information being transferred to and held overseas. We take reasonable steps to ensure overseas recipients protect your information in a manner consistent with the Australian Privacy Principles.

Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority.

6. Data Security

We take reasonable technical and organisational measures to protect your personal information from misuse, interference, loss, and unauthorised access. These include encrypted data transmission (HTTPS), access controls, and secure cloud infrastructure.

Passwords are stored as one-way cryptographic hashes and cannot be recovered by us. If you suspect your account has been compromised, contact us immediately at support@staffhawk.com.au.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete or de-identify your personal information within 30 days, except where we are required by law to retain it (for example, financial records under Australian taxation law).

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or out-of-date information
• Request deletion of your account and associated data - you can do this from within the app or by contacting us
• Complain about a breach of the Australian Privacy Principles

To exercise any of these rights, contact us at support@staffhawk.com.au. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

9. Children's Privacy

The Service is intended for use in a professional employment context. We do not knowingly collect personal information from children under the age of 13. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification. The updated policy will be effective from the date published on this page. Continued use of the Service after that date constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions or requests: