1. Who we are

SureHarbor is operated by Sure Harbor App (ABN 67 561 945 067) (“we”, “us”, “our”). You can contact us about privacy at support@sureharbor.app.

2. Two roles we play

Our own customers. When you sign up and pay for SureHarbor, we collect and use your account and billing information as described below — we decide how that information is handled.

Data your company puts in. When a business uses SureHarbor to manage information about its workers, clients, participants or others (“Customer Data”), that business decides what to collect and why, and is responsible for doing so lawfully. We handle Customer Data on that business’s behalf and on its instructions, to provide the platform. If you are a worker or client of a business that uses SureHarbor, please contact that business about its own privacy practices.

3. Information we collect

• Account details — name, email, phone, company name and role.
• Billing details — handled by our payment provider, Stripe. We receive confirmation and limited details (such as the card brand and last four digits); we do not store full card numbers.
• Content you upload — records, documents and other Customer Data, which your company may choose to include personal and sensitive information (for example health-related notes).
• Usage and device data — pages visited, actions taken, IP address, browser and device information and log data, used to run, secure and improve the platform.
• Communications — messages you send us for support.

4. Sensitive information

The platform can store sensitive information (such as health information) where a business chooses to record it. We handle that information only to provide the service and on the business’s instructions. The business is responsible for obtaining any consent required and for having a lawful basis to collect and use it.

5. How we use information

We use personal information to create and run accounts, provide the apps you subscribe to, process payments, provide support, keep the platform secure, comply with our legal obligations, and improve our products. We do not sell personal information, and we do not use Customer Data for advertising.

6. Who we share it with

We share information only with service providers who help us run the platform, under confidentiality obligations and only as needed:

• Stripe — payments and subscription billing.
• Supabase — database hosting and authentication.
• Our email provider — sending account and notification emails.
• Anthropic — powering AI features (see section 7).
• Twilio — only if your business switches on SMS messaging.

We may also disclose information where required by law, or to protect our rights, users or the public.

7. AI features

Some apps include AI-assisted features. When you use them, the content you submit is sent to our AI provider to generate your result. It is processed to produce that output and is not used to train third-party AI models. You are responsible for reviewing AI output before relying on it.

8. Overseas disclosure

We store data in Australia where our infrastructure allows. Some of our service providers (for example Stripe and Anthropic) may store or process information outside Australia, including in the United States and other countries. Where this happens, we take reasonable steps to ensure the information is handled consistently with the Australian Privacy Principles.

9. Security and retention

We protect personal information with industry-standard measures, including encryption in transit and at rest, database-level access controls and logged support access. We keep information while your account is active. After termination you may request an export of Customer Data within 30 days, after which we may delete it. We retain some account and billing records longer where law requires.

10. Accessing and correcting your information

You can access and correct most of your personal information directly in the app, or by contacting us at support@sureharbor.app. If you are a worker or client of a business that uses SureHarbor, please ask that business — we will help them respond. We may need to verify your identity before acting on a request.

11. Cookies and analytics

We use essential cookies to keep you signed in, and first-party analytics to understand how the platform is used so we can improve it. We do not use third-party advertising trackers.

12. Complaints

If you have a privacy concern, contact us first at support@sureharbor.appand we’ll work to resolve it. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

13. Changes to this policy

We may update this policy from time to time. We’ll post the updated version here with a new effective date, and notify account admins of material changes.

Contact

Sure Harbor App (ABN 67 561 945 067)
Privacy enquiries: support@sureharbor.app