Privacy policy

Who we are

KeepClear is an early-stage software product based in Melbourne, Victoria, run by Jesse Edge. "We" and "us" in this policy mean KeepClear. You can contact us about privacy at [email protected].

What we collect

• Website enquiries: when you use our waitlist or contact form, we collect your name, email, council or organisation, role and anything you write in your message.
• App accounts: if you are given a KeepClear app account, we collect your name, email and a securely hashed password (we never store your password itself).
• Worker screening records: organisations using the KeepClear app may enter details about their workers: name, email, worker type, team or site, and check details such as Working with Children Check, VIT, NDIS worker screening, first aid or police check numbers, start and expiry dates, and WWC Connect status. Workers may also enter their own details via an invite link.
• Technical information: our hosting provider records basic technical data such as IP address, approximate country and browser type to keep the service secure. We do not use advertising or tracking cookies. The app uses one essential cookie to keep you logged in.

Why we collect it

We use enquiry details to reply to you and to talk with you about KeepClear. We use app data only to provide the service to the organisation that entered it: tracking expiry dates, WWC Connect deadlines and reports. We do not sell personal information and we do not use it for advertising.

Who holds screening records

When an organisation (for example, a council) enters worker records into KeepClear, that organisation remains responsible for them and decides what is collected. We handle that information on its behalf and only as needed to run the service. Workers who want to access or correct their record should contact their organisation first; we will help.

Where it is stored

KeepClear runs on Cloudflare's global platform. Data may be stored or processed on servers outside Australia, including in the United States. We take reasonable steps to make sure providers protect it consistently with the APPs. If you need Australian-only data hosting, contact us before entering real records.

How we protect it

• All traffic is encrypted with HTTPS.
• Passwords are hashed with PBKDF2; sessions use secure, HttpOnly cookies.
• Accounts are created by invitation only, and each organisation sees only its own records.

No system is perfectly secure. If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

How long we keep it

We keep enquiry details while we are talking with you and delete them on request. App records are kept while the organisation's account is active and deleted when they are removed or the account is closed.

Access, correction and complaints

You can ask to see or correct the personal information we hold about you, or ask us to delete it, by emailing [email protected]. We will respond within 30 days. If you are not happy with our response, you can complain to the OAIC.

Anonymity

You can browse this website without telling us who you are. We need your name and email to reply to an enquiry or provide an app account.

Changes

We may update this policy as KeepClear grows. The date at the top shows when it last changed.