Privacy Policy

J.B Light & C Yang (ABN 92 828 414 163), a partnership trading as “Toolie” (“Toolie”, “we”, “us”, “our”), provides the Tradie Profit Tracker app and its associated backend services (together, the “Service”). This policy explains what personal information we collect, why, how we handle it, and what rights and choices you have.

Toolie is offered to users in Australia and this policy is written to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). If you access Toolie from outside Australia, your information will still be handled as described here, including being stored in Australia (see Where your information is stored and processed below).

This policy covers the Toolie mobile app and the account/API services behind it. It does not cover any separate public marketing or landing page Toolie may link to. If you visit one, check that page for its own privacy notice.

1. Who we are and how to contact us

The Service is operated by J.B Light & C Yang (ABN 92 828 414 163), a partnership, of 258 Bourke Street, Glen Innes, NSW 2370, Australia. For any privacy question, access/correction request, or complaint, contact us at toolie@marsbound.co. We aim to acknowledge privacy enquiries within a reasonable time and to resolve them within 30 days.

2. Information we collect

2.1 Information you give us directly

• Account information: your name, email address, and password. Your password is stored only as a secure cryptographic hash. We never see or store it in plain text.
• The business data you enter: jobs (client name, optional client email, job reference, description, notes, date, quoted amount, buffer/overhead percentage, status), your materials/price catalogue (name, code, unit, category, supplier, description, price, tags), and your fixed/overhead expenses. This is your own business record-keeping data. We only use it to show it back to you and to calculate the job-costing figures the app displays (e.g. profit, margin).

2.2 Information about your clients

If you enter a client’s name or email address against a job, that is personal information about a third party, provided by you, not by them. You are responsible for having a lawful basis to give us that information (see Your responsibility for third-party information in our Terms of Service). We only use it to display it back to you within your own account. We never contact your clients directly and never use their details for any purpose of our own.

2.3 Information collected automatically

When you sign in, our authentication system records the IP address and device/browser identifier (“user agent”) associated with each login session, along with session creation and expiry times. This is collected solely to keep your account secure: to detect suspicious activity and to let a session be identified and revoked if needed. We do not use this information for analytics, profiling, advertising, or to track you across other apps or websites, and as of this version of Toolie we do not integrate any analytics, advertising, or crash-reporting SDK of any kind.

2.4 Subscription and billing information

If you subscribe to Toolie Pro, the purchase is processed entirely by Apple through the App Store’s in-app purchase system. We use RevenueCat to receive your subscription status (active, cancelled, expired, renewal date) from Apple so the app can unlock the right features. We never see, receive, or store your payment card details, billing address, or any other Apple ID account information. That is handled entirely between you, Apple, and RevenueCat.

2.5 Communications

We send transactional emails you trigger yourself: an email verification code when you sign up, and a password-reset code if you request one. We do not send marketing or promotional email, and we do not use your email address for anything beyond these account-security purposes.

3. How we use your information

We only use your information to:

• Create and secure your account, and authenticate you;
• Provide the Service itself: store and display the jobs, materials, and expenses you enter, and calculate cost/profit figures from them;
• Determine and enforce your free-tier or subscription status;
• Send you account-security emails you’ve requested (verification, password reset);
• Detect, investigate, and prevent fraud, abuse, or security incidents; and
• Comply with our legal obligations.

We do not use your information for any other purpose without telling you, and we never sell your personal information or share it for anyone else’s marketing or advertising purposes.

4. Who we share information with

We use a small number of service providers to run Toolie. Each only receives what it needs to perform its specific function, and none of them may use your information for their own purposes:

• Apple and RevenueCat: process in-app purchases and report your subscription status back to us. See Apple’s and RevenueCat’s own privacy policies for how they handle payment information directly.
• Resend: sends the transactional account emails described above on our behalf.
• Vercel: hosts and runs our backend/API.
• Neon: hosts our database, physically located in Sydney, Australia.

We do not share your information with any other third party, except where required by law (for example, in response to a valid legal process) or to protect the rights, property, or safety of Toolie, our users, or the public.

5. Where your information is stored and processed

Your account and business data is stored in a database located in Sydney, Australia. However, some of the service providers listed above (Apple, RevenueCat, Resend, and Vercel’s own infrastructure) are based in, or may process data in, the United States or other countries outside Australia in the course of providing their service to us. Where this happens, we rely on each provider’s own contractual and security commitments as the protection required under Australian Privacy Principle 8. If you have questions about a specific provider’s data-handling location, contact us and we’ll do our best to clarify.

6. Data security

We take reasonable technical and organisational steps to protect your information, including: encrypting data in transit (HTTPS), hashing passwords rather than storing them, restricting database and infrastructure access to what’s necessary to operate the Service, and relying on reputable, security-conscious infrastructure providers (Vercel, Neon). No method of storage or transmission is 100% secure, but we work to keep your information protected to a standard appropriate to the sensitivity of the data involved.

7. Data retention

We keep your information for as long as your account exists, so the Service can function. If you delete your account (Settings → Danger Zone → Delete Account), your account and every job, material, and expense record you’ve created is immediately and irreversibly removed from our live production database, and this action cannot be undone from within the app. Like most hosted database services, our infrastructure provider retains routine, automated backups for a limited rolling period as part of its standard disaster-recovery process; residual copies of deleted data may persist in those backups until they are naturally cycled out, but are not accessible to us for day-to-day use and are not used for any purpose other than disaster recovery.

8. Information retained after account deletion

Deleting your account permanently and immediately erases your account and every job, material, and expense record you’ve created, as described above, with one narrow, deliberate exception. To enforce the free tier’s lifetime limit (3 jobs, once, per person) and to prevent it from being reset simply by deleting an account and creating a new one, we retain a one-way cryptographic hash of your email address, together with how many lifetime jobs that email had used at the time of deletion. This hash is generated using a secret key we control, so it cannot be reversed to reveal your email address by anyone outside our systems, but because we can still use it to recognise a returning email address, it remains personal information under the Privacy Act, not anonymous data, and we treat it accordingly. This hash is not linked to any of the other information described in this policy, all of which is deleted as described above, and it is used for no purpose other than enforcing the free tier’s lifetime limit. This is the only information we retain once an account is deleted (aside from the routine backup residue described in Data retention above).

9. Your rights

Under the Australian Privacy Principles, you can:

• Access and correctyour information: everything you’ve entered is visible and editable directly in the app at any time, at no cost.
• Ask what we holdabout you, or ask us to correct it, by emailing us. We’ll respond within a reasonable time.
• Delete your account at any time. This permanently and immediately erases your account and all data associated with it.
• Complain if you think we’ve mishandled your information. See Complaints below.

10. Complaints

If you believe we’ve breached the Australian Privacy Principles or otherwise mishandled your information, please contact us first at toolie@marsbound.coso we can try to resolve it directly. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Cookies and similar technologies

The mobile app stores your session token securely on your device (using your device’s secure storage) so you don’t have to sign in every time. This isn’t a cookie and isn’t used for tracking. If you access Toolie’s backend through a web browser, a strictly necessary session cookie may be set to keep you signed in; we don’t use analytics, advertising, or third-party tracking cookies of any kind.

12. Automated decision-making

Toolie calculates figures (like cost and profit) directly and transparently from the numbers you enter, using a fixed, documented calculation. It does not use any automated system to make decisions about you, your account, or your eligibility for anything.

13. Children

Toolie is a business tool for tradespeople and isn’t directed at children. You must be at least 18 to create an account, and we don’t knowingly collect information from anyone under 18.

14. Changes to this policy

We may update this policy from time to time, for example if we add a new feature or change a service provider. If we make a material change to how we handle your information, we’ll update the date at the top of this page, and where the change is significant we’ll take reasonable steps to bring it to your attention in-app.

15. Contact us

For any question about this policy or how we handle your information:

• Email: toolie@marsbound.co
• Post: J.B Light & C Yang, 258 Bourke Street, Glen Innes, NSW 2370, Australia
• ABN: 92 828 414 163