PRIVACY POLICY
Last updated: 29 October 2026
SiteLog is a GPS-powered digital site logbook owned and operated by Findertech Australia Pty Ltd (“Findertech Australia”, “we”, “our” or “us”).
This Privacy Policy explains how SiteLog collects, uses, stores and shares information when you use the SiteLog mobile application, website and related services. It should be read together with the SiteLog Terms and Conditions.
Information we collect
1.1 Account information
You can begin using SiteLog without creating a named account. In that case, Firebase Authentication creates an anonymous identifier so the app can operate.
If you choose to link a Google account, we may collect:
your Google account email address;
your display name;
your profile photo URL;
a Firebase user identifier; and
account creation and last-active timestamps.
SiteLog does not ask you to create or provide a password. Google and Firebase process authentication credentials under their own privacy policies.
1.2 Location and timecard information
Location tracking is a core SiteLog function. When you start an active site session and grant the required device permissions, SiteLog may collect:
precise GPS coordinates;
the location and address associated with clock-in;
route points recorded during the active session;
timestamps for route points, clock-in and clock-out;
visit duration and route statistics;
site names and addresses;
notes you add to a timecard; and
optional supervisor or sign-off names you add to a timecard.
On Android, an ongoing notification is displayed while background location tracking is active. On supported devices, location collection may continue while SiteLog is in the background. SiteLog stops its active-session tracking service when you clock out. Active-session tracking does not automatically restart after a device reboot or force-stop.
Separately, if you have Pro Sync and choose to enable optional location-based reminders, SiteLog may use saved job-site coordinates and radius values, and an optional home place you set on the device, so the operating system can monitor ENTER and EXIT events. When Always (or equivalent background) location permission and notification permission are granted, monitoring may continue while SiteLog is closed. SiteLog may then show local notifications for site arrival, leave-home and, during an active session, site-exit reminders. SiteLog does not automatically clock you in. Home place details remain stored on your device and are not uploaded by SiteLog to its cloud backup. Geofence reminder preferences and toggles are also stored locally and remain under your control.
Location accuracy can vary because of device hardware, operating systems restrictions, network availability, environmental conditions, and device settings. Operating-system geofencing may be delayed or limited by platform rules.
1.3 Purchase and entitlement information
SiteLog offers:
a monthly Pro Sync subscription;
a yearly Pro Sync subscription; and
a one-time Lifetime Deal purchase.
Purchases are processed by Google Play or the Apple App Store. We use RevenueCat to validate purchases, restore purchases and manage feature entitlements. We may receive product identifiers, purchase status, entitlement status, subscription period, renewal or expiry information, store account linkage and transaction identifiers.
Findertech Australia does not receive or store your complete payment-card details.
1.4 Business and invoicing information
If you use SiteLog’s invoicing features, you may provide:
company name, business email and business address;
ABN and related tax settings;
bank or payment details you choose to include on invoices;
GST, currency, rates and invoice numbering settings;
a company logo selected from your device gallery;
client names, addresses and contact details you enter;
service types and rates; and
invoice line items, amounts and related invoice content.
These records are stored locally on your device. For eligible Pro Sync users with a linked Google account, SiteLog may also back them up to Google Cloud Firestore, which can include a copy of your company logo used for cloud backup. Optional supervisor or sign-off names from timecards may appear on invoices or exports you generate.
1.5 Technical, analytics and diagnostic information
In production releases, SiteLog uses Firebase Analytics and Firebase Crashlytics. Depending on your device and use of the app, this may include:
device platform, operating-system and app-version information;
an internal Firebase user identifier;
screens viewed and app features used;
clock-in and clock-out events, duration, GPS point count and plan tier;
paywall, purchase, restore, sharing and cloud-sync events;
crash reports, stack traces and diagnostic logs; and
app environment and subscription-status diagnostic values.
We do not intentionally use your email address or telephone number as an analytics identifier.
1.6 Information you choose to share
SiteLog can generate and share Proof of Hours content, invoice PDFs and timesheet PDFs as text, an image or a PDF. Depending on the sharing option you select, the content may include your site name, client name, address, working times, duration, notes, coordinates, a Google Maps link, route summary, company details, invoice amounts and related business information.
Sharing occurs only when you choose a destination through your device’s share sheet. The third-party app or service you select processes the shared content under its own privacy terms.
1.7 Xero integration
If you have Pro Sync, link a Google account and choose to connect Xero, SiteLog opens a browser-based OAuth flow so you can authorise access to your Xero organisation. Depending on the connection, this may involve identity and accounting or payroll scopes required to connect and submit data.
SiteLog stores connection status, account mappings and submission metadata in your SiteLog cloud profile. Connection tokens are stored encrypted server-side and processed through a Cloudflare Worker that SiteLog uses to talk to Xero on your behalf.
When you choose to submit, SiteLog may send timesheet hours or invoice content (including an invoice PDF where applicable) to the linked Xero organisation. Information transferred to Xero is then processed under Xero’s privacy terms. Disconnecting SiteLog from Xero does not delete records already created in Xero.
1.8 Feedback
If you submit optional in-app feedback, SiteLog may collect your message, a rating and an optional email address you provide. Feedback is stored in Google Cloud Firestore so we can review product issues and improve SiteLog.
1.9 Meta App Events (Android)
In production Android releases, SiteLog uses the Meta (Facebook) App Events SDK to measure app installs, feature usage and purchase conversions for advertising and marketing analytics. Depending on your device and use of the app, Meta may receive:
app activation, registration-completion and feature-usage events (including first clock-in and timecard creation);
subscription and purchase events, including product identifiers, price and currency;
device and app information (such as device model, OS version, app version, screen size, language, time zone, mobile operator and IP address);
device or other identifiers used for analytics and ad attribution; and
networking and diagnostic information required by the SDK.
SiteLog does not send your GPS coordinates, site addresses, route points, notes, client names or timecard content to Meta. SiteLog does not use Facebook Login. We do not intentionally send your email address or phone number to Meta through this integration.
How we use information
We use information to:
provide GPS-based clock-in, clock-out and route-tracking features;
create, display, edit and share timecards and Proof of Hours records;
manage saved job sites and optional location-based arrival, leave-home and site-exit reminders;
reverse-geocode coordinates into an address;
show routes and checkpoints on maps;
create, display, edit and share invoices and related business records;
authenticate users and link optional Google accounts;
provide cloud backup and multi-device synchronisation to eligible Pro Sync users;
connect to Xero and submit timesheets or invoices when you choose to do so;
process, verify and restore purchases and entitlements;
enforce free and paid plan limits;
review optional feedback and improve SiteLog;
maintain app security and prevent misuse;
diagnose crashes and technical problems;
understand feature performance and improve SiteLog;
measure advertising campaign performance and app conversion events through Meta App Events (Android); and
comply with legal obligations and enforce our agreements.
Local storage and cloud synchronisation
During an active session, GPS route points are stored in SiteLog’s local SQLite database. When you clock out, those points are merged into the completed timecard stored locally on your device.
For Free and Lifetime Deal users, timecard, GPS, job-site, home-place and invoicing data remain stored locally and are not backed up by SiteLog to Firestore.
For eligible Pro Sync users who link a Google account, SiteLog may upload completed timecards, saved job sites, company profile details, clients, service types, invoices and Xero connection, mapping and submission metadata to Google Cloud Firestore. Cloud timecard records can include the site name, address, clock-in coordinates, start and end times, notes, optional sign-off fields and the complete GPS route. SiteLog may retry pending uploads when connectivity returns and may restore cloud records to another signed-in device.
Home place details and geofence reminder preference toggles remain stored locally on your device and are not uploaded by SiteLog as part of cloud backup.
When we share information
We do not sell personal information.
We disclose information only as needed to provide and protect SiteLog, when you direct us to share it, or when required by law. Service providers may include:
Google Firebase — authentication, Cloud Firestore storage, analytics and crash reporting;
Google Sign-In — optional account linking;
Google Maps Platform — map display;
LocationIQ, Geoapify and OpenStreetMap Nominatim — reverse geocoding and address lookup;
Google Play — Android app distribution, billing and purchase management;
Apple App Store — iOS app distribution, billing and purchase management;
RevenueCat — purchase validation, entitlement management and purchase restoration;
Xero — optional accounting and payroll integration when you connect and submit data;
Cloudflare — processing for SiteLog’s Xero API Worker;
Meta Platforms, Inc. (Facebook App Events SDK) — Android app-event measurement, advertising analytics and campaign attribution; and
Third-party communication or storage apps that you select through your device’s share sheet.
These providers process information under their own privacy policies and may process or store information outside Australia.
Overseas disclosure
Some service providers, including Google, Apple, RevenueCat, Meta, Xero, Cloudflare and reverse-geocoding providers, operate global infrastructure. Personal information may therefore be processed or stored outside Australia, including in countries where those providers or their subprocessors operate. Privacy protections in those locations may differ from Australian law.
Data retention
We retain information for as long as necessary to provide SiteLog, maintain security, comply with legal obligations, resolve disputes and enforce our agreements.
Local information remains on your device until you clear it, delete your account, uninstall the app or the operating system removes it. Cloud-synchronised information remains until it is deleted through SiteLog’s account-deletion process or is otherwise no longer required.
App-store purchase records may be retained by Google, Apple or RevenueCat under their own legal and business requirements and cannot necessarily be deleted by Findertech Australia.
Analytics and advertising-attribution partners, including Meta, may retain event and device data under their own privacy policies. Findertech Australia cannot always delete that data on demand.
Information you send to Xero remains subject to Xero’s retention practices after it leaves SiteLog.
Your choices and controls
You can:
deny or revoke location permission through device settings, although core tracking features will not work;
clock out to stop an active tracking session;
enable or disable optional arrival alerts and home or leave-home reminders where available;
deny or revoke Always (or equivalent background) location permission and notification permission used for closed-app geofence reminders;
choose whether to link a Google account;
choose whether to purchase Pro Sync cloud backup;
choose whether to connect or disconnect Xero;
use Clear Local Data in SiteLog to remove timecards and GPS data from the device without deleting cloud data;
use Unlink Google Account to disconnect Google authentication while retaining cloud data;
use Delete Account in SiteLog to disconnect Xero where connected, remove local SiteLog data, associated Firestore records (including eligible timecard, job-site and invoicing data) and the Firebase Authentication account; and
contact us to request access, correction or assistance with deletion.
Deleting a SiteLog account does not cancel an active subscription and does not delete purchase history held by Google Play or the Apple App Store. Subscriptions must be managed through the applicable store. Deleting a SiteLog account also does not delete records already created in Xero or content you have already shared with other apps or people.
Security
We use commercially reasonable administrative and technical safeguards designed to protect information against unauthorised access, disclosure, alteration and loss. These include authenticated cloud access controls and platform security features.
No electronic storage or transmission method is completely secure, and we cannot guarantee absolute security.
Children’s privacy
SiteLog is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.
Australian privacy rights and complaints
Where applicable, Findertech Australia handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
If you have a privacy question or complaint, contact us using the details below. We will investigate and respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this Privacy Policy when SiteLog, our service providers or legal requirements change. We will publish the updated policy at sitelog.checbox.com.au/privacy-policy and update the “Last updated” date. Material changes may also be communicated in the app or through another appropriate channel.
Contact us
Findertech Australia Pty Ltd
Email: info@findertechau.com.au
Website: sitelog.checbox.com.au