Privacy Policy
Last updated: 6 July 2026 · Effective date: 20 May 2024
RIPPLE PLATFORM PTY LTD(“we”, “us”, “our”) operates the Squared mobile application (the “App”), which helps tradespeople and builders log site variations, capture customer approvals on site, keep daily job records, and automatically log weather conditions for active job sites.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, and the rights you have over it. It applies to all users of the App and is prepared with Australian users in mind. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you do not agree with this policy, please do not use the App.
1. Who is responsible for your personal information
We are an APP entity under the Privacy Act and are responsible for the personal information we collect about you through the App. You can contact us at:
- RIPPLE PLATFORM PTY LTD
- Email: support@getsquared.com.au
2. Information we collect
We only collect information needed to provide and improve the App.
2.1 Information you provide
- Account & contact details: name, email address, phone number, business name, and login credentials.
- Customer/contact details you enter: names, phone numbers, and email addresses of customers or builders you create variations or approvals for.
- Site & work content: variations, approvals, signatures, job record entries, notes, and job/site details you create in the App.
- Photos: images you capture with your camera or select from your library to attach to variations or job record entries.
2.2 Information collected automatically
- Location data: precise and/or approximate geolocation, used to tag job sites, enable address lookup, and retrieve local weather for active sites.
- Device identifiers: a device or installation identifier used to operate the App, secure your account, and provide support.
- Usage & diagnostic data: app version, device model, operating system, crash logs, and basic interaction logs used to keep the App working and to improve the user experience. This data is processed by our error-tracking and analytics service providers (see Section 4).
- App usage events: anonymised event signals (e.g. features used, actions taken) used to understand how the App is used in aggregate and to guide product improvements. These events do not include the content of your job records, variations, or photos.
2.3 Information from third parties
- Weather data: weather information for your sites retrieved from a third-party weather provider based on site location.
- Address suggestions: when you type an address, suggestions are provided by a third-party mapping and address lookup service.
We do not knowingly collect personal information from anyone under the age of 18. The App is intended for business/professional use by adults.
3. How we use your personal information
We only collect personal information that is reasonably necessary for our functions and activities. We use it for the purposes described in this policy, or for related purposes you would reasonably expect. Where device permissions are required (for example location), we rely on your consent through your device settings.
| Purpose | Examples | Typical information used |
|---|---|---|
| Provide the App’s core features | Creating variations, approvals, job records; storing photos | Account details, site content, photos |
| Location features | Tagging sites, address autocomplete, daily weather logging | Location data (with your device permission) |
| Send transactional communications | Emailing variations/approvals to your customers; account emails | Contact details, document content |
| Secure accounts & prevent abuse | Authentication, fraud prevention | Login credentials, device identifiers |
| Maintain & improve the App | Crash diagnostics, troubleshooting, and understanding how features are used in aggregate | Usage and diagnostic data |
| Comply with law | Responding to lawful requests, record-keeping | As required by the request or obligation |
We do not use your personal information for advertising, and we do not sell your personal information.
4. How we disclose your personal information
We disclose personal information only as described below:
- At your direction: when you send a variation, approval request, or document to a customer or builder, we disclose the relevant content to that recipient (e.g. by email).
- Service providers who help us run the App under contract and are required to protect your information and use it only to provide services to us:
- Cloud hosting and storage providers — secure storage of your content, photos, and account data.
- Email delivery providers — sending emails (e.g. variations and approvals) on our behalf.
- Mapping and address lookup providers — address search and autocomplete when you enter a site location.
- Weather data providers — supplying weather information for your sites.
- Error and crash reporting providers — technical diagnostic data such as stack traces, device type, app version, and a pseudonymous user identifier when a crash or error occurs. These providers do not receive your email address or the content of your job records, variations, or photos.
- Product analytics providers — anonymised usage event data (e.g. which features are used, actions taken) and a pseudonymous user identifier. These providers do not receive the content of your job records, variations, photos, or customer details, and we do not use them for advertising or cross-context behavioural tracking.
- Legal & safety: where required by law, regulation, legal process, or to protect the rights, property, or safety of users or the public.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.
We require all service providers to protect your data and to use it only for the services they provide to us.
5. Overseas disclosure of personal information
Some of our service providers store or process personal information outside Australia, including in the United States and other countries where our cloud, analytics, mapping, and other infrastructure providers operate. Before we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in a way that is consistent with the APPs — for example through contractual protections and by using reputable providers with appropriate security practices.
If you access the App from outside Australia, your information may also be handled according to the laws of the country where our providers operate. Where required by overseas privacy laws (for example in the EEA, UK, or California), we provide additional rights as described in Section 7.
6. How long we keep your data (Retention)
We keep personal information for as long as your account is active and as needed to provide the App. After account closure, we delete or anonymize your personal data within 30 days, except where we must retain certain records to comply with legal, tax, accounting, or dispute-resolution obligations. Backups are purged on a rolling cycle of 30 days.
Archived and inactive content. To keep your workspace tidy and to manage storage, we reserve the right to delete or anonymize archived, completed, or otherwise inactive sites, jobs, and projects (together with their associated job records, variations, and photos) once they are older than 12 months, at our discretion and without further notice. You are responsible for exporting or saving any records you wish to keep before they reach this age. This does not affect records we are legally required to retain.
7. Your privacy rights
7.1 Australian privacy rights
Under the Privacy Act, you generally have the right to:
- Access the personal information we hold about you.
- Correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
- Complain to us if you believe we have mishandled your personal information.
- Complain to the OAIC — if you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
We will respond to access and correction requests within a reasonable period, and generally within 30 days. We may need to verify your identity before acting on a request. In some cases we may decline access or correction where the law permits (for example, where giving access would unreasonably affect someone else’s privacy).
7.2 Additional rights for overseas users
If you are located in the EEA or UK, you may also have rights under the GDPR, including to access, correct, delete, restrict or object to processing, request data portability, and withdraw consent. You may lodge a complaint with your local data protection authority.
If you are a California resident, you may have rights under the CCPA/CPRA to know what personal information we collect, request deletion or correction, and opt out of “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioural advertising.
7.3 How to exercise your rights
Contact us at support@getsquared.com.au or use the in-app controls described in Section 8. We will verify your request and respond within the timeframe required by applicable law.
8. Data deletion
You can delete your account and all associated data directly from the app at any time:
- Mobile app: Go to Account → Delete Account. This permanently deletes your account, your variations, job records, photos, and associated personal data from our active systems.
- Web app: Go to Account → Delete account (the danger zone at the bottom of the page). Check the confirmation box and tap Delete my account.
After deletion is processed:
- Your personal data is removed from our production databases within minutes of the request.
- Photos and files stored in our cloud storage systems are removed within 30 days of account deletion.
- We may retain a minimal record (e.g. that an account was deleted) and any data we are legally required to keep, in de-identified or restricted form.
- Content you previously sent to a customer (e.g. an emailed approval) cannot be recalled from that recipient.
9. Security
We use industry-standard safeguards including encryption in transit (TLS), encryption at rest for stored content, access controls, and least-privilege practices with our cloud providers. No method of transmission or storage is 100% secure, but we work to protect your information. If a data breach is likely to result in serious harm, we will notify affected individuals and the OAIC as required under the Notifiable Data Breaches scheme.
10. Permissions we request on your device
- Camera — to capture photos for variations and job records.
- Photo Library — to attach existing photos.
- Location — to tag sites, autocomplete addresses, and log daily weather for active sites.
You can change or revoke these permissions at any time in your device settings. Disabling a permission may limit related features.
11. Children’s privacy
The App is not directed to children and is intended for business use by adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. Material changes will be notified in the App or by email. The “Last updated” date reflects the latest version.
13. Contact us
- RIPPLE PLATFORM PTY LTD
- Email: support@getsquared.com.au