Privacy policy

Who has an account

InvestiLog is invite-only. An administrator creates your account; you cannot sign up yourself. The records you make belong to you, and only you can see them unless you share them (see “Sharing” below).

What we collect

• Your account: your email address, your name if one was entered, and your password (stored only as a one-way hash, never readable by us).
• Your records: the cases, logs, entries, vehicles, addresses, notes, quick-action templates and case images you create. This can include personal information about other people. You are responsible for having a lawful reason to record it.
• Location, only when you ask: an entry can store a GPS position, but only when you tap the location button on that entry, once. The app never tracks your location in the background. Photos have their location data removed before upload.
• Photos: the camera and photo library are used only when you choose to add a case image.
• Voice: when you use dictation, the microphone is used only while you hold the dictation button. Speech is turned into text on your iPhone when the phone supports it. Otherwise Apple’s servers recognise it, as with standard iOS dictation. We never receive or keep the audio.
• Usage events: counts of things like “an entry was created” or “a sync failed”, with the date, the app version and the platform. These are linked to your account, so they are pseudonymous, not anonymous. They never contain what you wrote, titles, addresses, search words, vehicle details, email addresses or coordinates. They are deleted after 13 months, and when your account is deleted.
• Error reports: when the app or website crashes or fails, a report is sent to Sentry with the technical error, the app version and an internal account id. Reports are cleaned before they are sent so they carry no record content, email address or IP address. Reports are stored in the European Union.
• Technical data: a random device id (so we can tell your phone from your browser when syncing), and the usual server logs kept by our hosting provider.

How we use it

To run your account, store and sync your records, send the emails you ask for, keep the service secure, and find and fix faults. We do not sell your information, show advertising, or use your records to train AI models.

Other companies that handle data for us

• Supabase: database, sign-in and file storage (Sydney, Australia).
• PowerSync: syncs your records between your phone and the database (Australia).
• Vercel: runs the web app and its server code (Sydney, Australia).
• Resend: sends emails you ask for (exports to your own address, share notices, invitations and password resets).
• Geoapify: address suggestions. The address text you type is sent to them, with nothing that identifies you.
• Sentry: error reports, as described above.
• Apple: delivers the iPhone app, and recognises speech when your phone cannot do it on the device.

Sharing

You can share a case or a log with another InvestiLog user, and optionally include its images. They can read it but not change it. When you stop sharing, access ends at the other person’s next sync: a phone that stays offline keeps its copy until it next connects. The same applies when an account is disabled or deleted.

Your phone

Your records are kept on your phone so you can work offline. They are protected by your phone’s passcode and iOS data protection. Your sign-in is stored in the iOS Keychain. You are signed out after 7 days without using the app; signing out hides your records but leaves them on the phone, and a different person signing in erases them first.

Cookies and storage on the website

The website uses only what it needs: a sign-in cookie, and your light or dark choice stored in your browser. There are no advertising or tracking cookies.

Keeping and deleting your data

Records are kept until you or an administrator delete them. Deleting a record hides it from your lists; it is removed when your account is deleted. To delete your account and everything in it, use Request account deletion in the app’s Settings or on the web Account page. An administrator completes it within 30 days. Deleted accounts cannot be restored. Database backups are overwritten on their normal schedule.

Your rights

You can ask to see, correct or delete the personal information we hold about you, and to complain if you think we have handled it wrongly. Email support@investilog.co. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Security

Access to every record is enforced in the database, not only in the app. Connections are encrypted, passwords are hashed, and administrators cannot see or set your password. No system is perfectly secure; tell us at once if you think your account was used by someone else.

Children

InvestiLog is for working adults and is not directed at children.

Changes

We will update this page when our practices change and show the date at the top. If a change is significant we will tell you in the app or by email.