Privacy
Last updated: 30 October 2026
This policy explains how we handle personal information. Our Terms of Service set out the agreement for using ComplianceApp.
What we collect
When you use ComplianceApp we store the questions and follow-ups you type, the site photos you upload, the job details you enter (such as state, NCC edition, building class, job name, permit details, rainfall, roof pitch and BAL) and the answers we give you. If you have an account we also store your email address, any profile details you add (such as name, company and logo) and your plan and billing status.
If you have an account, you can also add details to a job, such as its site address, client and notes. These job details are stored with your account. If you add a client, their name is shown on the site reports you export for that job. Only add client details you are authorised to share.
Reports created in a team's jobs belong to the team owner, who can see and manage them.
Visitors who are not signed in are identified by a session id and IP address. We use these for rate limits and to let you return to your own questions, and the app’s session id also links any crash or error reports it sends.
Site photos may include GPS coordinates in their metadata. When present, we read them so the product can label the photo “GPS recorded” or “no GPS”, and we keep the coordinates with the photo record. We remove GPS and other location metadata from photos in the reports, downloads and share pages you export. A question is not blocked when GPS is absent.
If something goes wrong in the mobile app, it sends us a crash or error report. The report includes the error details, the app version, and your device model and operating system. It is linked to your account if you are signed in, and to an anonymous app session otherwise. Your questions and photos are never included, and personal details such as email addresses are removed. We use these reports only to find and fix problems, and they are stored on our own server.
How answers are generated
To answer your question, we send it to a third-party AI service. What we send is your question and the earlier messages in the same conversation, your site photos, the job details used to pick the right rules (state, NCC edition and permit details, building class, pathway, and rainfall, roof pitch or BAL when given) and extracts from our reference library. We don’t add your name, email address or job name to what we send, and the site address, client and notes you add to a job aren’t sent either. The AI service may also run web searches based on your question.
We send this information to the AI service only so it can produce your answer, its diagrams and illustrations, and search our reference library. The AI service handles the information under its own terms, which may let it keep it for a limited time.
Improving ComplianceApp and training AI models
We may use your questions, photos and answers to improve ComplianceApp, including to train or tune AI models. If you don’t want your questions, photos or answers used this way, turn off "Help improve ComplianceApp" in Account → Profile, or email support@complianceapp.net and ask us to leave them out.
Staff may turn a question and its answer into a reviewed library note, which can then help answer similar questions. Before a note is saved, we remove personal details such as names, email addresses, phone numbers, street and site addresses and job names, including the client names and notes you add to a job. Do not upload personal information you are not authorised to share.
Information sent overseas
The AI service provider is based overseas, most likely in the United States, so your questions, photos and job details may be sent to and processed there.
Other services we use:
- Hosting: our server, database and stored photos are hosted with Amazon Web Services in Sydney, Australia.
- Email: account and service emails are sent through Amazon Web Services’ email service, set up in its Sydney region.
- Payments: paid subscriptions are processed by Stripe. Card details are handled by Stripe and are not stored on this site. We share your email address with Stripe and store billing metadata (plan, status, customer id) to deliver the service. Stripe may process this information overseas, including in the United States.
- Website analytics: the website uses Google Analytics and Google Tag Manager to understand how pages are used. Google may process this information overseas, including in the United States.
- App notifications: if you turn on notifications in the mobile app, a device token is sent to Google’s Firebase messaging service so we can deliver them. Google may process it overseas, including in the United States.
How long we keep it
We keep your questions, photos and answers on our server until you delete your account or ask us to delete them. Your plan sets how far back your History shows, but older conversations are not deleted automatically. Questions asked without an account are kept on the server too. Job details you add are kept with your account until you change them or delete your account. Staff accounts are used for administration and licensed standards.
We keep crash and error reports for up to 90 days, and delete them sooner if you delete your account.
We back up our database to protect against data loss. When we delete your data from our server, copies may stay in older backups until those backups are removed.
Access, correction and deletion
Data requests go to the site operator of complianceapp.net.
To delete your account, delete it in the app (Account → Delete account) or on the web at /account/delete/. Deleting your account also deletes the job details you added and your conversations: your questions, our answers, your site photos and any images the AI made for you. Their files are removed from our server too. To have questions you asked without an account removed, or if you can’t sign in, submit a deletion request. General enquiries: contact us.