Privacy

Idle Ideas (ABN 84 231 342 185), Hunter Valley, NSW, Australia. Contact: info@idleideas.com.au. As a small business, Idle Ideas is currently exempt from the Privacy Act 1988 (Cth); this notice follows the Australian Privacy Principles anyway, because it's the right way to treat an email address someone has trusted you with.

If you leave your email address (and, optionally, your name) to hear when a project opens, we store exactly that: the address, the name if given, which project, and the date. We use it for one purpose: to send you one email when that project opens. We don't use it for anything else, don't add it to any other list, and never sell, rent or share it.

It's stored in a private storage bucket with our hosting provider, Vercel (built on Amazon S3), which may be located outside Australia. Only we can read it, and only with a private key. It isn't visible on the site or to anyone else.

We keep it until the launch email has been sent, then delete the list within 30 days, or after 12 months if the project hasn't opened by then, whichever comes first. To have your address removed sooner, email us and it's gone within a few business days.

The launch email will say who it's from (our name and ABN) and include a working way to say "don't contact me again", as the Spam Act 2003 requires. There is no other marketing.

Like any website, loading these pages sends the ordinary technical details of a web request, your IP address, browser type and the page requested, to our hosting provider, Vercel, whose servers may be outside Australia and which keeps short-lived request logs for security and reliability. We don't run analytics, advertising or tracking scripts, and this site sets no cookies.

The typefaces are served from this site, so nothing on these pages is fetched from Google or any other third party. Product pages embed images and short videos hosted on this site only. Nothing is loaded from social networks or ad networks.

The venue form on the Singleton Tonight page is for pub, club and bar owners and managers. It sends what you type (the venue, what you need, your message, your name if you give it, and an email address or phone number so we can reply) straight to our inbox as an email, through our email provider Resend, whose servers may be outside Australia. Nothing from it is kept on this site.

To stop junk, the form has a hidden field that only robots fill in, turns away messages with web links, and limits how many can be sent from one internet address in an hour. Your address is held in memory for that hour only, never stored. We keep the email as long as we need it to update the listing and answer you.

Each app's page has an "I want to be a tester" button. The form it opens sends what you type (your name, mobile number and email address, which are all needed so we can set you up; what you'd test it on; and your answers to that page's questions) straight to our inbox as an email, through our email provider Resend, whose servers may be outside Australia. Nothing from it is kept on this site, and it is used only to set you up and talk to you about testing.

Venues listed in Singleton Tonight can have a private link for posting tonight's board and keeping their week up to date. What a venue posts is shown to everyone in the app: that's the point of it. It's kept with the time it was posted, in one file on our hosting provider Vercel, in Sydney, along with a record of the last 200 changes (which venue changed what, and when) so we can sort out any mistakes. Tonight's board comes off the app at 4am; a venue's week stays until it changes it or asks us to take it down.

Each link holds a code that only that venue has. We don't collect names, emails or anything about the staff using it. To stop guessing, a wrong code is counted against the internet address it came from for an hour, in memory only, never stored. If a venue's link is lost, we give it a new code and the old one stops working.

We keep your email for as long as we need to answer it and handle any follow-up, then delete it. We don't add you to any list, and we don't send marketing email.

The apps are made by Idle Ideas (ABN 84 231 342 185), Hunter Valley, NSW. Contact: info@idleideas.com.au.

Being a small business with turnover well under $3 million, Idle Ideas is currently exempt from the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We've written this policy, and built the apps, as though they applied anyway, because your clients' details, details about your children, your medicines or what you own and where it is are exactly the kind of information that deserves that care. If the exemption is removed by the reforms now being consulted on, nothing here needs to change.

Everything you put into an app, every client, job, quote, invoice, kid, pet, box, trip, tasting, esky, pool test, shift, medicine, paddock and note, is stored only on your device: in the browser's own on-device database for the web apps, and in the app's own database for Dusty Ledger. A few small settings, like when your free trial started and whether a licence is active, are kept the same way. The apps have no server-side database and no user accounts. We don't see, receive or hold any of it, not because we delete it after processing, but because it never leaves your device.

Each app hands your data to you in a few ways, none of which goes through us: a backup file saved through your own browser or share sheet to wherever you choose (and, on a computer with Chrome or Edge, some apps can save it to a folder automatically); run sheets, invoices, quotes, reports, rosters, lists, calendar files and messages sent from your own email, text or calendar app; an update file passed between two of your own devices; a picture or PDF made on the device to save or share. None of these are ever sent to us or to anyone else.

Because you hold that data, you're the one looking after it: keep your device secure (a screen lock helps), collect only what you need about other people, and delete what you no longer need. The apps never upload it, so nothing we do can leak it.

More sensitive than the rest. CaterPass holds guests' dietaries and allergies, and DaySheet holds your medicines: both are health information. You type it in, it stays on your device, it goes in your backup, and CaterPass never puts it in a marketing export. Mind where a printout carrying it ends up, and remove it once you no longer need it. CaterPass's marketing works only from the consent you record: a mailing list includes only clients you've marked as happy to receive news and offers, and once you import that file into another service, that service's terms apply.

1. Activating or checking a licence. Activating sends your licence key, the app's name and a random device label (like moppa-x7k2m9pq) to our licence service so it can confirm the key is valid; the app re-checks it in the background every few days. No names, addresses or other details the app keeps are included; the request can't carry them. Nothing is sent during a free trial or on a free plan. The licence service runs alongside idleideas.com.au, hosted in Sydney.

2. Loading the app itself. The web apps are delivered from our hosting provider, Vercel. Like any website, loading one involves the ordinary technical data a web server receives, your IP address, browser type and the time of the request, which sits in Vercel's short-lived server logs, possibly outside Australia. We don't add analytics, tracking pixels or cookies of our own, and we don't look at or link that log data to anything in the app. Once installed, an app runs offline from the copy on your device.

3. Buying an app. Purchases are handled by Stripe, our payment processor; Idle Ideas is the seller. Your name, email address, billing details and payment method go to Stripe, not to us, and Stripe's privacy policy covers that (its servers are outside Australia, in the United States). Through Stripe's dashboard we can see the name and email on an order and its licence key, which we use only for support, refunds and the renewal reminders described in the terms. Boots Off' "Restore purchase" sends the email address you type to Stripe to find your subscription.

4. A few apps fetch something public, or send one thing when you ask.

• Repack's and Out of Office's weather forecast sends a trip's destination (never its dates or anything else) to OpenStreetMap's place search, Nominatim, run by the OpenStreetMap Foundation in the United Kingdom, then the map position to MET Norway for the forecast. Switch the forecast off in Settings and nothing goes. Out of Office reads calendar files and pasted confirmation emails on the phone itself, and its phrases are read aloud by the phone's own voice: none of that leaves the device. A trip handed across from Wheels Up or Ground Value travels in the part of the link after the "#", which browsers never send to a server.
• Boots Off' weather (on its Bag and Pre-start screens) sends the map position of your site, or of the town or offshore area you pick, to MET Norway, Norway's public weather service, for its forecast: never your own location. Its connection check fetches a tiny file from Boots Off' own site to time the reply, and sends nothing of yours. Crew Sync roster codes go from phone to phone, as a QR code or a text you send, and are never stored online. Email or SMS reminders you turn on go from your own phone to the address or number you entered.
• Mixed Paws downloads the off-leash parks list for your state from idleideas.com.au about once a month (OpenStreetMap data). Sip or Tip downloads the files for its on-device text reader from its own site. Neither sends anything of yours.
• Slushometer downloads a list of servos and shops for your home state, and for any state you pick or search in, from idleideas.com.au, about once a month (OpenStreetMap data), and keeps it on your phone. Finding the nearest is worked out on the phone: nothing of yours is sent, and your location never leaves it.
• Singleton Tonight downloads its list of specials, what venues have posted themselves (tonight's board and their week) and Singleton's evening forecast from its own site, singletontonight.idleideas.com.au, which gets the forecast from MET Norway (the Norwegian Meteorological Institute). Nothing of yours is sent, and it never asks for your location. When a share from the app goes through (its link, a venue or the weekend picture), or someone opens it from its QR code, it adds one to a count of shares kept on its own site, which its Share screen shows ("Shared 57 times so far"). Only the number is sent and kept, with a daily total: nothing about you, your phone or who you shared with. It has no forms; venue owners use the venue form on its page on this site (see Part 1).
• CPD Ready keeps your CPD records and certificate photos and PDFs on your phone. It downloads its list of NSW courses from its own site, cpdready.idleideas.com.au, and sends nothing of yours. Your report, backup and calendar reminders are files made on the phone, which go only where you choose to send or save them.
• Graticola sends nothing of yours. Your reference photo opens on your device and is never uploaded, and its settings and picked colours stay in your browser. Like the other apps, it sends the one install hello in point 5.
• CaterPass can read a photo with AI, only if you tick the option and tap the button: that one photo, and nothing else, goes to our relay on our hosting, which passes it to the AI provider's API to read and returns the words. The relay stores and logs nothing. Dusty Ledger will sort a spoken entry the same way once that is switched on: only the words of that entry are sent.
• Moppa's Recommended tools are ordinary links to other companies' sites, some carrying an affiliate code so we may earn a commission if you buy. Nothing is loaded and nothing is sent until you click, and that site's own privacy policy then applies.

5. One hello when you install it. The first time an app is opened from your home-screen icon, it tells us once that it has been installed: the app's name and whether that was an iPhone, iPad, Android phone or tablet, or a computer. That is all. Nothing identifies you or the device, it goes to our own address at idleideas.com.au, and it is never repeated on that device.

Location is used on the phone only. Mixed Paws' "Near me", Sip or Tip's winery picker and Slushometer's Ice SOS ask your phone for your position to sort a list by distance. Slushometer also uses it to save an ice spot you name and, if you tap Here in Settings, to work out sunset times for campfire mode. The position stays on the device and is never sent anywhere.

Maps, calls, email, calendar. Tapping an address opens your phone's own maps app, a phone number opens the dialler, an email address opens your mail app, a date adds an event to your calendar, and a web address opens your browser. From that moment you're in that app, under its own terms; the Idle Ideas app sends nothing itself.

Support and refund requests are plain emails to info@idleideas.com.au. We keep them for as long as we need to answer you and handle any follow-up, then delete them. We don't add you to any list, and we don't send marketing email.

The apps use no cookies, no analytics, no third-party ads and no third-party scripts. Their fonts are bundled with the app rather than fetched from a font service. Every app shows a small banner of our other apps along the bottom, built into the app, with nothing fetched. Tapping one goes through this site (idleideas.com.au/go/…), which adds one to a count of which app the tap came from and which app it went to, then sends you straight on. Only those two app names and the day are kept: nothing about you, your device or your address.

For everything in an app, you're already in control: Export takes a complete copy any time, and clearing the browser's site data for the app (or deleting Dusty Ledger) deletes all of it permanently. There is no account for us to close and no server copy for us to delete, because neither exists.

For the little we do hold, support emails, an interest-list address, and what Stripe shows us about an order, email info@idleideas.com.au and we'll show you what we have, fix it, or delete it, within a reasonable time and at no charge. Payment records held by Stripe are subject to their retention obligations.

The Notifiable Data Breaches scheme doesn't legally apply to us while the small business exemption does, but we've adopted it anyway: if we became aware that personal information we hold had been lost or accessed without authorisation in a way likely to cause serious harm, we'd tell the people affected promptly and say what to do about it. A breach of your device or backup file is yours to manage, since we never have that data.

Adds Up and DaySheet are for parents and carers, not children, and aren't directed at anyone under 18; they hold details about children only because a parent or carer enters them, and those details stay on that person's device. Sip or Tip is for adults 18 and over. None of the apps is directed at children or collects personal information from them.

If this policy changes, the date and version at the top change with it, and any change that affects how information leaves your device will be flagged inside the app before it applies. We'll never start collecting your data without asking first.