Privacy

Who is responsible for your data

Lochlan Thomason, trading as PlumberMate AU, is the data controller for the information described on this page. We collect and use it to provide the app (contract performance), to keep it secure and improve it (legitimate interests), and — where you tick a consent box, such as feedback follow-up — on the basis of your consent, which you can withdraw at any time.

What is collected and why

On your device: unfinished estimate drafts, business details, checklist progress, custom checklists and signed-out customer/estimate saves are stored in your browser. These remain device-local unless you choose to back up. Clearing your browser data deletes them.

Private account records: when signed in, saving a customer or estimate sends that record to your private account in Lovable Cloud so it is available across devices. Each account can read only its own records. Existing device records are not automatically uploaded. Device backup and restore do not replace these account records.

Account: if you sign in, we store your email address to identify your account. Sign-in is handled by Lovable Cloud (our hosting and database provider).

Account emails: new accounts receive a welcome confirmation on their first signed-in visit after email verification. An initial active subscription or trial generates a subscription confirmation. These messages use your verified account email and relevant plan/billing dates, not your saved customer or job details. Lovable manages sending, delivery records and app-email unsubscribe links; unsubscribing from app emails does not stop sign-in or password-reset emails. Paddle separately provides billing receipts and invoices.

Account security: recovery email requests use private server-side limits and audit records. Short-lived counters use a digest of the recipient email (pseudonymous, not anonymous); audit entries contain only the request type, outcome and time, with no email, IP address, password, token or verification code. Counters inactive for a day and audit entries older than 30 days are removed on the next recovery request, not by a scheduled daily deletion. Lovable Cloud separately manages authentication tokens and authentication logs. App request records do not prove email delivery or a completed password change.

Subscription: if you subscribe, we store your plan, subscription status and billing period dates so the app can unlock the right features. Payment card details are collected and held by our payment provider, Paddle — we never see or store your card number.

Trial safeguards: test checkout stores your account identifier, a digest of your verified billing email, payment customer and transaction identifiers, and reservation time to prevent repeated trials and recover interrupted checkouts. These are private records, not anonymous analytics. Reservations remain after a failed or canceled checkout; contact us for recovery. We retain the minimal trial-use record to enforce the once-per-customer policy, including across account changes.

Backups: if you tap "Back up now" while signed in, a copy of your quotes, customers, business details and checklists is stored privately in your account in Lovable Cloud so you can restore it on another device. Only you can read or overwrite your backup.

Feedback: the feedback form stores your trade type, most useful feature, requested features, frequency of use and willingness to pay. Email is optional and is only collected if you tick the box agreeing to follow-up about your feedback. It is never used for marketing.

Anonymous usage counts: the landing pages record simple counts — a page visit, a calculation, or a tap on the feedback link. These counts contain no IP address, no cookie, no account or device identifier, and nothing you type. They exist only so the site owner can see which tools are useful.

Search reporting: the site-owner dashboard reads aggregate impressions, clicks and search query average positions from the connected Google Search Console account for Australian web searches. A private report is stored in Lovable Cloud and refreshed daily. Ordinary app accounts cannot access it; it does not contain your saved quotes or customer details.

Who we share data with

Service providers: Lovable Cloud (hosting, database, sign-in) and Lovable AI Gateway (AI checklist drafts) process data on our behalf.

Payment provider (Merchant of Record): Paddle.com sells our subscriptions and handles payments, subscription management, tax compliance and invoicing. Paddle processes your purchase details under its own privacy terms; we receive only your plan and subscription status.

We may also share data with professional advisers (legal, accounting) or authorities where required by law. We do not sell your personal information.

AI checklist drafts

When you generate an AI checklist draft, the job type and site notes you type are sent to an external AI service (via Lovable AI Gateway) to produce the draft. Do not include customer names, addresses, phone numbers or other personal details in those fields. The app does not store what you send beyond the checklist you choose to save.

Please don't enter

Until our data handling is formally established, please do not enter real customer addresses, phone numbers, payment details or sensitive job information anywhere in the app.

Retention, security and your rights

We keep account records, backups, subscriptions and feedback while needed to provide the service, meet legal obligations or prevent abuse, then delete or anonymise them. Minimal trial-use records are retained as described above. We use encryption in transit and access controls.

You can delete local data at any time by clearing your browser storage. Under Australian privacy law you can request access to, or correction of, your personal information; you may also request deletion of your account, backup or feedback data. Contact us at the email shown on the Feedback page and we will action your request.

Changes to this policy

We may update this policy as the app changes. The current version is always available on this page.