Privacy policy

LoggerIQ is rostering, attendance and HR software, made by FastFlowUp (“we”, “us”). This policy explains how we handle personal information under the Privacy Act 1988 and the Australian Privacy Principles (APPs).

Two roles apply. For the records a business keeps about its people in LoggerIQ (hours, leave, pay, HR records), the employer decides what is collected and why and we handle that information on their behalf. For our own customer relationship (account holders, billing, support, this website), we decide.

If you are an employee with a question about your records, your employer is usually the first place to ask. We will help them answer it.

• Account details: name, work email, role, workspace and how you sign in.
• Contact details: phone number, address and emergency contact, if you or your employer add them.
• Work records: clock entries, breaks, timesheets, rosters, leave, overtime, expenses, trips, approvals and the log of changes to them.
• Location: at clock-in, at clock-out and during a shift as described below.
• Employment and pay details: pay rates, employment basis, tax file number declarations, super choice, date of birth, home address and bank or mobile wallet accounts, where the employer uses those features.
• Check-ins and kudos: short daily updates and recognition from teammates.
• Documents and photos: receipts, licences, certificates, signed letters, odometer photos, trip photos and kiosk clock-in photos.
• Device and security data: sign-in sessions, device type, IP address and signals that help detect a faked location.
• Customer and billing data: the billing contact and a reference to the payment method. Card numbers go to our payment provider and never reach us.

At clock-in and clock-out

When you clock in or out, your device’s location is checked against the site so the entry can be verified. The precise coordinates are encrypted and are cleared after 90 days. The entry itself, its time, site and whether it passed, is kept as a pay record.

While you are clocked in

While you are clocked in and the app is open, it may check from time to time whether you are still on site. By default it records only whether you were inside the site boundary and how far away you were. Your precise position is recorded only if you have agreed to share live location and you can turn that off at any time. These readings are deleted after 90 days.

Trip routes

If you start a trip, you are told before it starts that your manager can see its route for up to 90 days. The route is used only to check the distance you claim, never to deduct pay. The route is drawn from your live-location readings, so it exists only if you share live location. Without that notice, the trip is still measured but no route is shown to anyone.

Off the clock

LoggerIQ does not collect location when you are not clocked in. We do not sell location data or use it for advertising.

Employers in some states must give written notice before tracking surveillance starts. Our notice template covers these features.

Face verification is off unless your employer turns it on for a site. A face template is biometric information, which the Privacy Act treats as sensitive information, so we only collect it with your consent.

• You choose to enrol and the moment you agree is recorded.
• Your face is turned into a set of numbers (a template) on your own device. The camera image is not uploaded or stored.
• The template is encrypted with your workspace’s key and used only to check that the person clocking in is you.
• You can delete your template at any time. It is also deleted when you delete your account.

A shared kiosk can take a photo at clock-in so a manager can confirm who it was. Kiosk photos are encrypted and deleted after 30 days.

In Australian workspaces an employee can complete their tax file number declaration in LoggerIQ. We handle tax file numbers under the Privacy (Tax File Number) Rule 2015.

• Purpose: a TFN is collected only so the employer can meet their tax and superannuation obligations. It is never used to identify a person, match records or for any other purpose.
• Storage: the declaration is encrypted before it is stored, with a key used for TFN declarations and nothing else. Lists show only whether a TFN was provided, never the number.
• Access: you can see your own declaration. A workspace admin can open it only after confirming a second factor and every opening is logged. Managers cannot see it and the number is never sent to an AI service.
• Keeping and disposal: employers must keep TFN declarations as employment records. The declaration is kept for seven years while the workspace is open. When the workspace is deleted, it is deleted with it.

• Account numbers are encrypted with your workspace’s key before they are stored.
• Everywhere in the app they are shown masked, ending in the last four digits.
• Adding, changing or viewing a full number needs a second factor entered in the last 10 minutes and each of these is logged without the number.
• They are used only to pay you.

Your daily check-in answers are visible to you, your manager and workspace admins and are deleted after one year. LoggerIQ notices when an answer repeats an earlier one, so you can be prompted to add what changed.

Virtual HR gives managers a plain read on each person, with the evidence behind it and a suggested next step, worded as a reason to talk. It has no number on it.

Clock entries can be flagged for review, for example a location that looks faked and each flag says why. Workspace admins can also see a clock-in reliability band for each person (Low, Medium or High), worked out from flagged entries, missed clock-outs and time away from site, shown with its evidence and never as a number. It is not a performance rating and it never changes pay by itself.

We use AI for two things.

• Receipt reading: a receipt photo on an expense claim is sent to an AI model to read the amount, tax, date and merchant. Receipts can show a name or card digits, so please photograph only what the claim needs.
• Summarise: when an admin asks, a short note on one person’s Virtual HR read is written from the label, evidence lines and counts. No name and no check-in text is sent. Notes are deleted after 7 days.

Both run on an AI service provided by our cloud infrastructure provider, which may process them outside Australia. The provider does not use this content to train AI models and neither do we. AI never approves, rejects or changes pay.

• To run the service for your employer: rosters, hours, leave, pay records and HR.
• To verify clock entries and detect faked locations and other misuse.
• To send sign-in links, alerts and notices by email, text message and push.
• To secure the service, give support and meet our legal obligations.
• To bill customers.

We do not sell personal information, use it for advertising, take screenshots of anyone ’s screen or log keystrokes.

With your employer, under their workspace settings. With accounting or payroll software your employer connects, when they choose to send records there. With service providers that help us run LoggerIQ, under contract. And where the law requires it.

Workspace records are stored in Australia. Some information is handled outside Australia by the providers above, mainly in the United States and by the global network of our cloud infrastructure provider: requests passing through the web app, encrypted files, scheduled jobs, receipt images and Summarise inputs. Before we use a provider we take reasonable steps, including contract terms, to make sure it handles personal information consistently with the APPs.

When a workspace closes it stays read-only for 30 days so it can be exported. After that we delete it and its stored files automatically and email its admins a deletion certificate. Only the records the law requires an employer to keep (hours, pay, leave and who changed them) are kept, sealed in an encrypted archive for the statutory period and then deleted. People who belong to no other workspace are anonymised.

Sensitive fields are encrypted before they are stored, admins and payroll officers must use multi-factor authentication and every workspace is isolated from every other. The trust and security page has the detail, including what happens if there is a data breach.

• Access: you can download a copy of your own data from your profile.
• Correction: you can edit your profile details. To correct a work record such as a clock entry, raise it in the app or ask your employer.
• Deletion: you can delete your account yourself on the delete your account page. Your name and contact details are removed and records your employer must keep, such as pay records, stay with an anonymised reference.
• For anything else, email support@loggeriq.io. We reply within 30 days.

If you are unhappy with how we handled your information, email support@loggeriq.io and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (1300 363 992).

Bangladeshi workspaces are stored and protected exactly as described here, including the Australian database. Bangladesh gazetted a Personal Data Protection Ordinance in November 2025, with parts taking effect over the following 18 months. We are reviewing what it asks of us and of employers who use LoggerIQ and we will update this policy as that review finishes. Employers remain responsible for telling their people how their information is used.

We will post any change here with a new date. If a change affects how we use information already collected, we will tell workspace admins by email first.