BondiByte Staff app privacy

Overview

This Privacy Policy explains how information is handled in the BondiByte Staff mobile application (the "Staff app") for Android and iOS.

The Staff app is provided by BondiByte Robotics Pty Ltd (ACN 699 516 231), a company registered in Queensland, Australia.

The Staff app is a workforce tool for support workers employed or engaged by an NDIS provider that uses the BondiByte platform. You sign in with an account created by your organisation, and the information in the app belongs to your organisation's workspace. Your organisation is responsible for that workspace information under the Privacy Act 1988 (Cth); BondiByte Robotics handles it on your organisation's behalf.

This Privacy Policy was last updated on 2 July 2026.

Account information

To sign you in and personalise the app, the Staff app uses the account and profile information held in your staff record, which is created and managed by your organisation and, in part, by you.

• Identity and contact details, such as your name, preferred name, email address, and phone or mobile number.
• Work details, such as your role or job title, employment type, primary site, and manager.
• Optional profile details you can add or update, such as a profile photo, residential address, preferred contact method, and emergency contact details.
• Sign-in and security identifiers used to authenticate you and keep your session secure.

Timesheets

The Staff app lets you review, build, adjust, and submit timesheets for the hours you work.

This includes worked hours, breaks, shift-based pay components, any hour adjustments and the reasons you provide, notes you add, and submission status. Timesheets are recorded in your organisation's workspace and sent to your organisation for review, approval, and payroll.

Shift data

The Staff app shows your roster and lets you respond to shift opportunities.

This includes your assigned and upcoming shifts, sites, times, open shifts you can request or claim, shift swap requests, shift cancellations, and the availability you set. This information is used to show your schedule and to record the actions you take, such as claiming an open shift, requesting a swap, or updating availability.

Push notifications

If you allow notifications, the app registers a push notification token for your device (through Firebase Cloud Messaging on Android and the Apple Push Notification service on iOS) so it can send you alerts about shifts, timesheets, approvals, and other workplace updates.

The token is used only to deliver these notifications to your device. You can turn notifications off at any time in your device settings, and the token is removed when you sign out of a workspace.

Location

Location is optional and is used for one purpose only: to confirm you are at the correct work site when you clock in or out, where your organisation has enabled site-based (geofence) clock-in.

If that feature is enabled and you grant location permission, the app checks your device location at the moment you clock in or out. The app does not track your location continuously or in the background. You can decline the location permission, though this may prevent site-based clock-in from working.

How information is shared

Information in the Staff app is shared with your employing organisation, which controls its BondiByte workspace and decides who can access it.

BondiByte Robotics uses trusted service providers to operate the app, including cloud hosting (primarily in Australia) and push notification delivery. BondiByte Robotics does not sell your personal information and does not use your workspace information for unrelated purposes.

Security

The Staff app is a staff-only surface with role-aware access and permission checks, and information is encrypted in transit between the app and the BondiByte platform.

No app or online service can prevent every possible security event. You can help by protecting your sign-in credentials and the device you use to access the app.

Data retention

Workspace information such as your staff record, timesheets, and shift history is retained for as long as your organisation needs it to operate its workspace and to meet its own operational, payroll, audit, and legal obligations.

Retention is primarily controlled by your organisation. BondiByte Robotics retains information consistent with providing the service and its legal obligations.

Data deletion

Your staff account is created and controlled by your employing organisation. To request deletion or correction of your personal information, contact your organisation's administrator, who manages your staff record in the workspace.

You can also contact BondiByte Robotics and we will assist and coordinate with your organisation where the information belongs to its workspace. Uninstalling the app removes app data stored locally on your device; signing out removes your device's push notification registration.

Some information may be retained where your organisation or BondiByte Robotics is required or permitted to keep it, for example for payroll, audit, or legal reasons.

Children

The Staff app is intended for adult support workers using it for work. It is not directed at children and is not intended for general public use.

Changes to this policy

BondiByte Robotics may update this Privacy Policy as the Staff app, its features, service providers, or legal requirements change. The latest version published here applies.

Contact information

The Staff app is provided by BondiByte Robotics Pty Ltd (ACN 699 516 231), Queensland, Australia.

For privacy enquiries about the Staff app, email enquiries@bondibyterobotics.com.au. For app support and data requests, email support@bondibyterobotics.com.au. You can also reach us through our contact page.

If you believe your personal information has been handled inconsistently with the Australian Privacy Principles, you can also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.