Privacy Policy

1. Who we are

HSE360 is made by Safe360Hub ("we", "us"). HSE360 is health, safety and environment software. The app lets site staff and safety teams report hazards and incidents, run inspections and clear their actions from the site floor. This policy covers the HSE360 mobile app. Our websites and web platform are covered by our general Privacy Policy.

HSE360is business software. Accounts are created by an organisation (usually your employer, "your organisation") for its staff, drivers or contractors. Your organisation decides what you can see and do, and it controls the records created in its workspace. We process that information on its behalf and under our agreement with it.

2. What the app collects

Account and sign-in

• Your name, work email address, role, and the organisation and sites you belong to, as set up by your organisation.
• Your password, which is checked by our server and never stored in the app. Optional two-step verification and passkeys.
• A profile photo, if you choose to add one.
• Your device's manufacturer, model, operating system version and the app version. We use these to show you your signed-in devices, to name a passkey, and to protect your account.

Work records you create

The reports and records you fill in and submit, for example:

• Hazard observations and Stop Work cards
• Incident reports and investigations
• Inspections, checklists and audits
• Action items, approvals and comments

These include what you type or dictate, the people, sites and equipment you select, dates and times, and any photos you attach.

Photos (camera and photo library)

Only when you choose to take a photo or pick one from your library, to attach it to a report, a checklist item or your profile. Photos may be resized and compressed before upload. The app does not browse your library on its own.

Precise location

Only when you tap to use your location on a Stop Work or Incident report. The app takes a single reading, turns it into a street address on your device using your phone's built-in map service (Google on Android, Apple on iOS), and saves the coordinates and address with that report. Location is never collected in the background, never tracked continuously, and never used for any other screen. You can type the address instead, or deny the permission.

Microphone and speech recognition

Only while you tap the microphone to dictate a title, description or comment. Your speech is turned into text by your phone's speech recognition service: Google on Android, Apple on iOS. When you are online, that service may process the audio on its own servers, under Google's or Apple's privacy policy. When you are offline, it runs on the device. The HSE360 app does not record, store or upload your voice. Only the resulting text goes into your report.

Notifications

If you allow notifications, your device gets a push token from Firebase Cloud Messaging (Google) and, on iPhone, Apple Push Notification service. We store that token with your account so we can tell you about assignments, approvals and overdue work. The token is removed when you sign out.

What we do not collect

• No background or continuous location.
• No contacts, call logs, SMS or calendar data. If you add an event to your calendar, your calendar app does it, not us.
• No advertising ID, no ads, and no third-party analytics, tracking or crash-reporting tools.
• No payment information.

3. How we use it

• To sign you in, keep your account secure and show you the work assigned to you.
• To save, sync and route your reports and records to the right people in your organisation.
• To send the notifications you allowed.
• To provide support, fix problems and keep the service running.
• To meet legal obligations.

We do not use your information for advertising, and we do not sell or rent it to anyone.

4. Who we share it with

• Your organisation. The people in your organisation with the right permissions, such as managers and administrators, can see the records you submit and your account details.
• Service providerswho help us run the service, under contract and only for that purpose: our hosting provider, Google Firebase Cloud Messaging and Apple Push Notification service for notifications, and your phone's speech recognition and map services as described above.
• When the law requires it, for example in response to a valid court order, or to protect someone's safety.
• Business transfers. If Safe360Hub is merged or acquired, this policy continues to apply to your information.

5. What stays on your device

• Sign-in tokens are kept in your phone's secure storage (Android Keystore or iOS Keychain) and are not included in device backups.
• Reports you submit without signal wait in the app's private storage on your phone and are sent when you reconnect. Drafts are saved as you type, so nothing is lost.
• Recently viewed data and images are cached so the app works offline. Cached files expire after about 30 days.
• Signing out removes your sign-in tokens, profile and notification token from the device. Unsent reports and drafts are kept, hidden, until you sign in again so your work is not lost. Uninstalling the app removes everything it stored on the device.
• Home screen widgets show your own counts and forms, and stop working when you sign out.

6. Security

All traffic between the app and our servers is encrypted with HTTPS. Access is limited by role within your organisation. The app supports two-step verification and passkeys, and you can see and sign out your other devices from the app. No system is perfectly secure, but we work to protect your information and to fix problems quickly.

7. How long we keep it

We keep your account and records for as long as your organisation uses HSE360, or until deletion is requested. Safety records such as incident reports may need to be kept longer, because your organisation or the law requires it. When your organisation's workspace is closed, its data is deleted, unless we have to keep part of it to meet a legal obligation.

8. Delete your account and data

You can ask for your HSE360 account and its personal data to be deleted at any time, in either of these ways:

• Ask your organisation's HSE360 administrator to delete your account.
• Email support@safe360hub.comfrom the email address on your account, with the subject "Delete my HSE360account" and the name of your organisation.

We confirm the request and then delete your account, sign-in details, profile photo, devices and notification tokens, and remove your name from records where we can. Some work records, such as incident reports, may belong to your organisation and have to be kept for safety or legal reasons. In that case we tell you what is kept and why. Uninstalling the app does not delete your account.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how it is used. Because your organisation controls its records, we may pass your request to it, and we help it respond. Contact us at support@safe360hub.com.

You can change the camera, photos, location, microphone, speech recognition and notification permissions at any time in your phone's settings. The app keeps working without them. You just type instead of dictating, or enter an address by hand.

10. Children

HSE360 is a workplace app and is not meant for anyone under 18. We do not knowingly collect information from children.

11. International transfers

Your information may be processed in countries other than your own, including by the service providers named above. Where we do this, we use appropriate safeguards required by applicable law.

12. Changes to this policy

We will update this page when the app changes how it handles information, and change the date at the top. If a change is significant, we will also tell you in the app or through your organisation.

13. Contact us

• Email: support@safe360hub.com
• Website: safe360hub.com