Privacy policy

SwitchReport is a trading name of SwitchReport Pty Ltd (ABN 48 702 344 938) of 1st Floor, 203-205 Blackburn Road, Mount Waverley, VIC 3149. Contact us about privacy at privacy@switchreport.app or on 0457 447 236. Emails to privacy@switchreport.app are read by our team and are not processed by AI.

We are bound by the Privacy Act 1988 (Cth) and handle personal information in accordance with the 13 Australian Privacy Principles (APPs); "personal information" has the meaning given in that Act. This policy explains what we collect and why, who else handles it, and how you can access it, correct it or complain.

1. What this policy covers

All parts of SwitchReport: the website at switchreport.app including the signed-in web app, the SwitchReport app that runs on your FLIR i34, i35, i64 or i65 thermal camera, and the report-generation service behind them. They share one account and one database, so they are described together. It applies to visitors to this website, to account holders and their team members, and to the individuals whose details appear in the records account holders keep. You can sign up online (see section 14).

2. The personal information we collect

Your account. Your name and email address; your password (stored only in hashed form by our authentication provider, so we can never see it); your business details, including any logo or branding files you upload for your reports; and the professional details you choose to record: thermography certifications, electrical licence details, and the name and qualification of any assistant you record on an inspection. Qualification details are collected so your reports can name the thermographer and their qualification; if you do not provide them, your reports cannot carry them. We also keep a record of which version of our Terms of service you accepted, and when.

Team members. If additional seats are added to your account, we collect each team member's name and email address to invite them and operate their sign-in. Their work is stored under your business account.

Billing. If your account is on a paid plan, we collect billing details: your plan, billing contact, billing address and billing country (we need your billing country to work out whether GST applies). Card payments are handled by our payment provider, Stripe. We give Stripe your email address and business name, your card details go to Stripe, and Stripe processes your payments. We never store your full card number on our own systems. We keep the billing records we need for accounting and tax purposes (your name, business and contact details, invoices and payments) in Xero, our accounting software (see section 7).

Our dealings with you. If you have an account with us, or you contact us or ask about SwitchReport, we keep your contact details, the emails you send us, and notes on our dealings with you. Our business email runs on Google Workspace, and those contact details and notes are kept in Capsule, our customer relationship management system (see section 7).

Records you enter about your customers. When you set up a customer and site, you enter business names, billing and site addresses, and contact names, email addresses and phone numbers. This is personal information about other people, and you remain responsible for having a proper basis to collect it. We hold it on your behalf and do not use it for anything except providing SwitchReport to you (see section 4).

Inspection data. Thermal (radiometric) and visual images of the equipment you scan; the temperature readings derived from them, and the comparison methods and priority codes recorded against them; the location structure you build (building, level, room) and equipment identifiers; your condition, repair and non-thermal notes; inspection and recommended re-scan dates; and the reports generated from all of it.

What image files contain. Besides the picture, each image file the current camera app saves holds the panel name, the location, the inspection date and system identifiers for the inspection and capture, and, for equipment that could not be inspected, the reason. Files saved by earlier versions of the app can also hold the customer's company name, the site, the thermographer's name, qualification and electrical licence, any assistant's name, and any note about equipment that could not be inspected. The FLIR camera also records its own details: make, model, part and serial number, firmware, lens, calibration date, and the date and time of capture. A thermal image file also holds the camera's visible-light photo, which shows the board and whatever else was in frame. If you change a detail after capture, earlier text can remain inside the original image file. If you turn on saving copies to the FLIR Gallery (section 9), the folders in the FLIR Gallery are named by site, customer and date, and each file by its panel name (or by panel name, reason and location for equipment that could not be inspected). If no photo could be taken of equipment that could not be inspected, the placeholder image has the panel name, reason and location printed on it, and one made by an earlier version of the app may also show a note.

Images are of equipment, not people. Thermal scans assess switchboards and electrical equipment. Even so, an image can show whatever was in frame when it was taken: people, names, labels, signage, contact details, company or product branding, and other personal or confidential details. You decide what you capture, so please frame captures so that people, and anything you are not entitled to share, are not in shot. If a bystander is incidentally captured in a visual photo, we treat that as unsolicited personal information: tell us and we will crop, blur or delete it as soon as practicable. The details stored in an original image file stay with it wherever it is stored or backed up. If you copy or share one, those details go with it, including any earlier versions, and some of them can be read from the file's properties on an ordinary computer. Once a file is copied off the camera, the camera's screen lock (section 9) no longer protects it.

Technical records. Authentication and sync events — sign-ins, password changes and similar — including the time and originating IP address. We keep these so that we can investigate if an account is misused.

Problem reports and diagnostics. If you choose to send us a problem report or suggestion (from the app or the website), we collect the description you type together with basic technical context (app version, device model or browser type, and the screen you were on). A manually submitted report is emailed to our support mailbox, together with your name, email address and browser type, so we can reply. That email is sent through Google (see section 7). Automatic crash diagnostics (a technical stack trace, device model, app version and a short breadcrumb trail of recent screens) are collected only if you have expressly opted in when asked; until you answer, nothing is sent. Breadcrumbs are designed to reference records by internal ID, not by your customers' names. Diagnostics are used solely to support and debug the product — never for marketing or profiling.

What we do not collect. We do not request your device's location: location details exist only as the addresses you type in, the app requests no location permission, and no GPS position is recorded in the image files. We do not use advertising trackers or analytics cookies, and we do not sell or rent personal information to anyone. We do not ask for "sensitive information" as defined by the Privacy Act (such as health, biometric or racial information). Please do not put it in notes or images. And we do not use government identifiers as our identifiers: our internal record IDs are system-generated, and an electrical licence number you record as a credential is stored only so it can appear on your reports.

Dealing with us anonymously. You can browse this website, and make a general enquiry, without identifying yourself. The reporting service itself cannot be used anonymously: a finished report names the site, the recipient and the thermographer on its title page, so we need those details to provide it.

3. How we collect it

Directly from you: when you sign up for an account, when you enter details in the app or website, and when you sync the inspections you capture on the camera. Automatically: the technical records described above, generated as you sign in and sync. This policy is always available from this page; where a category of data has its own switch (such as crash diagnostics), we ask you separately before collecting it.

4. Your customers' information: our role

SwitchReport exists so you can produce inspection reports for your customers. The customer and site records you enter, and the images you capture at their premises, are held on your behalf:

• we use them only to provide SwitchReport to you (and as required by law);
• we never use your customers' contact details for our own marketing, and we never sell them;
• you are responsible for collecting those details lawfully and for telling your customer how they will be used;
• if an individual contacts us directly about information you entered, we will refer them to you and help you respond;
• your reports are delivered to you — we do not send them to your customers or their insurers unless you direct us to.

5. How we use personal information

We use personal information to: provide and operate SwitchReport, including syncing between your camera and the web app, computing temperature readings and priority codes, and generating your reports; create, secure and administer accounts and authenticate sign-ins; process payments for paid plans and keep billing records; keep records of our dealings with account holders and people who ask about SwitchReport, so we can manage accounts and reply to enquiries; respond to support requests and problem reports; maintain and improve SwitchReport and diagnose faults; administer access to the Service; meet our legal obligations; and, with your consent, for any other purpose we describe at the time.

Our automated analysis (hot-spot detection, and the comparison methods and priority codes applied to each reading) assesses equipment readings, and every report is prepared and reviewed by the responsible thermographer. It does not make decisions about individuals.

6. Our use of AI (Anthropic)

We use Anthropic, our AI provider, in two ways: drafting text for your reports, and helping us triage and reply to support email. Both are described here so it is clear which one applies when.

AI-drafted text (Anthropic). AI drafting is a Plus feature. On a Core plan, nothing is sent for drafting. SwitchReport can draft four kinds of text for a capture: the condition observation, the component identification, the board description, and the wording that accompanies an absolute-maximum reading. Drafting starts in any of these ways:

• On the camera. If you turn on AI for an inspection, every capture in that inspection is sent for drafting when the inspection reaches the web.
• When you open an inspection on the web. When you open a completed inspection, drafting starts by itself for every capture in it that does not have a draft yet. This happens whether or not AI was turned on for that inspection on the camera. The setting "Draft AI notes automatically when I open an inspection" in Account settings controls it. The setting is on unless you turn it off, and it applies only in the browser where you set it, so turn it off in each browser you use.
• When you ask. You can ask for drafts yourself, for example by pressing Draft AI notes. With the setting off, nothing is sent from the web until you ask.

Your account admin can turn AI drafting off for everyone in your business, in Account settings. Once it is off, nothing more is sent to Anthropic for drafting from the web, automatically or when someone asks, even for an inspection that had AI turned on at the camera. Requests already sent still finish, drafts already made are kept, and a draft someone has already chosen to use still appears on the report.

You can press Stop to stop drafting for an inspection. Nothing more is sent for it, requests already sent still finish, and drafts made so far are kept. The stop applies only in the browser where you pressed it, for 30 days or until you press Draft AI notes for that inspection.

Each request sends that capture's images, the panel name you typed and related details (listed below) to Anthropic, whose service processes it in the United States, and a short draft comes back for you to accept, edit or discard. Only text you approve appears on the report. You decide whether images are sent for drafting, and we do not check what they show before they go. If an image shows something you are not entitled to share (see section 2), do not use AI drafting for the inspection it is in. Your account admin can turn AI drafting off for your business, which covers every inspection. Otherwise, turn the setting off before you open that inspection, leave AI off for it on the camera, and do not ask for drafts for it.

We keep a record of each request (who made it, when) to meter usage and prevent abuse, and we record what was drafted and what you did with it, so your reports remain auditable. A request carries, at most, the thermal image, the visual photo, the panel name you typed, the readings and priority details, the comparison method and the re-inspection date; it does not include your customer records. The images are re-created before they are sent, so the details the camera stores inside the image file (such as the location and system identifiers, plus the customer, site and thermographer names in files from earlier versions of the app) are not included. The visual photo still shows whatever was in frame, and the thermal image carries SwitchReport's own scale and measurement labels.

Support email handling (applies automatically to every message). When you email support@switchreport.app, the content of that email, including its full text, is also sent to Anthropic, processed in the United States, to help us classify, triage and prepare a draft reply. Unlike AI drafting above, this is not something you can switch off, and turning AI drafting off for your business does not change it: it applies to every message sent to that address, because it is part of how we run our support inbox. A person on our team reviews and sends any reply. Anthropic's processing of your message does not by itself result in a reply being sent or a decision being made about you.

For both uses: under Anthropic's API terms, data sent this way is used to provide the response, not to train AI models.

7. Who else handles it (our service providers)

We use a small number of service providers to run SwitchReport, and we update this list before a new provider takes effect:

• Supabase: database, file storage and authentication, hosted in the Sydney region (ap-southeast-2).
• DigitalOcean: hosting for the website and report engine, in Sydney.
• Google (Google Workspace): our business email, which handles messages you send us, including privacy requests and email to support@switchreport.app (also processed by Anthropic for triage, see below); automated account emails such as password resets, which involves handling your email address; the operator alert emails for problem reports, carrying the submitter's name, email address and description; and the alert email a sales or marketing enquiry you submit through our website generates, carrying your name, business, email address and, if you provide one, your message. Processed in the United States.
• Anthropic: AI-drafted text on the Plus plan (observation, component identification, board description, absolute-maximum wording), unless your account admin has turned AI drafting off for your business: for every capture when AI is turned on for an inspection on the camera, automatically for captures without a draft when you open a completed inspection on the web (unless you turn that setting off), and on request; and automatic triage/draft-reply processing of every email sent to support@switchreport.app (section 6), processed in the United States.
• Amazon Web Services (AWS): daily backup copies of thermal images, visual images and generated report PDFs, filed under system identifiers, hosted in Sydney, Australia. Image files in it that came from the camera carry the details stored inside them, including any earlier versions (see section 2), and the report PDFs name the site and customer as the report does.
• Stripe: card payment processing for paid plans (section 2).
• Capsule: our customer relationship management system, holding the contact details of account holders and people who ask about SwitchReport, and notes on our dealings with them, hosted in the United Kingdom.
• Xero: our accounting software, holding billing details, including names, business and contact details, invoices and payments, hosted in the United States.

Our web pages do not load fonts, scripts or trackers from third-party servers — everything the pages need is served from our own site.

Beyond these, we disclose personal information only: to our professional advisers where reasonably necessary; where the law requires or authorises it; or, if our business is restructured or sold, to a successor bound by this policy. We do not sell, rent or trade personal information.

8. Where your data lives (overseas disclosures)

Your account, customer records, inspection data and images are stored in Australia, in a Supabase project hosted in the Sydney region (ap-southeast-2), and our website and report engine are hosted in Sydney. Daily backup copies of thermal images, visual images and generated report PDFs are held by Amazon Web Services in Sydney (section 10). Data is encrypted in transit between your browser or camera and our servers. Some copies and records are held overseas, and they are all listed below.

Our routine overseas disclosures are:

• to Anthropic in the United States, when AI drafts text for your reports (including drafting that starts by itself when you open an inspection on the web) and, automatically, for every email you send our support address;
• to Google (Google Workspace) in the United States, for our business email (including privacy requests and email to our support address), automated account emails such as password resets, the alert email a problem report you submit generates, and the alert email a sales or marketing enquiry you submit through our website generates;
• to Stripe in the United States, to process payments if your account is on a paid plan;
• to Capsule in the United Kingdom, for our records of our dealings with account holders and people who ask about SwitchReport; and
• to Xero in the United States, for billing records.

Where we disclose personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs, and we remain accountable for that handling.

Each account can only reach its own records. This is enforced by the database itself rather than only by the application. A small number of our own server-side operations (account sign-up, seat invitations, support alerts, AI usage metering, account deletion) run with elevated access and are the exception; we limit and review them. There is more detail on our Data & security page.

9. Data on your camera

The SwitchReport app keeps a working copy of your data on the camera itself so you can work without a signal. We want to be specific about what that means, because a camera is a portable object that may be shared, lent, lost or sold.

• Your customer records, sites, inspections and captured images are stored in the app's own private storage on the device.
• Your saved sign-in credentials are held encrypted, using the device's hardware-backed keystore.
• Signing out erases all of that app data from the camera. If you have unsent work, the app warns you and offers to upload it first.

Copies saved to the FLIR Gallery

Saving copies to the FLIR Gallery, the camera's own picture gallery, is off by default. SwitchReport only saves copies there if you turn it on in the app. If you do, this applies to those copies:

• Photos saved to the FLIR Gallery are not erased when you sign out. SwitchReport files a copy of each scan into the FLIR Gallery, in folders named by site, customer and date, so you keep your own copy. Those folders are outside the app and are deliberately left in place. If a camera is shared or passed on, remove them yourself in the FLIR Gallery.
• The FLIR camera has a screen lock with a passcode, so on the camera, the images in the FLIR Gallery and the details stored in them are available only to people who can unlock it. Keep your passcode private: anyone you give it to, including colleagues who share the camera, can see those images and details.
• Your camera is FLIR hardware and can connect to FLIR's own cloud service or to other camera-backup apps. If you turn one on, the photos in your FLIR Gallery, including the inspection images above and the details stored inside them, may also upload to that service. If that service is FLIR's, they go to FLIR's cloud under your own FLIR account, where FLIR's terms and privacy policy apply. Those services are run by others, may store data outside Australia, and are outside SwitchReport's control; turning them on is your own choice, and if you do, you are responsible for what it means for your customers' data. SwitchReport's own copies of your data are held as section 8 describes.

10. How we protect it

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. In plain terms:

• Encrypted in transit: all traffic uses HTTPS. Plain HTTP requests are redirected, and the .app domain is on browsers' HTTPS-only preload list, so mainstream browsers will not attempt an unencrypted connection.
• One account cannot see another's data: row-level security separates accounts for everything the website and camera read directly. A small number of our own server-side operations (account sign-up, seat invitations, support alerts, AI usage metering, account deletion) run with elevated access and are the exception; we limit and review them.
• Passwords are stored hashed by our authentication provider and are never visible to us; sign-in attempts are rate-limited and authentication events are logged.
• On the camera, working data lives in protected app storage, credentials are encrypted with the hardware keystore, and release builds are hardened so app data cannot be extracted over a USB cable.
• Backups: our database is backed up daily, and thermal images, visual images and generated report PDFs are also copied daily, filed under system identifiers, to Amazon Web Services in Sydney, Australia. Image files in that backup that came from the camera carry the details stored inside them, including any earlier versions (section 2), and the report PDFs name the site and customer as the report does.
• Access within our team is limited to the people who need it to run and support SwitchReport.

No system is perfectly secure, and we will never claim otherwise. If a data breach occurs that is likely to result in serious harm, we will assess it promptly (within 30 days of suspecting an eligible breach) and notify the Office of the Australian Information Commissioner and affected individuals as soon as practicable, in accordance with the Notifiable Data Breaches scheme. There is more technical detail on our Data & security page.

11. How long we keep it, and your control over your records

We retain inspection records and their associated images for 7 years from the date of the inspection, unless we are required by law to keep them longer, or they are needed in connection with a legal claim. Thermal reports have long-term value — a fault often has to be shown developing over years, and an insurer or auditor may ask for an earlier baseline scan long after the work was done. That retention is the lawful basis on which we keep report records even after they are no longer needed day-to-day.

Your records are in your control. You can archive records in the product, your account admin can permanently delete some records in the product, and you can ask us at any time to delete records earlier than the periods above (unless the law requires us to keep them). When you delete a record, we remove it from SwitchReport straight away and it cannot be undone. Copies in our backups are removed within 30 days. We are not responsible for the loss of records deleted by you or at your request. Your delivered reports are yours: if your own compliance obligations require you to keep a report or its images, keep your delivered copy (if you turn on saving copies to the FLIR Gallery, the camera also files a copy of each scan there, as section 9 explains).

If you close your account, closing it starts a 30-day period in which it can be restored; after that everything is permanently removed from SwitchReport within a further 30 days, and copies in our backups are removed within 30 days after that. Other records — such as authentication logs and diagnostics — are kept only as long as needed for the purposes described above, then deleted or de-identified. When personal information is no longer needed for any purpose we are allowed to keep it for, we destroy or de-identify it.

12. Marketing

We may occasionally email account holders about SwitchReport product updates. Every such email contains a working unsubscribe link; opting out is free and honoured promptly, and we comply with the Spam Act 2003 (Cth). We never use your customers' details for marketing, and you can ask us at any time where we obtained any information we used to contact you.

13. Access, correction and complaints

The fastest path is in the product — your account, customer and inspection details can be viewed and edited directly, and past reports deliberately preserve what was true at the time they were issued (corrections apply to the live records, not to history).

Access. You can ask us for a copy of the personal information we hold about you. Email privacy@switchreport.app; we will verify it is you, and respond within 30 days. We do not charge for making a request, and if we ever needed to charge for giving access it would be reasonable and quoted first. We can refuse access only on the limited grounds the Privacy Act allows; if we do, we will tell you why in writing and how to complain.

Correction. If information we hold is inaccurate, out-of-date, incomplete, irrelevant or misleading, we will correct it free of charge. If we refuse, you may ask us to attach a statement of your disagreement to the record, and we will.

Complaints. If you think we have breached the APPs or mishandled your information, tell us first at privacy@switchreport.app so we can put it right. We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): online at oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5218, Sydney NSW 2001.

14. Availability

You can sign up online from our Plans page, and team members join when their account admin invites them. Any data shown in a demonstration of the product is fabricated sample data, not the records of any real person or business. Everything in this policy applies in full to every account from the day it opens.

15. Children

SwitchReport is a professional tool for thermographers inspecting electrical equipment. It is not directed at children, and we do not knowingly collect personal information from anyone under 18.

16. Changes to this policy

If we change how we handle personal information, we will update this page and the date at the top. Where a change is significant — including adding a service provider — we will update this policy before the change takes effect and tell account holders directly.

17. Contact us

SwitchReport Pty Ltd
ABN 48 702 344 938
1st Floor, 203-205 Blackburn Road, Mount Waverley, VIC 3149
Phone: 0457 447 236
Privacy contact: privacy@switchreport.app

This policy is provided free of charge; ask us if you need it in another form.