The short version
SuperSafe keeps your planning and staff records on your device. We don’t automatically collect, sell or trade your personal or payroll data. There are no ads, analytics, tracking, accounts or third-party tracking SDKs.
You choose what to enter, back up, export or email. Some of those choices share information outside the app. Here’s what that means.
Your records stay local
Business settings, staff profiles, estimates, confirmed paydays, wage records, receipts, notes and bucket logs are saved locally. App preferences are also stored on your device. There’s no automatic sync or Apple sign-in.
The app avoids asking for TFNs, bank account numbers or full birth dates. Don’t put these in notes, photos or payslip copies. You must remove sensitive details and review an attachment before saving it; SuperSafe does not automatically find every private detail.
Optional app lock uses Apple’s device authentication. SuperSafe doesn’t receive your passcode, face or fingerprint. App lock hides the app’s screens; it is not a claim that every local record is an encrypted vault.
Backups and copies you choose
You can make an encrypted backup and choose a Files folder. That may be on the device or with iCloud Drive or another cloud provider. Your chosen provider handles copies saved there under its own terms. This is a backup you control, not automatic SuperSafe cloud sync.
Keep your recovery phrase safe. The app may keep recovery material in this device’s Keychain; we do not have a copy and cannot recover a lost phrase for you.
PDFs, CSVs, images and calendar events you export may contain private business or staff information. Check the preview and recipient. Copies outside SuperSafe won’t be removed when you delete a record in the app. Device backups and Files copies may also remain until you remove them.
Apple services and permissions
If you choose an Apple purchase, Apple processes the payment and subscription. SuperSafe uses StoreKit to check access; it does not receive your card details. Apple handles purchase information under its privacy policy.
Optional notifications, calendars, camera, chosen photos and device authentication use Apple’s services and permissions. Requests happen when relevant to the action you choose. You can manage permissions in iPhone Settings. iOS controls notification delivery.
Email is your choice
Help, date reports and larger-business enquiries use a reviewed email draft, not a server form. Before opening your email app you see the exact recipient, subject and body, and can edit or cancel.
Automatic technical details are limited to app version/build, iOS version and a generic device model such as iPhone. No device name or unique device identifier is added. Date reports add only rules version, dates and non-identifying calculation inputs — not staff names, workplace IDs or pay amounts.
If you choose Send, your email provider and chosen recipient receive the email, including your sender address and anything you added. A support recipient can use what you send to respond. Never email TFNs, bank details or unredacted staff documents. SuperSafe does not silently send logs or attachments.
What SuperSafe decides automatically
SuperSafe calculates estimated pay, tax, super and deadlines from the details you enter and the loaded rules. It can suggest usual patterns and schedule reminders. It does not make payments or decisions for you. You review, change and confirm every pay and recorded action.
Rules updates and your decisions
The optional signed-rules download endpoint is unconfigured for this build. No rules download happens until a valid HTTPS endpoint and pinned signing key are configured. If configured later, checks would contact that host; network requests expose ordinary connection information, such as an IP address, to the host. Payroll records are not included.
A valid signature checks the origin of a rules file, not whether its legal content is correct. Automatic amounts and dates are estimates and planning information. You remain responsible for checking them and deciding what to do.
Keeping and removing data
Archiving staff keeps their pay history; it does not delete it. Saved records remain local unless you explicitly remove them. Cancelling a subscription does not delete your data.
Keep records for your legal obligations and check your backups before deleting anything. Removing local data does not remove files, calendar events, sent emails or other copies you shared outside the app.
To remove this app’s local records and settings, go to Settings in SuperSafe → Delete all my data, read the warnings and confirm. This does not cancel an Apple subscription or remove backups you copied elsewhere. Delete those copies separately through Files or your backup provider if you want them removed.
Australian Privacy Principles and contact
The Australian Privacy Principles explain how personal information should be handled, including openness, careful use, security, access and correction. Whether the Privacy Act applies depends on the organisation and its activities; these principles are a useful guide to protecting your staff’s information.
You can view and correct your local records in SuperSafe. We cannot access those records for you. For a privacy question or complaint about information you choose to email us, contact [email protected]. Please do not include private staff records. You can also read about the principles and privacy complaints at oaic.gov.au.