In short
Airtight does not collect your records. Everything you enter — your business details, your workers, your air monitoring results, and the health monitoring dates the law requires you to keep — stays on your phone, encrypted. It is never sent to us. We hold no copy of it, and we could not read it if we did.
There is no account, no sign-in and no password, because there is nothing to sign in to. Your phone's own lock screen is what keeps the records private.
We do not sell data, do not share it, and do not use it for advertising. There are no advertising or analytics trackers in the app.
Who we are
Airtight is published by Gap Found. For any privacy question, email gapfound.apps@gmail.com.
What is on your phone, and nowhere else
All of the following is written to a single encrypted file in the app's private storage on your device.
| What | Why the app holds it | How long you should keep it |
|---|---|---|
| Business name, ABN, trade, state | Identifies your business on every plan, record and audit pack | Your choice |
| Workplace names and addresses | A silica risk control plan is workplace-specific | Your choice |
| Worker name and role | To know who does high risk silica work, and so who is owed health monitoring and training | Up to 30 years, as the Regulations require |
| Date they started high risk silica work | Sets the health monitoring due date and the Silica Worker Register deadline | As above |
| Health monitoring: the date it happened | To schedule the next round and evidence the duty was met | 30 years |
| Health monitoring: the practitioner | The law requires monitoring by a registered medical practitioner with experience in health monitoring; the record shows who | 30 years |
| Whether a report was received, whether it was adverse, whether it was given to the worker, whether the regulator was notified | These four facts are the compliance record | 30 years |
| Training course, provider, completion date | The law requires a training record | 5 years after the worker leaves |
| Air monitoring results, including any attributed to a worker | Personal exposure records | 30 years |
Airtight records that health monitoring happened, when, by whom, and whether the report was adverse. The clinical record stays with the medical practitioner and in the employer's own confidential file, which is where the Regulations require it to be kept.
Health monitoring must be performed by a registered medical practitioner. Airtight does not perform, interpret or advise on it.
What actually leaves your phone
Two things, and neither carries any of your records.
| Where | What it receives |
|---|---|
| RevenueCat | An anonymous identifier their software generates, and the fact that a subscription was bought or renewed. It is how the app knows you are subscribed. No records, no worker details, no health information, no name and no email. |
| Apple / Google | Payment processing, handled entirely by the platform. We never see card details. |
| Our rule file (a public web address) | The app downloads a signed file of current law about once a day. It is an ordinary web request and sends nothing about you or your business; the host sees your device's IP address, as any website would. |
| Safe Work Australia, SafeWork NSW | Nothing. We read their public documents on our own machine to prepare that rule file. Your device never contacts them, and nothing of yours is ever sent to them. |
Notifications to a regulator are made by you, through the regulator's own portal. Airtight records what is due and what you tell it you submitted. It never submits on your behalf.
How it is protected
On your phone: your records are held as one file encrypted with AES-256-GCM. The key is stored in the iOS Keychain or the Android Keystore, set so that it does not sync to iCloud and does not travel in a device backup. The app never writes your records anywhere else.
Your backups: a backup file is encrypted with a passphrase you choose, not with anything stored on the phone — that is what lets you open it on a replacement device. We never see the passphrase and cannot recover it for you.
The law the app applies: the rule file is signed, and your device checks the signature before trusting it. A file altered along the way is thrown away and the app keeps the rules it already had. This is what stops the exposure limit being tampered with in transit.
No keys in the app: the only keys in the app are public ones — RevenueCat's client key, which is designed to ship in an app, and the key used to check that rule signature.
Being straight about the limits: because there is no server, the check that you hold a subscription happens on your phone rather than somewhere you cannot alter. That is genuinely weaker than a server-side check, and the app says so on its Subscription screen. It is the same trade that keeps your records private: with nothing of yours on our side, there is nothing on our side to arbitrate either.
Your rights
Access and export
Everything is already in your hands. The Backup screen exports the lot as an encrypted file you keep; the Audit pack screen produces the readable version to show an inspector.
Correction
Every record is editable in the app.
Deletion
We cannot delete your records, because we do not have them. You delete them yourself: the Backup screen has a "Delete everything on this phone" control that erases the encrypted file, its spare copy and the key that opens them. Removing the app does the same thing.
That deletion is final — there is no copy anywhere for us to restore from. Air monitoring and health monitoring records must be kept for 30 years and training records for 5 years after a worker leaves, and that duty stays with your business, so take a backup before you delete anything.
Workers
A worker may ask their employer for their own records. A health monitoring report must not be disclosed to anyone else without the worker's written consent. Airtight never holds the report itself, so it cannot disclose one.
Complaints
Email us first. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Children
Airtight is a workplace tool and is not directed at children. We do not knowingly collect information from anyone at all, at any age — the records you enter about your workers, whatever their age, stay on your device.
Changes
If this policy changes materially we will say so in the app before the change takes effect. The date at the top always reflects the current version.