Privacy policy

Last updated 13 October 2026

TidyOps is job management software for cleaning businesses, made and run by Zero One in Australia. This policy covers the TidyOps website, the web app and the TidyOps app for iPhone and iPad. It explains what information we hold, why, who else handles it, and how to see it, correct it or have it deleted.

Who decides what is collected

A cleaning business signs up to TidyOps and adds its own staff and customers. That business decides what is recorded about you and is responsible for it. We store and process it on the business's behalf so the software can do its job. If you are a staff member or a customer of a business that uses TidyOps, your first point of contact about your information is that business. You can also contact us directly at the address below.

What we hold

• Account details: your name, email address and phone number, and a password stored only as a one-way hash. If you sign in with Google or Apple we receive your email address and an identifier from them, not your password.
• Staff details the business records: address, emergency contact, ABN and business name, bank account details for paying you, pay rates, the days and times you can work, the services you do, and a profile photo if one is added.
• Work records: the jobs you are assigned, the times you tap On my way, clock in and clock out, checklist answers, notes, timesheets, pay runs and bills.
• Photos: pictures you choose to take or upload for a job or for a profile. The app uses the camera and photo library only when you ask it to.
• Customer details the business records: name, address, phone, email, booking requests, appointments, invoices, payments recorded, and ratings and comments a customer chooses to leave.
• Device information: if you allow notifications, a token that lets us send them to your phone, and the language you chose in the app. Our servers keep standard logs of requests for security and troubleshooting.

TidyOps does not track your location. The app does not ask for or record your phone's GPS position; where a staff member is shown on the business's map is worked out from the job they clocked in at or said they were on the way to. We do not use advertising or analytics trackers, and we do not sell personal information.

What it is used for

• Running the service: scheduling jobs, recording time worked, paying staff, invoicing customers.
• Sending messages the business has set up: booking confirmations, reminders, invoices, and notifications to staff about their jobs and timesheets.
• Keeping accounts secure, including two-step sign-in and records of administrative actions.
• Billing the business for its TidyOps subscription.
• Answering questions you send us and fixing problems.

Who else handles it

We use other companies to deliver parts of the service. They receive only what they need for that part:

• our hosting provider, which runs the servers and database;
• Twilio, to send text messages, and SendGrid, to send email;
• Stripe, to take subscription payments from the business and, where the business turns it on, payments from its customers;
• Xero, only if the business connects its own Xero account, to send invoices and bills there;
• Google, for Sign in with Google and for address lookup and maps;
• Apple, for Sign in with Apple and for delivering notifications to iPhones, and Expo, which passes those notifications to Apple.

Some of these providers store or process information outside Australia, including in the United States. Within a business, information is visible to that business's owner and office staff according to the roles the business has set; a staff member sees their own jobs and pay, not other people's.

How long it is kept

Information is kept while the business's account is open. Records a business has to keep by law, such as pay, timesheets and invoices, stay with that business even after a staff member leaves. When a business closes its account it can ask us to delete its data; we then do so, apart from backups, which roll off on their own schedule, and anything we are required to retain.

Seeing, correcting or deleting your information

You can see and correct most of your own details in the app under My Profile, or by asking the business you work for or buy from. You can ask for your account to be deleted from the app (Settings, Account, Delete my account) or by emailing us. We act on a deletion request within 30 days: your sign-in and personal details are removed, and the records the business is required to keep remain with the business.

Security

Connections to TidyOps are encrypted. Access to each business's data is enforced in the database itself, passwords are never stored in readable form, and two-step sign-in is supported for password sign-ins. No system is perfectly secure; if we become aware of a breach that is likely to cause you serious harm, we will tell you and the regulator as the law requires.

Children

TidyOps is a tool for businesses and their staff. It is not directed at children and we do not knowingly collect information from them.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top. For a significant change we will also tell the businesses that use TidyOps.

Contact and complaints

Questions, requests and complaints about privacy go to subscriptions@zeroone.com.au. We will reply within 30 days. If you are not satisfied with our answer you can contact the Office of the Australian Information Commissioner at oaic.gov.au.