Privacy Policy

1. Summary

This policy explains what personal information Haulie collects, why we collect it, who we share it with, how long we keep it, and how you can access and correct it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

In short: we use your information to run the app, connect businesses and workers, keep people safe and prevent fraud. We don't sell your information. We don't use advertising or tracking tools.

Some information is required to use the app: name, email address and city; a mobile number (workers) or an ABN (businesses); and, at check-in, a selfie and your location (or a reason when there is no GPS). Without it, you can't create an account or record your attendance.

This policy applies to workers, businesses and anyone who uses the app, from 8 November 2026.

2. Who we are

The app is operated by 69.336.874 JONATHAN EDUARDO JUNQUEIRA, a sole trader registered in Brazil (CNPJ 69.336.874/0001-10), with its registered address at Rua Principal, 413, Andar 2, Centro, Penha, Santa Catarina, 88385-000, Brazil.

We are based in Brazil and run the app from there. Your information is stored in Sydney, Australia, with Supabase and Amazon Web Services (AWS), in the ap-southeast-2 region.

For questions, requests or complaints about your personal information, contact our privacy officer at suporte@nossofreela.com.

3. Sign-up and profile information

• Everyone: name, email address, password, type of account, city, and the version of the Terms you accepted, with the date and time. Your password is kept by our login service in a form that can't be reversed (a hash): not even we can read it.
• If you continue with Apple or Google: the name and email address they share with us (Apple may give a private relay address instead of your email). With Apple, we also keep a token so we can remove the app's access to your Apple account when you delete your account.
• Workers: mobile number and, if you add them, a photo, suburb, headline, a short bio, years of experience and your roles (Driver, Offsider).
• Businesses: business name, ABN, type of business, logo, description, phone number and address.

Addresses include the street, number, unit, postcode, notes to help find the place, and its position on the map (latitude and longitude). We don't verify phone numbers by SMS.

4. Location

• Worker's work area: a point (an address or your location) and a radius from 1 to 100 km. It is used for alerts about jobs near you and to show distances. Only you see this point.
• If you have allowed location access and haven't chosen an address as your point, the app reads your location when you open Home and updates the point when you have moved 500 metres or more.
• Check-in and check-out: we keep the latitude, longitude, GPS accuracy, distance to the job address, whether you were within range, the time and, when there is one, the reason for a record without location and whether it was made offline.
• Address search: the text you type and, to sort the results, the point of your work area.

The app only uses your location while it is open. There is no tracking in the background.

5. Photos and verification

• Profile photo and logo.
• Check-in selfie.
• Identity verification (optional, for workers): a photo of your Australian driver licence or passport and a selfie.
• The result of each verification: how many faces were found, the similarity percentage, whether the name matched and the result. We don't keep the text read from your document, such as the document number.

See "Sensitive information: biometrics" for how we handle your face.

6. Subscription information

• Businesses that subscribe: the store (App Store or Google Play), the plan, the status, the renewal and expiry dates, the transaction identifiers that Apple or Google send us, and the notifications they send us about the subscription.

We never receive your card or bank details: Apple or Google handle the payment. We don't process or record payments between businesses and workers.

7. How you use the app

• Jobs posted, applications and their messages, approvals, hires, no-shows and cancellations.
• Direct jobs: who invited whom, when, the deadline and the answer, and the businesses you chose not to receive invites from.
• Chat messages, reviews and comments.
• Notifications you receive. They may include names, part of a message, the check-in distance and the reason for a record without location.
• An event log: who did what, and when, in each job.
• Reputation counters: completed jobs, no-shows, cancellations and ratings.
• Email addresses that bounced or marked our emails as spam, so we don't send to them again.
• Access logs: IP address, date and time of each access, and the device or browser used to sign in. They are kept by our login service and our server.
• App errors: when something goes wrong, the app sends our server the technical error message, the part of the code where it happened, the screen, the app version and the system (Android or iPhone), linked to your account when you are signed in. We use them only to find and fix faults. Before storing them, the server removes passwords, access codes, email addresses and long numbers. We don't use a third-party service for this.
• Feedback: what you write in "Send feedback", with the type (suggestion, problem or praise), the screen you sent it from, the app version and the system, linked to your account. Only our team reads it.
• Support: your conversation with our team in the app (in Support) and what you write to suporte@nossofreela.com, linked to your account. The person helping you sees your name, type of account, email address, phone number and city, to find your account and reply. Only you and our team read the conversation.
• Reports: who reported, who was reported, where (profile, chat or review), the reason, what you wrote and our team's review. When a message or review is reported, we keep a copy of it.
• Blocks: who you blocked and when.

We don't collect your date of birth, your phone contacts or your location in the background.

8. Why we use your information

We use your information to:

• create and run your account, confirm your email address, record your acceptance of the Terms and let you sign in;
• check that an ABN is valid and not already in use, and prevent duplicate or fake accounts;
• show profiles, send job alerts by role and area, and work out distances;
• run applications, hiring, standby lists, direct jobs, the chat and notifications;
• record check-in and check-out with location and a selfie, to show attendance and help resolve disputes;
• verify your identity for the Verified badge, if you choose to;
• show reviews and reliability, to keep the platform safe and trustworthy;
• manage business subscriptions with Apple and Google;
• handle reports and blocks, protect people and enforce the Terms;
• answer support requests and feedback, and find and fix errors;
• send sign-up and password codes by email, and stop sending to addresses that bounce;
• keep records to meet our legal obligations and to deal with disputes and legal claims;
• respond to lawful requests from authorities.

We only use or disclose your information for the purpose we collected it for, for a related purpose you would reasonably expect, with your consent, or where the law allows or requires it.

We don't use your information for direct marketing.

9. Sensitive information: biometrics

Identity verification is optional and only happens if you choose to send the photos. Without it, you use the app as normal; you just don't get the Verified badge.

Your face in these photos is biometric information, which the Privacy Act treats as sensitive information. We only collect it with your consent, which you give by ticking the box on the verification screen before sending the photos. We record the date and the version of your consent.

How it works: our server sends the photo of your document and your selfie to Amazon Rekognition, in Sydney (ap-southeast-2). It finds the faces, compares the selfie with the photo on the document and reads the text on the document. Our server compares the name read with the name on your profile. The text read is not stored.

What we keep: how many faces were found, the similarity percentage, whether the name matched and the result. We don't create or keep a template of your face.

The photos are kept in a private area and deleted from our storage as soon as the check finishes. Photos from a submission that isn't completed are deleted after 1 day.

You can withdraw your consent at any time. As the photos are deleted after each check, nothing more is processed unless you send new photos. If you also want your badge removed, ask us at suporte@nossofreela.com.

The check-in selfie doesn't go through face recognition: it is only shown to the business for that job.

10. Automated decisions

Some decisions are made by the app automatically, without a person:

• the result of the identity verification (Verified badge approved or refused);
• which workers get a job alert (role, work area and schedule);
• a worker's reliability, worked out from completed jobs, no-shows and cancellations;
• whether a check-in is accepted, based on the time and the distance to the job address.

You can ask for a person to review any of these decisions at suporte@nossofreela.com.

11. Who sees your information in the app

• Anyone with an account: name, photo, city and suburb, roles, headline and bio, experience, ratings, job counters and the Verified badge. For businesses: name, type, logo and description. And public reviews, with their comments.
• Anyone with the link, even without an account: profile photos and logos, which are kept in a public file area.
• Any worker with an account, in any city: the full address and map pin of published jobs that haven't started, open or already filled. People who applied or were hired can still see it afterwards. If the job has no address of its own, the business address is shown. In a direct job, only the invited worker sees the address, while the invite is open.
• The business that posted a job: the message in your application.
• A business that invited you: whether you accepted, declined or didn't answer. If you chose not to receive its invites or blocked it, it only sees that you aren't available for invites. It doesn't see your other jobs.
• The other side of a confirmed or completed hire: your phone number, which stays visible after the job (unless one side blocks the other), and the chat.
• The business, for its jobs: the check-in selfie, the time, the location recorded at check-in and check-out (latitude and longitude, with the GPS accuracy), the distance to the job address, whether the record was made offline and the reason for a record without location.
• Only you: your ABN, your work area, your notifications, your verification submissions, the businesses you don't receive invites from, who you blocked and your subscription status.
• Reports: only our team. The person reported doesn't know who reported them. People you block aren't notified, but they may notice that the chat has closed.
• Our team: when needed for support, safety, verification reviews and to comply with the law.

At sign-up, the app tells anyone, even before signing in, whether an email address or ABN is already in use, whether an email address has a sign-up waiting for its code, and whether it is blocked because of delivery errors. This prevents duplicate accounts.

12. Who we share it with

We don't sell your information. We share only what is needed with service providers that handle it on our behalf:

• Supabase: database, login, file storage and real-time messages, hosted in Sydney (ap-southeast-2).
• Amazon Web Services (AWS), in Sydney (ap-southeast-2): our server, address search, map positions and maps (Amazon Location Service), and photo verification (Amazon Rekognition).
• Resend: sign-up and password emails. It receives your email address and the message with the code or link, and sends it from Tokyo, Japan.
• Expo: push notifications, delivered through Apple and Google, and app updates, which the app downloads from Expo's servers.
• Apple and Google: sign-in with Apple or Google, if you choose it, and business subscriptions through the App Store and Google Play.
• Google Workspace: our email, including the messages you send to Support.
• unpkg, a public service that delivers software files: the map a business uses to place a pin loads its map library from there. It receives only what any website gets, such as your IP address and the type of device.

Other cases:

• Apple Maps, Google Maps or Waze: only if you tap "Directions". The maps app receives the destination and follows its own privacy policy.
• Authorities: when the law or a court order requires it.
• Sale or restructure of our business: your information may pass to whoever takes over the service, who must follow this policy.

13. Overseas disclosure

Your information is stored in Sydney, Australia. Some of it is accessed or handled overseas:

• Brazil: we are based in Brazil, and our team accesses information from there to run the app and provide support.
• Japan: Resend sends our sign-up and password emails from Tokyo.
• United States and other countries: Expo, Apple and Google handle push notifications, sign-in and store subscriptions; Google Workspace handles our email; unpkg delivers the map library; and Supabase, AWS and Resend may access information from other countries to support and maintain their services.

Before disclosing information overseas, we take reasonable steps to make sure these providers protect it in line with the APPs, for example through their contracts and data processing terms. We remain responsible for how they handle it, as the Privacy Act requires.

14. How long we keep your information

While your account exists, we keep the information needed to provide the service. Some information has its own time limit:

• Sign-up not confirmed: deleted after 1 hour, when the code expires.
• Sign-up with Apple or Google not completed: deleted after 7 days.
• Check-in selfie: deleted after 30 days. The location of the check-in and check-out stays in the history of the hire.
• Verification photos: deleted as soon as the check finishes, or after 1 day if the submission isn't completed.
• Chat messages: deleted after 3 months. A reported message is kept with the report. The notification of a new message includes up to 90 characters of it, which stay in the notifications of the person who received it.
• Recent address searches: the last 5 stay only on your phone.
• App errors: deleted after 30 days.
• Push notification delivery records: deleted after 1 day.
• Feedback: kept for 12 months, then deleted.
• Reports, with the copy of the message or review reported: deleted 6 months after our review.
• Support conversations in the app: deleted 1 year after the last message, or earlier if you delete your account.
• Blocks: until you unblock or delete your account.
• Access logs: our server keeps them for 90 days for security, and its other technical logs for 30 days. Our login service keeps its own for a limited time set by that service.
• Database backups: kept for 30 days, then deleted automatically. Information that was deleted or de-identified can stay in a backup until then.

Some information is kept after your account is deleted, for as long as we need it to meet our legal obligations and to deal with disputes and legal claims: hires, check-ins and check-outs, application messages, addresses of past jobs, the event log, verification results, subscription records, notifications sent to other people, and reviews, including those deleted by their author, which are no longer shown but are kept. When we no longer need it, we delete or de-identify it.

The list of email addresses with delivery errors is kept to avoid sending to them again.

15. Deleting your account

You delete your account in the app, in your profile. You can't delete it while you have a confirmed job ahead: finish or cancel it first.

Deleting your account doesn't cancel a business subscription. Cancel it in your Apple or Google account settings.

What we delete: phone number, roles, work area, notifications you received, business address, job templates, the list of businesses you don't receive invites from, blocks between you and other people, your support conversations, and your profile photo and logo files. Open invites to you are closed.

What we de-identify: your name becomes "Deleted account". Your photo, logo, headline, bio, description, ABN and Verified badge are removed from your profile. Your email address is replaced and your login is blocked. A business's future jobs are cancelled. If you signed in with Apple or Google, that link is removed from your account, and the app's access to your Apple account is revoked.

What stays: the history described in "How long we keep your information", linked to "Deleted account". The reviews you wrote stay published, without your name. Notifications sent to other people that mention your name stay with them. App errors, feedback and reports are kept until their own time limits (30 days, 12 months, and 6 months after our review).

Our login service keeps the name and type of account given at sign-up, and the access logs, which may include your original email address.

After your account is deleted, the same email address or ABN can be used for a new account.

16. Access, correction and complaints

You can ask to access the personal information we hold about you, and ask us to correct it if it is wrong, out of date, incomplete, irrelevant or misleading.

You can see and correct much of it yourself in the app, in your profile. Your name and business name are changed by Support. You can also delete your account in the app.

For other requests, email suporte@nossofreela.com, preferably from the email address of your account. If you no longer have access to it, write from another address: we will confirm it is you in another way.

Requests are free. We reply within 30 days. If we can't give you access or make a correction, we will tell you why in writing and how to complain.

You can't use the app anonymously or under a made-up name, because businesses and workers need to know who they are dealing with. You can ask us general questions without identifying yourself.

If you have a privacy complaint, contact us first at suporte@nossofreela.com. We will reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992.

17. Security

We use technical and organisational measures to protect your information:

• encrypted connections (HTTPS);
• access rules in the database, so each person only sees what they are allowed to see;
• passwords kept in a form that can't be reversed (a hash), by our login service;
• verification photos and check-in selfies in private file areas;
• keys for verification, address search and our other services kept only on our server (the app only receives a key limited to showing map images).

No system is completely secure. If there is a data breach that is likely to result in serious harm, we will notify you and the OAIC, as the Notifiable Data Breaches scheme requires.

Protect your password and your phone. The app keeps you signed in on your phone: anyone who unlocks your phone can open your account.

18. Under 18s

The app is only for people aged 18 or older. We don't knowingly collect information about children.

The app doesn't ask for a date of birth. If we learn that an account belongs to someone under 18, we will close it and delete or de-identify the personal information, as when an account is deleted, except what the law requires us to keep. If you know of a case, tell us at suporte@nossofreela.com.

19. Cookies and data on your phone

The app doesn't use cookies. It keeps on your phone:

• your session, so you don't need to sign in every time, until you sign out;
• check-ins made offline (location and selfie), until they are sent;
• the last 5 addresses you chose in the search.

Phone permissions: camera and photos (profile photo, check-in selfie and verification), location while you use the app (check-in, check-out and work area) and notifications. You can turn permissions off in your phone settings, but some features will stop working.

We don't use advertising, usage analytics or third-party tracking tools.

Push notifications: the app sends notifications about jobs, hires and new chat messages. For this, we keep your phone's notification token, and the notification goes through Expo and through Apple or Google. You can turn notifications off in your phone settings; they still appear inside the app.

20. Emails

We only send emails with the code to confirm your sign-up and the code to change your password. We don't send marketing emails.

21. Changes to this policy

We may update this policy. The date of the current version is shown at the top. If a change is important, we will tell you in the app before it applies.

Read the Terms of Use

22. Contact

Questions, requests or complaints about your personal information: suporte@nossofreela.com.

69.336.874 JONATHAN EDUARDO JUNQUEIRA, a sole trader registered in Brazil (CNPJ 69.336.874/0001-10), with its registered address at Rua Principal, 413, Andar 2, Centro, Penha, Santa Catarina, 88385-000, Brazil.