Privacy policy

Rondix · 9 Nov 2026

Rondix is an app organizations' staff use to carry out inspections and audits, send reports and follow up corrective actions. Every account is created by the site's administrator — there is no public sign-up.

What we collect

  • Accounts: username, display name, password (stored as a one-way hash that can't be read back), role, chosen language, e-mail (used only after its owner confirms it) and two-step sign-in settings if turned on.
  • Inspections: results, notes, photos the inspector takes, the names and signatures entered on a report, and updates on corrective actions.
  • The report recipients' e-mail addresses that the site's administrator sets. A recipient gets reports only after confirming from the link we send.
  • Cookies for signing in and language only. No ads and no tracking.

Camera

  • The app only uses the camera when you tap to take a photo or scan a QR label.

Location (GPS)

  • Off by default. The app uses location only for checklists the site's administrator turns it on for, and your phone asks your permission first.
  • When on, location is recorded only during an inspection: at the start, at each point checked and when the report is sent. It is never tracked continuously or outside an inspection.
  • It is kept in that report to confirm the inspection took place on site, visible only to the site's accounts, and deleted together with the report.

Training

  • Quiz results, and the name and signature you give to acknowledge a lesson, are kept. Only you and the site's admins and viewers can see them.
  • Videos in lessons play from YouTube in privacy-enhanced mode (youtube-nocookie.com). When you play one, YouTube receives viewing data under Google's policy.

Who can see the data

  • Each site's data is visible only to that site's accounts, according to their role (inspector, admin, viewer).
  • The platform operator manages sites and accounts but cannot see sites' inspection results or reports.
  • Data is never sold or shared. Reports are e-mailed only to the recipients the site chooses.

Where it is kept, and for how long

  • Data is stored on Cloudflare servers and sent over encrypted connections (HTTPS). E-mails are sent through Gmail.
  • Reports are kept for 2 years, then deleted automatically (Enterprise plans can agree a longer time). A checklist's change history is kept for 12 months.

Deleting your data or account

  • Ask your site's administrator, who can delete accounts and reports in the app.
  • An organization that stops using the service can ask us by e-mail (below) to delete all of its site's data. Unless asked, it is kept so the site can come back.

Contact: safetyhub.reports@gmail.com

ภาษาไทย