A wash compliance app by
Elora Solutions Pty Ltd

Privacy Policy

MICK mobile app · Version 1.0 · Effective 16 August 2026

The short version

MICK records truck washes so your employer can prove they happened. That is the whole point of the app, and everything below follows from it.
Your employer can see your washes, your photos, your rinse videos, the time, and where you were standing when you took them.
We only read your location while you are recording a wash. Never in the background.
We use AI to spot patterns in wash records, including patterns in your own washing. A person, not the software, decides what happens next.
We do not sell your information, we do not advertise to you, and we do not track you across other apps or websites.

This policy explains what personal information the MICK app collects, why we collect it, who we share it with, where it goes, and what you can do about it. It applies to the MICK mobile app only. The Elora Compliance Portal and the Elora marketplace are covered separately.

1. Who we are

MICK is operated by Elora Solutions Pty Ltd (ABN 60 621 200 726), referred to below as "Elora", "we" or "us". We are an Australian company bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Elora Solutions Pty Ltd

ABN 60 621 200 726 · ACN 621 200 726

7/17 Rothcote Court, Burleigh Heads QLD 4220

Email: info@elora.com.au · Phone: 02 6685 7513

2. Who this policy is for

MICK is a workplace tool. You did not choose it, your employer did. It is given to drivers and managers by the transport, concrete or quarry business they work for, which is a customer of Elora.

That means two organisations handle your information, for different reasons:

Your employer decides that you use MICK, decides which trucks and sites you are assigned to, and owns the wash records you create. They use them as compliance evidence for their own customers and regulators.
Elora builds and runs the app, stores the records on your employer's behalf, and uses a limited amount of information to keep the service working, secure and improving.

If you want to know why your employer asked you to use MICK, or what they do with a wash record after it is filed, ask them. If you want to know what Elora does with it, this policy is the answer.

3. What we collect

We only collect what the app needs to record a wash and prove it happened. We do not collect data for advertising, and we do not track you across other apps or websites.

About you and your account

Information	Where it comes from	Why we have it
Your name	You type your first and last name the first time you sign in	To identify you on your account and on every wash record you create
Email address	Set up for you by your employer or by Elora	This is your sign-in, and how we send you password resets and alerts
Mobile number	You type it in at first sign-in. Australian mobile numbers only	We text you a six digit code to confirm the number belongs to you. After that it is used for reminders and, where your employer has it switched on, wash nudges
Your role and assignments	Set by your employer or by Elora	Decides which trucks and sites you can wash against, and whether you see manager screens
Profile photo	Optional, if you or your employer adds one	Shown on your account
Account ID	Generated by the system	Links your washes to your profile

When you record a wash

Information	Where it comes from	Why we have it
Photos	The camera, as you capture before and after shots of each area	This is the evidence itself
A ten second rinse video, with sound	The camera and microphone	To show the rinse actually happened. The clip records audio because it is a video. We do not listen to it for any other purpose and we do not record audio at any other time
Precise location	Your device's GPS	Stamped on every photo and on the wash itself, to prove where the wash took place. Read only while you are recording a wash, and never in the background
Start time, end time and duration	Recorded by the app	To show the wash took a realistic length of time, and to flag a wash that ran over your site's limit
A fleet number photo	The camera, only when you wash a truck that is not on your assigned list	To prove which truck you washed when the app cannot confirm it from your assignments
Device clock check	Compared automatically against our servers	To flag a wash where the device clock does not match server time. This protects honest drivers from a record being disputed
App version	Recorded with the wash	So we can tell whether a problem with a record came from an old version of the app

Induction and certification

Information	Where it comes from	Why we have it
Knowledge check answers	You, during the induction	To confirm you have understood the training. No score is kept
PPE confirmations	You tick what you are wearing	Part of the record that you were inducted safely
Your signature	You draw it on screen	To sign off the induction
Certificate, issue date and expiry	Generated when you complete the induction	Your certificate has to be current before you can record a wash
Manager unlocks	Recorded when a manager overrides a lock on your account	An audit trail of who unlocked what, and why. These records are never deleted

Records your manager creates about you

This is the part drivers are most often surprised by, so it is set out plainly. Some records in MICK are not made by you. They are made about you.

Information	Where it comes from	Why we have it
Spot checks	A manager at your employer	A manager can record a nudge, a warning, or kudos against a truck, with a reason and a written note. Reasons include not washed, poor quality, missed area and overdue
Audit views	Recorded automatically	When a manager opens a truck's wash history, that is logged too. It cuts both ways: it is also a record of who has been looking
Compliance overrides	A manager	A manager can mark a vehicle on track or off track, overriding what the system calculated

Technical information

Information	Where it comes from	Why we have it
Sign in and last seen times	Recorded automatically	To keep your session secure, and to show managers who is currently active
Notification token	Issued by Apple or Google through Expo when you allow notifications	To send you app notifications. It identifies the device, not you personally
IP address and device or browser type	Recorded when an administrator action is taken	Security audit trail, so we can investigate if an account is misused

Two things we deliberately do not receive

Your PIN. Your four digit PIN is scrambled and stored in your phone's secure storage. It is never sent to us and we cannot read it. If you forget it, you sign in again with your email and password.
Your face or fingerprint. If you unlock MICK with Face ID or a fingerprint, that check is done entirely by your phone's operating system. The app is only told yes or no. We never see, receive or store biometric data.

We also do not access your photo library, your contacts, your calendar, your health data, or any advertising identifier. MICK does not contain advertising or analytics trackers.

4. Automated analysis and AI

Elora runs automated analysis over wash records to help fleets stay compliant. You should know what that means for you, because some of it is about you by name.

The system produces a risk score for each vehicle, predicting how likely it is to fall behind on washing. The record holding that score can include the driver's name, email and mobile number, and a short written explanation of the reasoning.
The system also looks for patterns in an individual driver's washing, such as the time of day you usually wash, days you tend to skip, how consistent you are, whether you are improving or declining, and how you respond to reminders.
Where your employer has enabled it, this analysis can trigger an SMS reminder to your mobile.

This analysis is performed for us by Anthropic, an AI provider in the United States. The wash and driver information sent for analysis leaves Australia. See section 7.

No decision about you is made by software alone. The output is a prompt for a person to look at, not a verdict. Any action that affects you, such as a warning or a performance conversation, is a decision made by your employer, by a human, who is accountable for it.

If a pattern or a score recorded about you looks wrong, you can ask for it to be reviewed by a person. Email info@elora.com.au, or raise it with your manager.

5. How we use your information

To let you sign in and use the app.
To record washes, inductions and spot checks, and to show them to your employer as compliance evidence.
To confirm the time and place a wash happened.
To check that your induction certificate is current before you wash.
To send you reminders and alerts, by push notification, email or SMS.
To produce the reports and analysis described in section 4.
To keep the service secure, investigate misuse, and fix problems.
To meet our legal obligations.

We do not sell your personal information. We do not use it for third party advertising. We do not track you across other apps or websites.

6. Who we share it with

Your employer

Your washes, induction certificate, spot checks, evidence photos and videos, times and locations are visible to the organisation you work for, and to Elora staff supporting that organisation. That is the purpose of the app. Managers at your employer can also see when you last signed in and when you were last active.

Service providers

We use a small number of providers to run MICK. They may only handle your information to provide their service to us, and they may not use it for their own purposes.

Provider	What it does	Where
Supabase	Database, file storage and sign in. This is where wash records, photos, videos and signatures are held	Seoul, South Korea
Twilio	Sends the SMS verification code and any SMS reminders	United States
Mailgun	Sends email alerts and reports, which can include your name, the vehicle and evidence from a wash	United States
Expo	Delivers push notifications to your device	United States
Anthropic	The AI analysis described in section 4	United States
Apple and Google	Distribute the app and operate the notification services it relies on	United States and elsewhere

Legal reasons

We may disclose information where the law requires it, where it is needed to investigate a suspected breach of the law, or to protect the rights and safety of people.

7. Sending information overseas

Your information is handled outside Australia. We think you should know exactly where, so it is set out plainly here rather than left to the table above.

Wash records, photos, videos and signatures are stored in Seoul, South Korea, on servers operated by Supabase, our database and file storage provider.

Other information is disclosed to providers in the United States, limited to what each one needs to do its job: your mobile number and the message text for SMS, your email address and the report content for email, a device token for push notifications, and wash and driver information for the AI analysis described in section 4.

Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through our contracts with them.

8. How long we keep it

Wash records and their evidence, including photos and rinse clips, are kept for 24 months, in line with our agreement with your employer.
Induction certificates are kept while they are current and for the period your employer needs to show you were trained.
Audit trails, including records of a manager unlocking an account, are kept indefinitely. That is the point of an audit trail.
Verification codes sent to your phone expire within minutes and are single use.

If you delete your account, see section 9. Your employer may need to keep wash records after your account is gone, because those records belong to them and prove their own compliance.

9. Your choices and your rights

Location. You can turn off location permission for MICK in your device settings. The app needs location at the moment of a wash to prove where it happened, so you will not be able to complete a wash without it.
Camera and microphone. Same position. Without them there is no evidence to record.
Notifications. You can turn push notifications off in your device settings at any time, with no effect on your ability to record a wash.
Face ID and fingerprint. Optional. You can always use your PIN instead.
Access and correction. You can ask us what personal information we hold about you, and ask us to correct it if it is wrong. Email info@elora.com.au. We will respond within 30 days. There is no charge to make a request. Some requests need to go through your employer, because the wash records belong to them, and we will tell you if that is the case.
Delete your account. See how to delete your MICK account.
Ask for a human review of anything the automated analysis in section 4 has recorded about you.

10. Complaints

If you think we have mishandled your personal information, or breached the Australian Privacy Principles, tell us and we will look into it.

Step 1. Contact us. Email info@elora.com.au with "Privacy complaint" in the subject line, or write to Elora Solutions Pty Ltd, 7/17 Rothcote Court, Burleigh Heads QLD 4220.

We will acknowledge your complaint within 5 business days and give you a written response within 30 days. We may need to ask you for more detail, and we may need to speak to your employer.

Step 2. If you are not satisfied, you can take the complaint to the Office of the Australian Information Commissioner.

Online: oaic.gov.au/privacy/privacy-complaints
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001

You will not be disadvantaged by making a complaint.

11. Data breaches

If a data breach happens that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme. We will tell you what happened, what information was involved, and what you should do about it.

12. Security

We take reasonable steps to protect your information:

All traffic between the app and our servers is encrypted in transit.
Your sign in session is stored encrypted on your device.
Your PIN is hashed on your device and never sent to us. Face ID and fingerprint checks are handled entirely by your phone.
Accounts are role based, so what you can see depends on the role your employer gives you.
Administrator actions are logged with the account, time, IP address and device.

No system is perfectly secure. If you think your account has been used without your permission, tell your manager and email info@elora.com.au straight away.

13. Children

MICK is a workplace tool and is not intended for anyone under 16. We do not knowingly collect information from children.

14. Changes to this policy

We may update this policy from time to time. When we do, we will change the version number and the effective date at the top of this page. If a change materially affects how we handle your information, we will tell you in the app before it takes effect.

15. Contact us

Questions about this policy, or about your information, go to info@elora.com.au or 02 6685 7513.