EFFECTIVE 29 OCTOBER 2026

Your information
in CrateRWD.

CrateRWD is operated by Brenton James Haddin, sole trader trading as CrateRWD, ABN 30 671 785 400. Contact admin@craterwd.com for privacy enquiries, access, corrections, complaints or deletion.

Information you choose to save

We process your verified sign-in identity, email, memberships and workspace records. You may add a display name, bio and profile photo. The profile does not change your sign-in identity; photos are resized and re-encoded before upload. Previous profile photos may remain in private recovery storage while only the current photo is shown.

Business records may contain inventory and barcode identifiers, customer names and locations, hires/returns, movements, kits, reservations, packing counts, condition observations, private photos, issue history, work-order assignments, versioned inspection templates and answers, stock holds, reviews, documents, signatures, imports and support messages. Owners and members see the records their roles permit. Home records may contain rooms and storage, item descriptions and photos, receipts, budgets, expenses, lending and reminders.

Device-local information

Native capture drafts/photos remain in private device storage until you confirm a cloud save. Full Home plan geometry, original floor-plan files and interrupted reviewed imports currently remain on the iPhone, separated by account and Home. These are not fully synchronised across devices. Device backups may include local records. Camera access is used for requested photos/scans; the system photo picker shares selected images. Scanning a Home storage label requires access to that Home; printed labels and exports create copies outside the service.

Interrupted Business action references are stored privately on the phone or in the web tab’s session storage, scoped to account/business. Retry is user-initiated; this is not automatic offline stock synchronisation. Prepared image data can remain in memory while an upload form is open.

Optional AI sharing

OpenAI receives selected images and request text only when you choose the relevant AI feature and confirm sharing. A plan read sends the selected reading area as a resized/re-encoded image, not the full PDF. A refinement also sends the included room names, outline references and your corrected coordinates. It returns a separate suggestion for review. Original source files remain device-local unless you use another explicit upload/share action.

Item identification sends only the selected photo(s) for the request. Help chat sends your messages and recent conversation context. Your inventory, profile and document library are not automatically attached to chat. Suggestions, request status and usage may be stored privately for review, exact retries and spending controls. AI calls disable API response storage; this does not promise zero provider retention. Suggestions can be wrong, and manual entry remains available.

Why we use the information

We use records to deliver requested features, restrict workspace access, manage subscriptions when offered, answer support requests, handle imports/deletion and maintain security and record history. Home/Business conversations escalated for human help can be read by CrateRWD support. A recorded support request does not guarantee someone is online or that an external notification was sent.

The public website does not run advertising trackers or third-party analytics. Its savings calculator runs in your browser and does not send the amount you enter to CrateRWD. Signed-in services use authentication cookies/tokens and necessary local storage. We do not sell your personal information or request access to your contacts or precise location.

Service providers and overseas processing

Cloudflare hosts the service, database and private files. WorkOS and your chosen identity provider handle sign-in. OpenAI processes optional AI requests. Apple processes App Store purchases when offered; Stripe processes website billing and subscription management. These providers may process information outside Australia, including in the United States and other countries where their services operate. Contact us for current information about a particular processing arrangement. We do not claim Australian-only hosting or end-to-end encryption.

Native credentials are held in the device Keychain. Server provider sessions are encrypted, and account/workspace checks restrict access to private records. Those measures do not remove the need to secure your own devices or review who you invite.

Payments and subscription records

When purchases open, the payment provider handles card/payment details. CrateRWD retains the identifiers and subscription status required to verify access, renewal/cancellation, expiry, transactions and support. Apple purchases are linked to their original workspace through opaque references; restoring does not transfer them to another account. We do not receive your Apple password or full card number. Minimal billing/security references may remain after deletion to prevent reassignment or meet applicable obligations.

Retention, access and deletion

Records remain while needed for your account, the service functions you request, support, security, shared-workspace history and applicable recordkeeping obligations. Old versions, movement history, provider records and private recovery copies may have different retention needs. Contact us to access or correct information you cannot change in the app.

Request account deletion through the app or your verified account email. Requests are reviewed; submitting one is not instant erasure. Shared-business ownership and records may need to be resolved first. We may retain limited information where required for legal, billing, fraud prevention or security purposes and explain applicable restrictions. Download original files separately from record exports. Deleting the app does not erase cloud records or cancel a subscription, and we cannot remove copies you have shared with others.

Migration assistance and support

Contact us first with your source system and approximate record counts. Agree a private transfer method before sharing customer exports. Any assisted work will use the records needed for the agreed scope; do not send passwords, sign-in codes, card details or unrelated identity documents.

Complaints and updates

Email your concern and the outcome you seek. We aim to respond within 30 days and may need to verify your identity without asking for your password. You may also seek guidance from the privacy regulator relevant to you. Material updates will be dated here and communicated through appropriate service channels where needed.