Privacy Policy

1. Who we are

DEFECTED is a product of Tunnel Tracker Pty Ltd. The product site and the app are at defected.app; crews on the original version of the app use it at tunneltracker.io. For privacy enquiries, contact: hello@defected.app.

2. The DEFECTED mobile app

The DEFECTED iOS app is issued to tunnel crews by the contractor running a project. Accounts are created and approved by that contractor's administrator. When you use the app we hold:

• Your account: name, work email, company and role on the project. Used to sign you in and to attribute work.
• The work you record: defects, ring and clock positions, packer counts, notes, chemical kit logs, and the photographs you take as evidence of a repair.
• An activity record: who changed what and when, which is the point of the system: the defect history is contractual evidence of a rectified tunnel.

The app does not collect your location. Ring numbers describe a position inside the tunnel drive and come from what you enter, not from GPS. The app never requests location permission.

The app contains no advertising and no third-party tracking. Nothing you do is profiled, no data is sold, and nothing is shared with data brokers or used to follow you across other apps or websites.

We do collect diagnostics about the app itself, so we can tell when it is failing for a crew instead of waiting to be told. Each device reports, roughly every fifteen minutes:

• how many records are waiting to be sent, and how long the oldest has waited
• how many are failing to send, and the most recent error message
• the app version and platform
• an install identifier, generated on the device and deleted when the app is removed
• the account signed in on the device and the project it has open
• anonymous page performance timings (how quickly screens load and respond, and which page was measured)

This is about the software, not about your behaviour: it records no taps and nothing about what you looked at. The account and project are there so we know whose phone needs help. Full error details including stack traces stay on your device and are never transmitted. Performance timings are processed by Vercel, our hosting provider, on our behalf.

Photographs are stored so they can be attached to the defect record and are cached on the device so a crew can review evidence underground with no signal. The camera and photo library are used only when you choose to attach a photo.

3. Deleting your app account

You can delete your account from inside the app at any time: open Profile, scroll to Account, and choose Delete my account. Your login, name, email, company and project memberships are deleted immediately and you can no longer sign in.

The defect records, kit logs and reports you produced are retained with your name removed. They are the client's construction records of what was repaired in their tunnel, held for the life of the asset under the project contract, and they are not personal data about you. This means no single person can erase the quality record of a completed repair. If you believe a specific record contains personal information that should be removed, contact us at the address below.

4. What the website collects

When you submit the contact form on this site, we collect:

• Your name
• Your company name
• Your tunnel project or location
• Your email address
• Your message

We also collect standard server logs (IP address, browser type, pages visited) for security and performance monitoring.

5. Why we collect it

Contact form data is used solely to respond to your enquiry about DEFECTED. We do not use it for marketing unless you explicitly opt in.

Server logs are used to maintain site security and diagnose technical issues.

6. How we store and protect it

Contact form submissions are stored in our secure database (Supabase, hosted on AWS in the Asia-Pacific region). Access is restricted to authorised Tunnel Tracker staff.

7. Who we share it with

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with service providers who help us operate the site (hosting, email delivery), under confidentiality agreements.

8. How long we keep it

Contact form submissions are retained for up to 2 years unless you request earlier deletion.

9. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing hello@defected.app.

10. Cookies

This site sets no advertising or tracking cookies. Your sign-in is kept in your browser's storage on the device, not in a cookie. The signed-in desk view sets one cookie to remember whether its side menu is open.

The public pages of this website (the home page, news, resources and guides, not the app or anything you see once signed in) count visits with Vercel Web Analytics, run by Vercel, our hosting provider, on our behalf. It sets no cookies and stores nothing on your device. We see totals: which page was visited, the site or campaign link that sent you, and your country, browser and type of device. Visitors are not identified, and a visit is not linked to your visits on other days or to other websites. The iOS app does not use it.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the most recent revision.