Privacy policy
Pumpwarden makes a controller for diesel fire pumps and an app to run it from your phone. This page says what we collect, why, who handles it for us, and how to get it changed or deleted. It is written to be read.
What we collect
| What | Why |
|---|---|
| Account: your email address. If you sign in with Google, your name as well. | To sign you in and show other people who they have shared a pump with. |
| Your pump: the name you give it, the area label, notes, and the map pin you place. We do not track location: the controller has no GPS. | To show your pump and its map location. People you give view-only access see only an area about two kilometres across. |
| What the controller reports: state (running, stopped, faulted), fuel, water level, battery, oil pressure and other inputs, signal strength, settings, and when it last reported. | To show status and send alerts. Status history is kept for 90 days, then deleted. The latest status is kept while the pump is on your account. |
| Commands and settings changes: who started, stopped or changed a setting, and when. | An audit trail so everyone with access can see what happened. |
| Sharing: the email addresses you invite and the role you give them. | To give those people access. |
| Notifications: a push address for each browser or phone you turn notifications on for, your four notification switches, and a log of notifications sent. | To deliver alerts. The log is deleted after 90 days. |
| Website forms: what you type into the waitlist or installer form (email, and any name, business, phone, region or notes you choose to add). | To contact you about Pumpwarden. |
| On your device: your sign-in session, a saved copy of the app so it opens without signal, and map areas you have looked at. | So the app works on a poor connection. You can clear them in your browser at any time. |
We do not collect your home address, payment details or contacts. We do not sell your information and we do not use it for advertising. We do not run advertising or tracking cookies.
If you sign in with Google, Google tells us your name and email address, and nothing else.
Who handles it for us
| Service | Does what | Where |
|---|---|---|
| Supabase | Database and sign-in for the app and website forms | Sydney, Australia |
| Cloudflare | Hosts the website and app, DNS, and the map data. May measure traffic and page speed in aggregate, without cookies | Global network |
| Particle | Connects the controller to the internet and carries its messages | United States and other regions |
| Resend | Sends sign-in emails and, if enabled, our internal enquiry notifications | United States |
| Sign in with Google, if you choose it. Also delivers push notifications to Android and Chrome | Global | |
| Apple, Mozilla and other browser makers | Deliver push notifications to their browsers and devices | Global |
| GitHub | Holds our encrypted database backups for 30 days | United States |
Some of these providers are outside Australia, so your information can be handled overseas. We choose providers that publish their security practices and we give them only what they need to do the job. Notifications show the pump name and a short message, so they pass through your phone maker's notification service.
Who else can see your information
Only people you give access to, and only what their role allows. Owners and operators see the exact pin; viewers see an area. We do not give pump information to brigades, insurers or anyone else unless you ask us to. We may disclose information if the law requires it.
How long we keep it
- Status history and notification logs: 90 days.
- Account, pump details and settings: while your account exists.
- Database backups: encrypted, kept for 30 days, so deleted information can remain in a backup for up to 30 days.
- Website form entries: until you ask us to delete them, or two years after the last contact if that comes first.
Your choices
You can turn notifications off in the app (Access, Notifications on this phone), remove people you have shared a pump with, and change your pump's name and pin. You can ask us to show you what we hold, correct it, or delete your account and pump data. Email hello@pumpwarden.com from the address on your account and we will reply within 30 days.
Security
Data is encrypted in transit and the database enforces who can read each pump's information. Backups are encrypted. No internet service is perfectly secure. If a breach is likely to cause you serious harm we will tell you and the Office of the Australian Information Commissioner, as the Privacy Act requires.
Complaints
If you are not happy with how we handled something, tell us first at hello@pumpwarden.com. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy we will update the date above. If a change affects what we do with your information, we will email account holders first.