Privacy Policy
This policy explains what personal information Kept collects, why, and what we do — and don't do — with it. It covers both www.keptsoftware.com.au (this website) and jobs.lawnenvyaustralia.com (the app itself).
The short version: the jobs, clients and invoices you enter into the app are encrypted on your device before they ever reach our servers, using a key derived from your own login password. We physically cannot read that data — not to help with support, not if we wanted to, not under any circumstance where we still have the system working as designed. We can see your business name, your login email, and which parts of the app get used. We can't see your clients' details, your pricing, or anything you've typed into a job, quote or invoice.
1. Who we are
Kept is operated by Lawn Envy Australia, a Brisbane-based lawn and garden care business. This app is software we built for our own operations and now make available to other lawn and garden businesses (and, under sibling landing pages, other trades). For anything in this policy, contact us via the form on this site or at the email address you've been given directly.
2. What we collect
When you sign up or use the app:
- Your login email and password (the password itself is never stored anywhere — only a cryptographic check that a login attempt used the right one)
- Your business name and phone/address if you provide them at setup — these are stored in plain text, since we need them to run the admin side of the service
- Which features of the app you open (e.g. "Invoices", "Schedule") and when — used only to understand which parts of the product actually get used, never tied to what's inside those features
What you enter into the app — jobs, client names and contact details, quotes, invoices, expenses, staff records, documents — is encrypted on your device before it's sent anywhere. We store only the resulting ciphertext. We cannot decrypt it, read it, search it, or hand it over in a readable form, including in response to a support request or a legal request for data we don't have the technical ability to produce in plain text.
If you contact us — through the "get in touch" form on this site, by phone, or by email — we keep what you tell us (name, email, business name, phone if given, and the content of your message) so we can follow up.
3. What we don't do
- We don't use third-party analytics, advertising trackers, or marketing pixels on this website or in the app.
- We don't sell, rent, or share your information with third parties for their own marketing purposes.
- We don't read, scan, or process the encrypted content of your business data — technically, we can't.
4. Where your data is stored
The app is hosted on Vercel and Supabase, both of which store data in accordance with their own security and privacy practices. If you connect your own email or SMS sending accounts (e.g. a Gmail app password, a ClickSend account) to send invoices or quotes, those credentials and any messages sent through them are handled by your own account with that provider, under their terms — not ours.
5. Other businesses using the app
Every business's data is fully isolated from every other business using the app, enforced both at the database level and by the encryption described above. No business using Kept can see another business's jobs, clients, invoices or numbers.
6. How long we keep data
- Live demo accounts (created via the "try the demo" link) are automatically and permanently deleted 24 hours after creation.
- Real business accounts are kept for as long as the account exists. If a business account is deleted, its data — including the encrypted content — is permanently removed and cannot be recovered.
- "Get in touch" enquiries are kept so we can follow up, and can be deleted on request.
7. Your rights
You can ask us to tell you what plain-text information we hold about your business (login email, business name, contact details, feature usage), correct it, or delete your account entirely. Because the content you enter into the app is encrypted with a key only you hold, we cannot selectively access or redact individual pieces of it on request — account deletion removes everything, encrypted or not.
If you're in Australia, you also have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you have a concern we haven't resolved, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
8. Changes to this policy
If we make a material change to how we handle personal information, we'll update the date at the top of this page. Continued use of the app after a change means you accept the updated policy.
9. Contact
Questions about this policy or your data — reach out via the "get in touch" form on the main site, or directly to whoever set up your account.