Privacy policy

Last updated: 6 November 2026

Kaslu Work (“we”, “us”) makes the Kaslu Work app and runs kasluwork.com.au. Kaslu Work is the trading name of Arnie Vincent II Nery, a sole trader based in New South Wales, ABN 27 716 261 389. This policy explains what we collect through the website and through the app, why, where it is kept, and who else handles it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Part 1: the website

What we collect

• When you join the waitlist: your email address and, if you give it, your venue name. We also record the page you signed up on, the site that sent you to us, and any campaign tags in the link you followed (for example, that you came from a LinkedIn post).
• When you email us: your email address and whatever you choose to tell us.
• When you visit the site: our hosting provider, Cloudflare, processes your IP address and browser details to deliver the page, keep it secure and check that sign-ups come from a person rather than a bot (Cloudflare Turnstile).

We don’t use analytics or advertising cookies, and we don’t track you across other websites. The site stores two small things in your own browser: whether you’ve closed the announcement bar, and the campaign details above until you close the tab. Neither is sent anywhere unless you join the waitlist.

How we use it

• To send you a welcome email when you join, and to let you know when there’s room for your venues.
• To reply when you write to us, and to understand what venues on the waitlist need.
• To see which pages and links bring people to the waitlist, so we know where to spend our time.
• To stop spam and abuse of the sign-up form.

We don’t sell your information, and we don’t share it with anyone for their own marketing. We won’t add you to other mailing lists without asking.

Who else handles it

We use a small number of service providers, who handle your information only to provide their service to us:

• Resend (United States) keeps the waitlist and sends our emails.
• Cloudflare (United States, with servers worldwide) hosts the website and runs the sign-up form’s bot check.
• Google Workspace (United States) is our email inbox, where sign-up notifications and your emails to us arrive.

This means your information may be stored or processed outside Australia, mainly in the United States. We choose providers with strong security practices, but overseas laws may not protect your information in the same way Australian law does.

How long we keep it

We keep your waitlist details until you unsubscribe, ask us to delete them, or we close the waitlist. After that we delete them, except where we need to keep a record of an unsubscribe so we don’t email you again.

Keeping it secure

Only the Kaslu Work team can see the waitlist and our inbox, and those accounts are password-protected. Information is sent over encrypted connections. If a data breach is likely to cause you serious harm, we’ll tell you and the Office of the Australian Information Commissioner as the law requires.

Your choices

• Unsubscribe at any time: reply “unsubscribe” to any email from us, or use your email app’s unsubscribe button.
• See, correct or delete what we hold about you: email vinny@kasluwork.com.au. We’ll reply within 30 days and won’t charge you.
• Stay anonymous: you can browse the site without telling us who you are. We need an email address to put you on the waitlist.

Part 2: the app

Who decides

A venue (a café, restaurant, pub or bar) uses Kaslu Work to roster its staff and record their hours. The venue employs you and decides what goes into the app about you. We hold and process that information for the venue, to run the app. If you work at a venue that uses Kaslu Work, the venue is the first place to ask about your records. You can also ask us, and we’ll help.

What the app collects

• Your account: your name, the name you go by, your email address and, if you or your manager adds them, your phone number and an emergency contact. Managers and owners also have a sign-in password.
• Your work: the venues and sections you work in, your shifts, the days you say you can or can’t work, your leave requests, shift swaps and offers you make or accept, questions you ask about a shift and the answers you get, and any closing checklist you tick at the end of a shift.
• Your pay settings: your base hourly rate and whether you’re casual, part-time or full-time, so the roster can be costed against the award. We don’t collect your tax file number, bank details or super details.
• Your cards: certificates your venue records, such as an RSA, RCG, food safety or first aid card, with the number, issuing state and expiry date.
• Your location, only when you clock in or out. When you tap to clock in, start or end a break, or clock out on your phone, the app reads your position once. It records the position, how accurate it is, and how far that is from the venue. It also records whether your phone says the location is simulated or the phone has been modified (rooted or jailbroken), and the app version. The app does not track where you are between those taps, and it doesn’t read your location in the background. Clocking in on the venue’s tablet records no location at all. The tablet asks for a code: the last four digits of your phone number.
• Your phone, for notifications: if you allow notifications, a push token that lets us send your phone a message about your roster. Turn notifications off in your phone’s settings, or sign out, and the token is removed.
• Notices we send you: a copy of each roster notice and email, so we can tell whether it was delivered.
• What managers type: notes on a shift, a reason for correcting a clock time, a decision on leave, and similar notes about your work.

Why

To show you your roster, to record when you started and finished, to check that a clock-in happened at the venue, to cost the roster and work out hours for pay, to send you notices about your shifts, and to keep the app secure and working.

Clock records are never edited. If a time is corrected, the correction is added as a new record, and the original stays beside it. That way, if there’s ever a disagreement about pay, you and the venue can both see what happened.

Where it is kept

The app’s database is hosted by Supabase in Sydney, Australia (AWS ap-southeast-2). Your roster, clock records and pay settings are stored there.

Who else handles it, and where

So some of your information, mainly your email address, the text of notices and your push token, is processed outside Australia, mostly in the United States. We choose providers with strong security practices, and they handle the information only to provide their service to us. Overseas laws may not protect it in the same way Australian law does.

How long we keep it

We keep app records for as long as the venue uses Kaslu Work. Time and pay records are kept for seven years, because employers must keep employee records that long under the Fair Work Act 2009. When a venue leaves Kaslu Work, we give it a copy of its records and then delete them, except what the law requires us to keep. If you leave a venue, your account is detached from its records, but your hours stay, because the venue needs them for pay.

Keeping it secure

Each business’s data is kept apart from every other business’s by the database itself, not only by the app. Information is sent over encrypted connections. If a data breach is likely to cause you serious harm, we’ll tell you, the venue and the Office of the Australian Information Commissioner, as the law requires.

Your choices

• See or correct what the app holds about you: ask your manager, or email vinny@kasluwork.com.au. We’ll reply within 30 days and won’t charge you.
• Location: the app asks before it reads your location, and you can say no. If your venue has a clock-in tablet, you can clock in there instead, and the tablet records no location.
• Emails about roster changes: turn them off on the Me page of the Kaslu Work web app, or use the unsubscribe link in any of those emails.

Questions and complaints

Email vinny@kasluwork.com.au with any question or complaint about your privacy. We’ll respond within 30 days. If your question is about records a venue keeps about you, we’ll work with the venue to answer it. If you’re not happy with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We’ll update this policy when what we collect or who handles it changes, and change the date at the top. We’ll tell venues and staff using the app before a change applies. If a change affects information we already hold, we’ll email you before it takes effect.