Jethro Privacy Policy

Effective date: 25 September 2026

Who we are

Jethro Ag Pty Ltd (“Jethro”, “we”, “us”) builds software that helps Australian farming and viticulture businesses run their field operations.

This policy explains how we collect, hold, use and disclose personal information. It applies to our website, our mobile app, and our online platform. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) made under that Act. You can reach us about privacy at support@jethro.ag.

What Personal Information we collect about you

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information or opinion is true and whether or not it is recorded in a material form.

Depending on how you use Jethro, we may collect the following categories of personal information:

• Account and sign-in details — your name, email address, work role, the credentials you use to log in, and a session that keeps you signed in for a limited time.
• Farm and operational records — the information you and your team enter to run your operation, such as field and equipment records, timesheets, jobs, meter and fuel readings, and notes. This can include information about workers.
• Photos and camera use — photos you choose to take or upload (for example, a hazard photo). The app also uses your camera to scan QR codes; scanning shows a live camera view but does not keep an image from the scan.
• Location information — Location features are specific and limited. We do not track people covertly, and continuous location is never active by default. The detail of how we handle location information is set out in the section below headed “Location and confirming equipment.”
• Diagnostic information — basic device and app information, and crash reports, so we can keep the app reliable and secure.

The table below summarises how we handle the main categories of personal information. Under the Australian Privacy Principles the test is whether our collection is reasonably necessary for our functions or activities; the “Legal basis” column below describes, more fully than the Principles require, the particular reason we rely on for each category.

Why we collect it

We use personal information to provide and secure the service: to sign you in, to record and display your operation’s data, to support you, to help keep people and equipment safe, and to find and fix problems. We use information only for these purposes, or for a related purpose you would reasonably expect. The legal bases on which we rely are set out in the table above.

Location and confirming equipment

Location features are specific and limited. We do not track people covertly, and continuous location is never switched on by default.

• Placing and finding equipment. When you confirm a meter or fuel reading, the app can take a single, on-tap reading of your device’s location to pin the asset you are standing at. This is a one-off reading while the app is open — not continuous tracking, and not background tracking.
• Optional worker features. If we offer a feature that fills in timesheets from a worker’s location through their working day, it is strictly opt-in — off unless the worker turns it on, and free to turn off at any time (this is different from the one-off worksite check described below, which you start yourself each time). It is used only to prepare that worker’s own timesheet, never to set pay or shifts or to monitor performance. Consent is obtained from the worker before the feature is activated. A worker may withdraw consent at any time by disabling the feature in the app.
• Vehicle and equipment tracking. Where a work vehicle or piece of equipment carries a tracking device, the people affected are told in advance, through a notice and a policy, and it is used for fixed purposes only — safety, confirming that work was done where it was scheduled, and preventing misuse. We never track covertly.
• Confirming the right equipment. Equipment, water meters and fuel bowsers can carry a printed QR sticker, and some also carry a small Bluetooth tag. When you are recording work you can scan the sticker on the item to confirm which one you are working with; where tags are used, the app can also detect tagged items near you. If you confirm this way, we record which sticker or tag confirmed it, and the time, on that record. We do not record your position on that record, and we do not scan for tags in the background. If you do not confirm this way, nothing about stickers or tags is recorded. It is never used to set pay or shifts or to monitor performance, and choosing not to use it is never held against you.
• Where equipment was last confirmed. When an item is confirmed this way we also record where that item is, so the business can find its equipment. We show each item's last-confirmed position on a map, together with how old that position is. We keep this as the item's location — we do not use it, or show it, as a record of where you have been. It is a moment someone confirmed rather than live tracking, and we keep only the most recent position, not a history of where equipment has been.
• Finding your worksite. If you tap "use my location" in the app, we check your device's position once, at that moment, to work out which farm you are standing on, so the app can fill in the site on your timesheet. We use the position to make that one match and do not store it — only the site you confirm is saved. You never have to use it — you can always pick the site yourself. It is never used to set pay or shifts or to monitor performance.

Test and preview versions

We distribute early versions of our app through Apple’s TestFlight. A test build may show simulated, made-up demonstration data instead of live records, and any location trails shown in a test build are synthetic examples — not a real person’s movements. If you send us feedback on a test build, we use it to improve the app.

Where your information is held

Our platform, including sign-in and our databases, is hosted on Amazon Web Services in Sydney, Australia.

Some of our service providers are based overseas, principally in the United States, and personal information may be disclosed to them for specific purposes described in this policy:

• Sentry — app error and crash monitoring, and receiving feedback you choose to send us from the portal or app.
• Linear — tracking the feedback and requests you send us.
• Esri / ArcGIS — satellite map imagery (map requests carry your device’s IP address).
• Apple — distribution of test builds through TestFlight.

Our error-monitoring provider may also receive technical details of the requests the app makes, including the web address of each request and the information sent with it. We remove location coordinates and sign-in credentials from that information before it is sent.

We take reasonable steps to make sure overseas recipients handle personal information consistently with the Australian Privacy Principles.

Security

We take reasonable steps to protect personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include encrypted data transmission (TLS), access controls, and the use of reputable, security-certified hosting infrastructure. We use an error-monitoring provider to find and fix problems in the app and the platform, and we limit what is sent to it.

If we become aware of a data breach that is likely to result in serious harm to any individual, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).

How long we keep it

We keep personal information for as long as we need it to provide the service and to meet our legal and business requirements. We take reasonable steps to de-identify or delete personal information when it is no longer needed.

Marketing

Jethro may from time to time contact you about updates to our products and services that we consider relevant to your use of the platform. We will only do so where you have consented or where we are otherwise permitted to do so under applicable law.

If you do not wish to receive marketing communications from us, you may opt out at any time by using the unsubscribe link in any marketing email we send you, or by writing to us at support@jethro.ag. We will act on your request promptly. Opting out of marketing communications does not affect our ability to send you service-related communications, such as notices about your account or changes to this policy.

Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights in relation to your personal information:

• Anonymity — where lawful and practicable, you may interact with us anonymously or under a pseudonym, though some platform features require identification to function.
• Access — you may request a copy of the personal information we hold about you.
• Correction — you may ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Where we have disclosed that information to a third party, we will take reasonable steps to notify them of the correction.
• Withdraw consent — where we rely on your consent, you may withdraw it at any time by disabling the relevant feature in the app or using the unsubscribe link in any marketing communication. Withdrawal does not affect anything done lawfully before that point.
• Direct marketing opt-out — you may ask us to stop using your personal information for direct marketing at any time.

To exercise any of these rights, contact us at support@jethro.ag. We will respond within 30 days. If we cannot comply with a request, we will explain why.

Complaints

If you have a privacy concern, please contact us first at support@jethro.ag so we can put it right. We will acknowledge your complaint within 5 business days and endeavour to resolve it within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. The OAIC can be contacted by phone on 1300 363 992 or by post at GPO Box 5218, Sydney NSW 2001.

Changes to this policy

We may update this policy from time to time. The current version is always the one published on this page, with its effective date shown at the top.