Privacy-Policy

  1. Home
  2. Privacy-Policy

Effective date: 10 October 2026

This policy explains how John Salter Consulting Services (“we”, “us”) handles personal information when you use the Candid Cycle and Calibrate (Capability Assessment) mobile apps, their companion web forms and related services (together, the “Services”).

Contact: johnsalter@me.com
Postal address: John Salter Consulting Services, 5/10 Peroomba Ave, Kensington Gardens, South Australia 5068

1. Who this policy covers

  • Account holders are people who create an account to run reviews, assessments or cycles, or who are invited to a team as a facilitator or administrator.
  • Contributors are people who respond to a review or assessment through a shared web link. Contributors do not need an account.

2. Our role

For account information, we decide how the information is used, and we are responsible for it.

For contributor responses, the account holder who ran the review decides why the responses are collected and how the resulting report is used. We process those responses on the account holder’s behalf, using the providers listed in section 5, to collect them and produce the report.

We are a small business and may not be legally required to comply with the Privacy Act 1988 (Cth). We have chosen to handle personal information in line with the Australian Privacy Principles as a matter of policy.

3. What we collect

Account holders

  • Account details: your email address and password. Passwords are handled by Google Firebase Authentication. We do not see or store them in readable form.
  • Subscription details: your plan, renewal and expiry dates, and Apple’s transaction identifiers. Apple handles payment. We do not receive your card or Apple Account payment details.
  • Content you create: review entries, assessments, workspace and cycle titles, team invitations and the email addresses of people you invite.
  • Reports: reports generated for you and the email address we send them to.

Contributors

  • Responses: the ratings and written reflections you submit.
  • We do not ask contributors for a name or email address. We do not link a response to an account.
  • The person who ran the review sees the consolidated report. They do not see individual responses. Quotations in a report are edited and labelled as anonymised excerpts.
  • Please do not include names, roles or other identifying or sensitive details in free-text answers. Text you write may appear in the consolidated report. In small groups, wording or distinctive events can allow others to work out who wrote something, even when no name is given.

Collected automatically

  • Technical logs created by our hosting and infrastructure providers when the Services are used, such as IP address, device and operating system type, and error information. These logs are kept separately from response content.
  • We do not use advertising or cross-app tracking, and we do not sell personal information.

4. How we use information

  • To provide the Services: sign-in, subscriptions, collecting responses, generating and delivering reports.
  • To generate AI-drafted reports (section 6).
  • To send service emails: team invitations and reports.
  • To prevent fraud and abuse, keep the Services secure, and meet legal obligations.

We do not routinely read individual contributor responses. Authorised personnel may access stored data only where necessary for security, abuse investigation, technical support you request, or legal compliance.

5. Who processes your information

Assessments and review drafts you create are also stored on your device.

We do not disclose personal information to anyone else except:

  • people you authorise, such as the recipients of a report you send or team members you invite;
  • where required by law; or
  • where reasonably necessary to protect legal rights or safety.

By using the Services you understand that your information will be processed in these countries. These providers may be subject to laws that differ from Australian privacy law. We select providers that publish security and data-protection commitments and use them for the purposes listed above.

6. AI processing

When a report is generated, the relevant contributor responses are sent to Anthropic’s API to produce a draft. For Calibrate reassessments, the previous round’s results are also sent. We do not intentionally include contributor names, email addresses or account identifiers in these requests, but free text may still contain personal information, which is why we ask contributors not to include it.

If you use the optional “AI assist” feature in Candid Cycle, the text you choose to improve is sent in the same way.

Before we send your information for AI processing, we ask for your permission in the app. You can decline, but AI-drafted reports and AI assist will then not be available.

Under Anthropic’s commercial terms, content sent through its API is not used to train its models. Anthropic generally deletes API inputs and outputs from its systems within 30 days. It may keep content for longer where required by law or where the content is flagged under its usage policy.

AI output can contain errors. It is a draft. The account holder reviews and approves it before it is released. It is not professional advice.

7. How long we keep information

We keep account data, content, responses and reports until the account is deleted. After deletion:

  • Data we control is removed from our live systems, and our own backups are overwritten within 30 days.
  • Our providers keep information under their own schedules. For example, Google states that Firebase Authentication data is removed from live and backup systems within 180 days after deletion is initiated.
  • We may keep a minimal record of purchase identifiers, not linked to your name or email, to prevent fraudulent re-use of a purchase.
  • Reports that have already been delivered, exported or emailed, and copies in device, iCloud or other backups, are outside our control and remain until their holders delete them.

8. Your choices and rights

Delete your account. In the app, open the menu and choose Delete account (Candid Cycle: ⋮ menu; Calibrate: side menu). This permanently deletes your account and the data associated with it, subject to section 7. If you are a team member rather than the workspace owner, workspace content may remain available to the workspace owner after your account is deleted. Deleting your account does not cancel an Apple subscription. Cancel it first in Settings > Apple Account > Subscriptions.

Access, correction, deletion or a copy of your information. Email johnsalter@me.com. We will acknowledge your request within 10 days and respond within 30 days. We may need to verify your identity first.

Complaints. Email johnsalter@me.com with the details. We will investigate and reply in writing. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (oaic.gov.au). The Commissioner can only investigate where the Privacy Act applies to us. If you are elsewhere, you may also contact your local privacy regulator.

Contributors. Because responses are not linked to your identity, we cannot tell which response is yours. We therefore cannot find, change or delete an individual response after submission. You can choose not to submit. After submission, you can raise a concern with the person who invited you, but we cannot promise your response will be excluded from a report.

9. Security

Data is encrypted in transit. Contributor responses are not made available for direct reading by account holders, team members or other contributors, and access to stored data is limited to our backend processes and authorised personnel. No system is perfectly secure. If a breach affects you, we will notify you and any regulator where the law requires.

10. Children

The Services are intended for working adults and are not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it.

11. International use

The Services are operated from Australia and are designed mainly for users in Australia. If you use them from another country, the privacy laws of that country may also apply, and we will handle your requests in line with the law that applies to you.

12. Changes

We may update this policy. We will post the new version with a new effective date, and we will notify account holders in the app or by email before material changes take effect.

Contributor Notice

Shown on every response form, with a link to this policy.