Privacy
Last updated August 2026.
The short version
Workers own their exposure history. They can see everything about themselves, on their own device, at any time, and can request export or deletion of their personal data. Employers see aggregates, exceedance flags, and compliance records, never continuous location, raw sensor streams, or anything captured outside a worker’s shift. This split is enforced in Exposia’s architecture, at the policy-engine level, not just described in this document.
What we collect
With a worker’s individual consent, Exposia reads sensor data already available on their paired watch and phone, including Time in Daylight and ambient sound level readings, during working hours, as configured for their employer’s site and shift schedule. We combine this with Australian environmental data (the ARPANSA UV index, Bureau of Meteorology data) to calculate indicative exposure figures. We do not collect continuous GPS location, raw audio recordings, or any sensor data outside a worker’s configured working hours.
What the worker sees
A worker’s own app shows their full exposure history, coverage over time, and any hazard-specific nudges (for example, a private prompt to book a skin check). This view is theirs alone: it isn’t visible to their employer.
What the employer sees
An employer’s HSE dashboard shows aggregated exposure by crew and site, exceedance flags against the relevant exposure standard, coverage percentages, and anonymised participation figures for any referral program (for example, the share of a workforce that has completed a skin check this year). Individual dose history, location data, and clinical referral outcomes are never shown to an employer.
Data residency and security
Exposia is hosted on Amazon Web Services in Sydney (ap-southeast-2). All exposure data stays in Australia. Access to employer dashboards is role-based and logged; access to individual worker data is restricted to the worker themselves and, for aggregate reporting only, their employer’s nominated HSE administrators.
How long we keep data
Exposure records are retained for as long as an employer’s WHS record-keeping obligations require, or until a worker requests deletion of their personal data, whichever gives the worker the stronger protection under applicable law. Where a deletion request would remove evidence an employer is legally required to retain, we’ll explain the specific obligation that applies before actioning the request.
Your rights
Workers can request a copy of their exposure history, or its deletion, at any time from within the worker app or by emailing info@limak.com.au.
Questions
For any privacy question, contact us at info@limak.com.au.