Privacy Policy — CPD Ledger

Last updated: 2 August 2026
Publisher: Taxplain Pty Ltd (ACN 699 096 092), Western Australia

What this app is

CPD Ledger records continuing professional development activities for engineers and calculates progress against the requirements of a CPD scheme you nominate. It is a record-keeping tool. It does not provide compliance advice, and it is not affiliated with, endorsed by, or connected to the Board of Professional Engineers of Queensland, Engineers Australia, or any assessment entity.

What we collect

Account information

Your email address and an encrypted password, or an Apple or Google sign-in identifier if you use those. We never see or store your Apple or Google password.

Profile information you enter

Your name and registration number, if you choose to enter them
The CPD scheme you nominate and your areas of engineering registration
Circumstances that change your requirement: part-time or casual status, career break, academic status, non-practising periods, interstate exemption

CPD records you enter

Activity titles, dates, hours claimed, CPD type
Which areas of engineering each activity relates to
Your reflection on how the activity extended your knowledge
Certificates and other evidence files you upload

We do not collect your location, contacts, advertising identifiers, health data, financial information, or biometrics. There is no analytics SDK and no advertising in this app.

How it is used

Your data is used to operate the app: to calculate your CPD position, to generate your statement, and to send you reminders if you enable them. It is not used for anything else.

We do not sell your data. We do not share it for advertising. There is no advertising in this app.

Certificate scanning

If you attach a certificate, the file is sent to Anthropic’s API to extract the activity title, date, hours and provider so the form can be pre-filled. You confirm or correct every field — the extraction is a suggestion, never a decision.

Anthropic processes the file to return that result. Per Anthropic’s API terms at the time of writing, API inputs are not used to train their models. If you would rather not use this, simply enter activities manually; scanning only happens when you attach a file.

Where your data is held

Your data is stored with Supabase, our database and file-storage provider. Certificates are held in a private storage area that only your account can reach, protected by row-level security policies enforced at the database.

Depending on the region assigned to our project, data may be processed outside Australia. By using the app you consent to that transfer.

Who else can see it

Nobody, except:

Us, only where necessary to operate or fix the service
Our processors — Supabase (storage), Anthropic (certificate scanning only), and our email provider (account emails such as password resets)
Where legally required, such as a valid court order

Your CPD data is never shared with BPEQ, Engineers Australia, your employer, or any assessment entity. If you want them to see it, you export a statement and send it yourself.

How long we keep it

For as long as your account exists. CPD records are audit evidence, so we do not expire them on your behalf — you decide when they go.

Deleting your account

You can delete your account at any time from Settings → Delete my account and all data. This permanently removes your profile, every activity, and every uploaded certificate. It is not a deactivation and it cannot be undone.

You can also request deletion by emailing support@taxplain.com.au, or via taxplain.com.au/cpd-ledger/delete-account.

Export your statement before deleting if you may be audited.

Your rights

Under the Australian Privacy Act you may ask us to access, correct, or delete your personal information, and you may complain about how we have handled it. Most of this you can do yourself in the app. For anything else, email support@taxplain.com.au.

If you are unhappy with our response you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

Data is encrypted in transit. Certificates sit in a private bucket with per-user access policies. Access to your rows is enforced by row-level security at the database, not merely in the app.

No system is perfectly secure. Use a strong, unique password.

Children

This app is for registered professional engineers. It is not directed at, and should not be used by, anyone under 16.

Changes

We will update the date above when this changes. Material changes will be notified in the app.

Contact

Taxplain Pty Ltd (ACN 699 096 092)
support@taxplain.com.au