Privacy Policy

Personal Information

• Name, email address, and phone number
• Postal address for billing and service delivery
• Date of birth for account verification purposes
• Government identification numbers when required by Australian law

Financial Information

• Income details and employment information
• Expense categories and spending patterns
• Bank account information for budgeting analysis (read-only access)
• Financial goals and budget preferences
• Transaction data necessary for budget tracking

Technical Information

• Device information including operating system and browser type
• IP address and general location data
• Usage patterns and interaction data with our platform
• Cookies and similar tracking technologies

Service Providers

We work with trusted third-party providers who help us deliver our services:

• Cloud hosting services for secure data storage
• Payment processors for subscription billing
• Email service providers for communication
• Analytics platforms for service improvement (anonymized data only)

All service providers sign strict confidentiality agreements and are required to protect your information according to Australian privacy standards.

Legal Requirements

We may disclose information when required by law or to:

• Comply with court orders, subpoenas, or regulatory requests
• Investigate fraud or security breaches
• Protect the rights and safety of our users and staff
• Enforce our terms of service

Business Transfers

In the event of a merger, acquisition, or sale of business assets, user information may be transferred as part of the transaction. We would notify affected users and ensure continued privacy protection under substantially similar terms.

Technical Safeguards

• 256-bit SSL encryption for all data transmission
• AES-256 encryption for data storage
• Regular security audits and penetration testing
• Multi-factor authentication for account access
• Automated intrusion detection and prevention systems

Physical Security

• Data centers with 24/7 security monitoring
• Biometric access controls and surveillance systems
• Climate-controlled environments with backup power systems
• Regular physical security assessments

Administrative Controls

• Strict employee background checks and training
• Role-based access controls with regular reviews
• Incident response procedures and breach notification protocols
• Regular security awareness training for all staff

Access and Portability

• Request a copy of all personal information we hold about you
• Receive your data in a structured, machine-readable format
• Transfer your information to another service provider

You can download your data directly from your account dashboard or contact us for a comprehensive data export.

Correction and Updates

• Update incorrect or incomplete information
• Modify your communication preferences
• Change your account settings and privacy controls

Most updates can be made directly in your account settings. For changes requiring verification, please contact our support team.

Deletion and Restriction

• Request deletion of your personal information
• Restrict processing of your data in certain circumstances
• Object to data processing based on legitimate interests

Please note that some information may need to be retained for legal or regulatory compliance even after account closure.

Managing Cookie Preferences

You can control cookies through:

• Your browser settings to block or delete cookies
• Our cookie preference center in your account
• Third-party opt-out tools for advertising cookies

Disabling certain cookies may limit some website functionality, but core budgeting features will continue to work.

Automated Deletion

We use automated systems to delete expired data according to our retention schedule. You'll receive notifications before any significant data deletion, and you can request early deletion in many cases.

Transfer Safeguards

• All international transfers use encryption and secure channels
• Service providers must meet Australian privacy standards
• Data processing agreements include specific protection requirements
• Regular audits ensure ongoing compliance with transfer requirements

Current International Processing

• Email services (servers in United States with Privacy Shield certification)
• Analytics processing (anonymized data only)
• Backup storage in geographically distributed data centers