Last updated: July 2025
The short version: we collect what the product needs to work — your email, and the financial figures you choose to enter — and nothing else. We don't sell data, we don't run ads, and we don't track you around the internet.
What we collect.
What we don't collect. We never ask for bank logins, account numbers or card details — payments are handled entirely by Stripe, a PCI-DSS-compliant payment provider; your card details never reach our servers. We don't use advertising trackers, we don't use tracking cookies, and our website analytics (GoatCounter) is privacy-friendly — it counts visits without identifying you or setting cookies.
How we use it. To run the product — authenticating you, storing and syncing your plan, and sending account emails (welcome, password reset, billing notices). We may email you about the service itself, never marketing spam.
Who processes it. A small set of providers process data on our behalf, each limited to what they need to do their job:
Where it's stored. On the managed infrastructure above, encrypted in transit. These providers may store or process data outside Australia — by using the service you consent to that overseas processing. Passwords are hashed with bcrypt; reset tokens are stored hashed and expire within an hour.
Who can see it. Only you, through your account. Each account's data is isolated — no other member can access your figures. We access customer data only for support or operational reasons, and only when needed.
Your rights and controls. You can export your plans at any time, and you can delete your account — which removes your plans, drafts and account record — whenever you choose, right inside Settings. You may also ask us to access or correct the personal information we hold about you — just contact us. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you're in the EU or UK, you have the same rights under GDPR — access, correction, deletion, portability — exercisable the same way.
Complaints. If you think we've mishandled your information, contact us first — we'll fix it. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Changes. If this policy changes materially, we'll say so on this page before it takes effect.
Questions? Contact us.