Plain-English summary: We collect your account information and usage data to run our apps and send you relevant notifications. We do not sell your data to third parties. You can request deletion of your account and data at any time.
1. Who we are
DizitalFabrik Pty Ltd ("DizitalFabrik", "we", "us", "our") is an Australian-registered company (ABN 45 625 305 474) that develops and operates mobile and web applications. This Privacy Policy explains how we handle personal information when you use our products and services ("Services").
Our contact for privacy matters: [email protected]
2. Information we collect
2.1 Account & registration information
When you create an account we collect:
- Email address (required for login and notifications)
- Display name or username
- Password (stored as a one-way hash — we never see it in plain text)
- Profile photo (optional, if you choose to upload one)
- Date of birth (where required for age verification)
2.2 Usage & activity data
As you use our Services we automatically collect:
- Log data (IP address, device type, operating system, app version, timestamps)
- Feature interactions and in-app events (to improve the product)
- Crash reports and performance diagnostics
- Search queries and content you post or share within the app
2.3 Communications
If you contact us we keep records of that correspondence to resolve your issue and improve our support.
2.4 Device & push-notification tokens
To send push notifications we store a device push token provided by Apple (APNs) or Google (FCM). You can revoke notification permission in your device settings at any time.
2.5 Information we do NOT collect
- Payment card or banking details (we use third-party payment processors where applicable)
- Precise GPS location (unless a specific feature explicitly requires it and you grant permission)
- Contacts from your address book
3. How we use your information
| Purpose | Legal basis (Australia Privacy Act) |
|---|
| Create and maintain your account | Contract performance |
| Send transactional notifications (login codes, alerts) | Contract performance |
| Send optional marketing & product updates | Consent (opt-in; revocable) |
| Improve product features and fix bugs | Legitimate interest |
| Detect and prevent fraud and abuse | Legitimate interest / legal obligation |
| Comply with legal obligations | Legal obligation |
4. Notifications
We send two categories of notification:
- Transactional — account security alerts, password resets, and service updates. These are essential to running the service and cannot be individually disabled (you may delete your account to stop them entirely).
- Marketing & product — new features, tips, and relevant content. These are opt-in and you can unsubscribe at any time via in-app settings or the unsubscribe link in any email.
5. Sharing your information
We do not sell personal information. We share data only in these circumstances:
- Service providers — cloud hosting, analytics, crash reporting, and email delivery providers acting under contract and data processing agreements.
- Legal requirements — where required by Australian law, court order, or to protect the safety of users.
- Business transfers — in the event of a merger or acquisition, users will be notified before data is transferred to a successor entity.
6. Data storage & security
Data is stored on servers located in Australia and/or the United States (AWS). We apply industry-standard safeguards:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access controls — staff see only what they need
- Regular security assessments and penetration testing
- Multi-factor authentication on all production systems
No method of transmission over the internet is 100% secure. If we become aware of a breach that affects your data we will notify you in accordance with Australian law.
7. Data retention
We retain account data for as long as your account is active. After account deletion:
- Personal identifiers are deleted or anonymised within 30 days
- Anonymised aggregate analytics data may be retained indefinitely
- Certain records may be kept longer where required by law (e.g. financial records for 7 years)
8. Your rights
Under the Australian Privacy Act 1988 (Cth) and applicable state/territory legislation you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct inaccurate or incomplete information
- Deletion — request deletion of your account and associated data
- Withdraw consent — opt out of marketing communications at any time
- Complain — lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
To exercise any right, email [email protected]. We will respond within 30 days.
9. Children's privacy
Our Services are not directed to children under 13. If a Service targets or permits users aged 13–17, we apply additional safeguards including restricted content, limited data collection, and no behavioural advertising. See our Data Safety page for app-specific audience details.
If you believe we have inadvertently collected data from a child under 13, contact us immediately at [email protected].
10. Third-party links
Our apps may contain links to third-party websites or services. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies.
11. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via in-app notice or email at least 30 days before they take effect. Continued use of our Services after that date constitutes acceptance of the updated policy.
12. Contact
Privacy Officer — DizitalFabrik Pty Ltd
Email: [email protected]
Registered: New South Wales, Australia