Privacy Notice

• Account details — your name, email address, and password (stored as an encrypted credential by our authentication provider).
• Profile details you add — optional business information such as your ABN.
• Collection data you provide — card names, codes, brands, grades, costs, photos you upload, and sale records you enter.
• Support communications — messages you send through the in-app support chat.
• Usage and technical data — device type, browser, IP address, pages visited, and similar analytics needed to operate and improve the service.

• Creating and managing your account and providing the service (contract performance);
• Processing payments and managing subscriptions — handled by our Merchant of Record, Paddle (contract performance);
• Security, fraud prevention, and abuse detection (legitimate interests);
• Product improvement, diagnostics, and customer support (legitimate interests);
• Legal compliance, such as tax record-keeping and responding to lawful requests (legal obligation);
• Marketing communications only where you have consented, and you can opt out at any time.

We do not sell your personal information. We do not use your collection data to train third-party models.

• Service providers — hosting, authentication, analytics, image processing, and support tooling, bound by confidentiality obligations;
• Paddle (Merchant of Record) — the minimum personal data needed to sell the product, manage subscriptions, process payments, handle tax compliance and invoicing, and provide returns and refunds;
• Professional advisers — legal and accounting advisers where necessary;
• Authorities — where required by law or in response to a lawful request.

We host data with cloud providers, which may store data outside Australia, including in the United States and the European Economic Area. For users in the UK/EEA, transfers rely on appropriate safeguards such as EU/UK Standard Contractual Clauses or adequacy decisions. By using the service, you acknowledge this international processing.

We keep personal information only as long as needed for the purposes described in this notice, or as required by law (for example, tax record-keeping). When you delete your account or data, we delete or anonymise it within a reasonable period, subject to legal retention obligations.

Under the Australian Privacy Act 1988 you may access, correct, or request deletion of your personal information. If you are in the UK/EEA, you also have the right to erasure, restriction, data portability, to object to processing, to withdraw consent, and to lodge a complaint with your supervisory authority. We respond to requests within one month.

To exercise any of these rights, contact us via the in-app support chat or through Paddle at paddle.net. If you are unsatisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, and access controls restricted to personnel who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We use essential cookies and local storage to keep you signed in and to make the service work. We may use analytics cookies to understand how the service is used; you can disable analytics cookies in your browser settings. Third-party payment pages (Paddle) set their own cookies governed by Paddle's privacy policy.

We may update this notice from time to time. Material changes will be notified in the app. Continued use of the service after changes are posted constitutes acceptance.