Privacy Policy

We collect information that helps us provide better financial services to you. Here's what we gather and why:

Personal Identification Information

When you create an account or use our services, we collect basic details like your name, email address, phone number, and postal address. We need this to communicate with you and verify your identity—pretty standard stuff for financial services.

Financial Information

Since we help manage budget surpluses, we collect financial data including bank account details, income information, expense patterns, and savings goals. This information is protected with bank-level encryption and helps us provide personalised recommendations.

• Bank account numbers and BSB codes for direct transfers
• Transaction history related to surplus management
• Income sources and payment schedules
• Savings targets and investment preferences
• Tax file number (when required for investment products)

Usage and Device Information

We automatically collect technical information when you use our platform. This includes IP addresses, browser types, device identifiers, and how you interact with our services. It helps us improve functionality and catch security issues early.

Your data serves specific purposes that benefit your experience with our services:

We don't sell your personal information to third parties. Ever. And we won't use your financial data for purposes beyond what we've outlined here without getting your explicit consent first.

We share information only when necessary to provide our services or meet legal requirements. Here's who might see your data and why:

Service Providers

We work with trusted third parties who help us operate our platform—think cloud hosting, payment processors, and analytics tools. These partners can only use your data for the specific services they provide to us, and they're bound by strict confidentiality agreements.

Financial Institutions

When you connect your bank account or use investment products, we share necessary information with banks and financial institutions to process transactions and maintain account links. This is done through secure, encrypted channels.

Legal and Regulatory Requirements

Sometimes we're legally required to disclose information—for example, to comply with court orders, respond to lawful requests from authorities, or meet our obligations under Australian financial services law. We'll notify you about such requests unless prohibited by law.

You have significant control over your personal information. Here's what you can do:

To exercise any of these rights, email us at the address below or use the privacy controls in your account dashboard. We'll respond within 30 days and verify your identity before processing requests.

Protecting your financial information is our top priority. We use multiple layers of security:

• 256-bit SSL encryption for all data transmitted between your device and our servers
• Encrypted data storage using industry-standard AES-256 encryption at rest
• Multi-factor authentication options to secure account access
• Regular security audits and penetration testing by independent experts
• Strict access controls limiting employee access to customer data
• Continuous monitoring for suspicious activity and potential breaches
• Regular backups stored in secure, geographically distributed locations

Despite our best efforts, no system is 100% secure. If we detect a data breach that might affect you, we'll notify you within 72 hours and explain what happened, what information was involved, and what steps we're taking.

We keep your information only as long as necessary for the purposes outlined in this policy:

Active Account Data

While your account is active, we retain all information needed to provide our services and comply with legal obligations. You can update or delete most of this data yourself through your account settings.

After Account Closure

When you close your account, we delete or anonymise most personal information within 90 days. However, we're legally required to retain certain financial records for seven years to comply with Australian tax and financial services regulations.

Specific Retention Periods

• Transaction records: 7 years (legal requirement)
• Identity verification documents: 7 years after account closure
• Communication records: 3 years for quality and training purposes
• Marketing consent records: Until consent is withdrawn, then 3 years
• Usage analytics: Anonymised after 2 years, retained indefinitely

If you want specific information deleted sooner, contact us. We'll accommodate your request where legally possible.

We use cookies and similar technologies to improve your experience and understand how you use our services:

Essential Cookies

These are necessary for the website to function properly. They enable basic features like page navigation, secure areas access, and form submissions. You can't opt out of these without breaking core functionality.

Performance Cookies

These help us understand how visitors interact with our platform by collecting anonymous information about page visits, time spent, and feature usage. This data helps us improve the service.

Functional Cookies

These remember your preferences and settings—like your language choice or dashboard layout—so you don't have to reconfigure things each visit.

You can control cookies through your browser settings. Blocking certain cookies might limit your ability to use some features. Visit your browser's help section for instructions on managing cookie preferences.

Our platform may contain links to third-party websites or integrate with external services. We're not responsible for the privacy practices of these external sites. When you leave our platform, we encourage you to read the privacy policy of every site you visit.

Some third-party services we integrate with—like payment processors or analytics providers—may collect information directly from you. These services operate under their own privacy policies, which we've vetted to ensure they meet reasonable privacy standards.

Our services are designed for adults managing their personal finances. We don't knowingly collect personal information from anyone under 18 years old. If you're a parent or guardian and believe your child has provided us with personal information, contact us immediately and we'll delete it.

We update this privacy policy occasionally to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify you via email or through a prominent notice on our platform at least 30 days before the changes take effect.

Your continued use of our services after changes become effective means you accept the updated policy. If you disagree with changes, you can close your account before they take effect.

We keep previous versions of this policy archived. If you'd like to see how our practices have evolved, contact us and we'll provide older versions.

Your information is primarily stored and processed in Australia. However, some of our service providers operate internationally, which means your data might be transferred to and processed in other countries.

When we transfer data internationally, we ensure adequate protections are in place through mechanisms like Standard Contractual Clauses or working with providers certified under recognised privacy frameworks. These safeguards ensure your information receives protection comparable to Australian privacy laws.