Privacy Policy

1. Who we are and what this policy covers

Aus Tax Tracker ("the Service", "we", "us", "our") is operated by PREZTEK PTY LTD (ABN 75 662 964 507) of The Commons, 388 George St, Sydney NSW 2000, Australia. The Service helps Australian PAYG employees keep records of work-related deductions and produce indicative tax estimates.

This Privacy Policy covers personal information we handle through the Aus Tax Tracker iOS application, our website at taxtracker.au (including the waitlist), and our supporting APIs and infrastructure. By accessing or using the Service you acknowledge that you have read and understood this policy and, to the extent permitted by applicable law, consent to the collection, use, holding, and disclosure of your personal information as described in it. If you do not agree, do not use the Service.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Nothing in this policy limits any rights you have under laws that cannot be excluded.

2. Information we collect

Account information. When you sign in with Apple we receive the name and email address your Apple ID provides (which may be an Apple private relay address) and a unique account identifier.

Records you choose to log. Expense amounts, vendor names, categories, dates, work-related percentages, and currencies; receipt images and text extracted from them; car trip details including the locations you enter or select, distances, and favourite locations you save; work-from-home days and hours; and, if you provide it, your approximate annual income (used only to calculate estimates — providing it is optional); and any other information you voluntarily enter in the app in connection with logging your deductions.

Purchase information. If you purchase Aus Tax Tracker Pro, Apple processes the payment. We receive transaction identifiers and entitlement status from Apple. We never receive or store your card or bank details.

Technical and usage information. Product-interaction events tied to your account (including paywall views, dismissals, and conversions, and other in-app actions), anonymised analytics, crash and performance diagnostics, and standard server logs (such as IP address, device type, timestamps, and request metadata) generated automatically when you use the Service.

Waitlist information. If you join our waitlist we collect the email address you submit and the environment it was submitted from.

Inbound receipt email. If you set a personalised Tax Tracker mailbox, we receive messages sent to that address (including attachments) so they can appear in the app. The total message size including attachments must not exceed 20 MB; larger messages are not stored in your account and we send a bounce to the original sender.

Connected assistants. If you connect an AI assistant (such as Claude, ChatGPT, or Cursor) from Settings, that assistant can read and change the records in your account. It can see whether a receipt is attached, and it can attach a receipt image. It can also send one receipt image for reading, and we then create the expense or asset that reading suggests, with that image attached. It cannot download the receipt image. We store only hashes of the connection tokens. Reading that image uses the same receipt-reading processors described below, and we send only that image. We do not send your other records to a model ourselves for this connection. The assistant provider handles what you ask it to do, under that provider's terms. You can revoke a connection in Settings.

What we deliberately do not collect: continuous or background location (trip locations are the addresses you type or pick — we do not GPS-track you); contacts, calendar, health, motion, or microphone data; and bank or card details.

Receipt reading. When you ask the app, or a connected assistant, to read a receipt, we send the receipt image from our servers to the processors below, and only so a model can suggest details such as the vendor, date, amount, category, and whether it looks like an expense or an asset. We do not send your other expenses, trips, income, or account profile with that image. We do not log the image or the model's reply. We record that a read was attempted, how it ended, how long the request took, and which model answered.

Receipt-reading processors. The image is processed by OpenRouter, Inc. (openrouter.ai), which routes the request, and by the model host OpenRouter selects. The default model is Google's Gemma 4 31B. OpenRouter lists several hosts for that model, including DeepInfra, CoreWeave, Venice, Crusoe, Friendli, Parasail, ModelRun, and SiliconFlow. Each request asks OpenRouter to use only hosts that support the parameters we send (an image and a strict JSON schema) and that do not collect user data. If we configure a different model, the host is the provider OpenRouter uses for that model. Their terms apply to their handling of what we send.

What those processors say about training and retention. OpenRouter's privacy policy states that OpenRouter does not use inputs or outputs to train its own models, and that it does not keep image files longer than needed to route the request, except where required for abuse detection, security, billing, or legal compliance. Each request sets OpenRouter's data_collection option to deny, which OpenRouter documents as routing only to providers that do not collect user data. OpenRouter also states that it does not control how model providers handle inputs, including for training, and that those providers' retention practices vary. We do not claim that the model host keeps nothing, or that it never uses the image.

3. How we collect and hold information

Your records are stored on your device and synchronised to our cloud infrastructure as part of normal operation of the Service. Data is encrypted in transit. Receipt images and other records are stored in access-controlled storage keyed to your account.

Inbound receipt mail is received via Amazon SES, written temporarily to Amazon S3 for processing, then copied into your account storage. Temporary copies in S3 expire within about a day.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. However, no method of electronic transmission or storage is completely secure, and to the maximum extent permitted by law we do not warrant or guarantee the absolute security of any information you transmit to us.

4. Why we collect, hold, and use information

We collect, hold, and use personal information for purposes including: providing, operating, maintaining, personalising, and improving the Service; reading receipts you ask the app to read; synchronising and backing up your records across your devices; verifying purchases and administering entitlements, free-tier allowances, and usage limits; understanding how people use the Service (including paywall and onboarding journeys) so we can improve it; detecting, investigating, and preventing fraud, abuse, security incidents, and breaches of our Terms; responding to your enquiries and providing support; sending you service-related communications, and marketing communications where you have opted in (you can opt out at any time); complying with our legal obligations and enforcing our legal rights; and any other purpose reasonably connected with your use of the Service, or as otherwise disclosed to you at the time of collection or permitted by law.

We may de-identify or aggregate information so that it no longer identifies you, and we may use and disclose de-identified or aggregated information for any lawful purpose without restriction.

We do not sell your personal information, and we do not use third-party advertising or tracking SDKs in the app.

5. Who we disclose information to

We disclose personal information to third-party providers who supply infrastructure and services on our behalf: Apple (Sign in with Apple, App Store purchases, and on-device frameworks such as maps), Vercel (application hosting and anonymised analytics), Amazon Web Services (email delivery and inbound mail processing), and Supabase (database, authentication, and file storage). These providers are authorised to process your information only as needed to provide their services to us.

When you use receipt reading we disclose the receipt image to OpenRouter, Inc. and to the model host it routes to. For the default model that host is one of the providers OpenRouter selects for Gemma 4 31B among those that support the request. We disclose it only so they can extract the suggested details described above. We do not disclose your other records for receipt reading.

We may also disclose personal information: where you direct or consent to the disclosure (for example, when you export your data and share it); to our professional advisers, insurers, and auditors on a confidential basis; where required or authorised by law, regulation, court order, or a government or law enforcement request; where we consider disclosure reasonably necessary to protect our rights, property, or safety, or those of our users or the public, including to enforce our Terms and investigate fraud; and to an actual or prospective purchaser (and its advisers) in connection with any merger, acquisition, financing, reorganisation, or sale of all or part of our business or assets, in which case your information may be transferred as a business asset.

6. Overseas disclosure

Our hosting, infrastructure, and receipt-reading processors store and process data in the United States and in other countries where they operate. OpenRouter may route the default model to a host in the United States or another country where that provider operates. This includes receipt images sent for receipt reading. By using the Service you acknowledge and, to the extent permitted by law, consent to your personal information being transferred to, stored in, and processed in those countries, which may have different privacy protections than Australia. Where APP 8 applies, this consent means we are not obliged to take steps to ensure overseas recipients comply with the APPs and we will not be accountable under the Privacy Act for their handling of your information, to the extent permitted by law.

7. Retention and deletion

We retain personal information while your account is active and for as long as reasonably necessary for the purposes described in this policy. When you delete records in the app, they are removed from your active account, but complete deletion from our systems may take up to approximately 30 days. Residual copies may persist in backups for a limited period thereafter.

You can permanently delete your account at any time from Settings in the app. Account deletion permanently removes your server-side records, receipt images, product-analytics events, connected-assistant access, and account, and is irreversible. We may retain information after deletion where retention is required or permitted by law (for example, transaction records), and we may retain de-identified or aggregated data indefinitely.

We do not keep a separate log of what was sent for receipt reading. Deleting a receipt or your account removes the copies we hold. It does not, by itself, delete a copy OpenRouter or the model host may still hold under the practices described above. Contact us if you want us to pass a deletion request to those processors.

8. Access, correction, and your choices

Most of your data is directly visible and editable in the app, and you can export your records at any time (PDF or CSV). You may also request access to, or correction of, the personal information we hold about you by contacting us. We will respond within a reasonable period. We may decline a request where the law permits us to, and where we do we will tell you why. We may need to verify your identity before actioning a request, and we may charge a reasonable fee for access requests where permitted by law.

Those rights include personal information in receipt images and in the details receipt reading suggested. You can review and edit those details in the app before and after you save them. If we do not hold the information you ask about, we will pass your request to OpenRouter where we reasonably can. You can also complain to the Office of the Australian Information Commissioner, as set out below.

You can stop all collection by us by deleting your account and uninstalling the app.

9. Users outside Australia

The Service is directed at users in Australia. If you use the Service from the European Economic Area or the United Kingdom, we process your personal data on the legal bases of performance of a contract (providing the Service you request), our legitimate interests (operating, securing, and improving the Service), compliance with legal obligations, and consent where required. You may have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Account deletion and export in the app satisfy erasure and portability requests; for anything else, contact us.

10. Children

The Service is not directed at children and is intended for users aged 16 or over. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has provided us personal information, contact us and we will take reasonable steps to delete it.

11. Changes to this policy

We may update this policy from time to time. The updated policy takes effect when published at this page, and the date at the top shows when it was last revised. Where a change materially reduces your rights we will take reasonable steps to notify you, such as a notice in the app or on our website. Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy to the extent permitted by law.

12. Complaints and contact

Questions, requests, or complaints about privacy can be sent to support@taxtracker.au. We take privacy complaints seriously and will investigate and respond within a reasonable period. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).