Privacy Policy

1. Who we are and what this policy covers

Aus Tax Tracker ("the Service", "we", "us", "our") is operated by PREZTEK PTY LTD (ABN 75 662 964 507) of The Commons, 388 George St, Sydney NSW 2000, Australia. The Service helps Australian PAYG employees keep records of work-related deductions and produce indicative tax estimates.

This Privacy Policy covers personal information we handle through the Aus Tax Tracker iOS application, our website at taxtracker.au (including the waitlist), and our supporting APIs and infrastructure. By accessing or using the Service you acknowledge that you have read and understood this policy and, to the extent permitted by applicable law, consent to the collection, use, holding, and disclosure of your personal information as described in it. If you do not agree, do not use the Service.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Nothing in this policy limits any rights you have under laws that cannot be excluded.

2. Information we collect

Account information. When you sign in with Apple we receive the name and email address your Apple ID provides (which may be an Apple private relay address) and a unique account identifier.

Records you choose to log. Expense amounts, vendor names, categories, dates, work-related percentages, and currencies; receipt images and text extracted from them; car trip details including the locations you enter or select, distances, and favourite locations you save; work-from-home days and hours; and, if you provide it, your approximate annual income (used only to calculate estimates — providing it is optional); and any other information you voluntarily enter in the app in connection with logging your deductions.

Purchase information. If you purchase Aus Tax Tracker Pro, Apple processes the payment. We receive transaction identifiers and entitlement status from Apple. We never receive or store your card or bank details.

Technical and usage information. Anonymised product-interaction analytics, crash and performance diagnostics, and standard server logs (such as IP address, device type, timestamps, and request metadata) generated automatically when you use the Service.

Waitlist information. If you join our waitlist we collect the email address you submit and the environment it was submitted from.

What we deliberately do not collect: continuous or background location (trip locations are the addresses you type or pick — we do not GPS-track you); contacts, calendar, health, motion, or microphone data; and bank or card details. Receipt scanning runs entirely on your device using Apple's on-device models — receipt images are never sent to a cloud service for text extraction.

3. How we collect and hold information

Your records are stored on your device and synchronised to our cloud infrastructure as part of normal operation of the Service. Data is encrypted in transit. Receipt images and other records are stored in access-controlled storage keyed to your account.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. However, no method of electronic transmission or storage is completely secure, and to the maximum extent permitted by law we do not warrant or guarantee the absolute security of any information you transmit to us.

4. Why we collect, hold, and use information

We collect, hold, and use personal information for purposes including: providing, operating, maintaining, personalising, and improving the Service; synchronising and backing up your records across your devices; verifying purchases and administering entitlements, free-tier allowances, and usage limits; detecting, investigating, and preventing fraud, abuse, security incidents, and breaches of our Terms; responding to your enquiries and providing support; sending you service-related communications, and marketing communications where you have opted in (you can opt out at any time); complying with our legal obligations and enforcing our legal rights; and any other purpose reasonably connected with your use of the Service, or as otherwise disclosed to you at the time of collection or permitted by law.

We may de-identify or aggregate information so that it no longer identifies you, and we may use and disclose de-identified or aggregated information for any lawful purpose without restriction.

We do not sell your personal information, and we do not use third-party advertising or tracking SDKs in the app.

5. Who we disclose information to

We disclose personal information to third-party providers who supply infrastructure and services on our behalf: Apple (Sign in with Apple, App Store purchases, and on-device processing frameworks), Vercel (application hosting and anonymised analytics), and Supabase (database, authentication, and file storage). These providers are authorised to process your information only as needed to provide their services to us.

We may also disclose personal information: where you direct or consent to the disclosure (for example, when you export your data and share it); to our professional advisers, insurers, and auditors on a confidential basis; where required or authorised by law, regulation, court order, or a government or law enforcement request; where we consider disclosure reasonably necessary to protect our rights, property, or safety, or those of our users or the public, including to enforce our Terms and investigate fraud; and to an actual or prospective purchaser (and its advisers) in connection with any merger, acquisition, financing, reorganisation, or sale of all or part of our business or assets, in which case your information may be transferred as a business asset.

6. Overseas disclosure

Our hosting and infrastructure providers store and process data in the United States (and may use supporting infrastructure in other countries). By using the Service you acknowledge and, to the extent permitted by law, consent to your personal information being transferred to, stored in, and processed in the United States and such other countries, which may have different privacy protections than Australia. Where APP 8 applies, this consent means we are not obliged to take steps to ensure overseas recipients comply with the APPs and we will not be accountable under the Privacy Act for their handling of your information, to the extent permitted by law.

7. Retention and deletion

We retain personal information while your account is active and for as long as reasonably necessary for the purposes described in this policy. When you delete records in the app, they are removed from your active account, but complete deletion from our systems may take up to approximately 30 days. Residual copies may persist in backups for a limited period thereafter.

You can permanently delete your account at any time from Settings in the app. Account deletion permanently removes your server-side records, receipt images, and account, and is irreversible. We may retain information after deletion where retention is required or permitted by law (for example, transaction records), and we may retain de-identified or aggregated data indefinitely.

8. Access, correction, and your choices

Most of your data is directly visible and editable in the app, and you can export your records at any time (PDF or CSV). You may also request access to, or correction of, the personal information we hold about you by contacting us. We will respond within a reasonable period. We may decline a request where the law permits us to, and where we do we will tell you why. We may need to verify your identity before actioning a request, and we may charge a reasonable fee for access requests where permitted by law.

You can stop all collection by us by deleting your account and uninstalling the app.

9. Users outside Australia

The Service is directed at users in Australia. If you use the Service from the European Economic Area or the United Kingdom, we process your personal data on the legal bases of performance of a contract (providing the Service you request), our legitimate interests (operating, securing, and improving the Service), compliance with legal obligations, and consent where required. You may have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Account deletion and export in the app satisfy erasure and portability requests; for anything else, contact us.

10. Children

The Service is not directed at children and is intended for users aged 16 or over. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has provided us personal information, contact us and we will take reasonable steps to delete it.

11. Changes to this policy

We may update this policy from time to time. The updated policy takes effect when published at this page, and the date at the top shows when it was last revised. Where a change materially reduces your rights we will take reasonable steps to notify you, such as a notice in the app or on our website. Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy to the extent permitted by law.

12. Complaints and contact

Questions, requests, or complaints about privacy can be sent to support@taxtracker.au. We take privacy complaints seriously and will investigate and respond within a reasonable period. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).