Privacy Policy

1. Introduction

Tracker Tech Pty Ltd (ABN 19 694 000 961), trading as Track It Today ("we", "us", or "our"), is committed to protecting personal information and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you use our mobile applications:

• Grocery Tracker
• Budget Tracker
• InvoiceBuddy
• Tax Tracker

and any related marketing or support websites (together, the "Services").

This Policy applies to individuals who use the Services in Australia. Where individuals who are not Australian citizens or permanent residents use the Services while in Australia, this Policy applies to the extent required by Australian law.

2. Personal Information We Collect

We collect personal information by lawful and fair means. The kinds of personal information we collect include the following categories.

2.1 Identifiers and Contact Information

• name;
• email address;
• date of birth; and
• account and authentication information.

2.2 User-Generated Content

Information you choose to input, upload, store or generate when using the Services, which may include financial records, invoices, receipts, documents, images, notes, reports, and other content relevant to the features you use.

If you input personal information about other individuals (for example, customers on invoices), you represent that you are authorised to do so and have complied with any applicable notice or consent requirements.

2.3 Communications

• customer support requests, in-app messages, chat content and correspondence you submit; and
• records of our communications with you.

2.4 Technical, Usage and Diagnostic Information

Information collected automatically when you access or use the Services, including:

• IP address;
• device identifiers and online identifiers (including device ID and, where available, advertising ID);
• device type, operating system, browser type (for websites), app version, language and time zone;
• usage and interaction data; and
• diagnostic and performance data (including crash logs).

2.5 Location Information

Where a feature requires it and you enable the relevant permissions, we may collect location information (including GPS-based data). Location collection is optional and can be disabled through your device settings, however some features may not function correctly without location access.

2.6 Payment Information

Subscriptions and in-app purchases are processed by third-party platform providers (such as Apple and Google). We do not collect or store payment card details for these transactions.

2.7 Google Account Data (Gmail)

If you connect your Google account, we access Gmail message metadata and attachments you authorize to extract transaction information and build your transaction tables.

The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Collect Personal Information

We collect personal information:

• directly from you when you create an account, use the Services, submit content or contact support;
• automatically through your use of the Services;
• from third-party accounts you connect (such as Google/Gmail) after you provide consent; and
• from service providers acting on our behalf, where permitted by law.

You may interact with us anonymously or using a pseudonym where lawful and practicable, however this may limit the functionality available to you.

4. Why We Collect, Hold, Use and Disclose Personal Information

We collect, hold, use and disclose personal information for purposes including:

• providing, operating and maintaining the Services;
• creating and administering user accounts and access controls;
• processing subscriptions and managing entitlements;
• providing customer support;
• extracting transaction details from attachments and generating transaction tables at your request;
• analytics, research, troubleshooting and service improvement;
• communicating with you about service updates, verification, security notices and administrative matters;
• protecting the security and integrity of the Services, including fraud prevention; and
• complying with legal and regulatory obligations.

We do not sell personal information.

5. Sensitive Information

We do not intentionally collect sensitive information. If sensitive information is incidentally collected, it will be handled in accordance with applicable legal requirements.

6. Service Communications and Analytics

6.1 Service Communications

We may send verification, security, or customer support communications. You can opt out at any time by replying STOP or contacting us. We do not send marketing messages.

6.2 Analytics and Tracking Technologies

We use analytics and similar technologies (including cookies on websites and SDKs in apps, where enabled) to understand usage, measure performance and improve the Services.

6.3 No Advertising or Remarketing

We do not use advertising or remarketing SDKs on our websites or in our apps.

If this changes, we will update this Policy and obtain any required permissions.

7. Disclosure of Personal Information

We may disclose personal information to:

• service providers who assist us to operate the Services (including infrastructure, analytics, communications, security and support providers);
• AI processing providers (including Google, part of Alphabet Inc.) to analyze attachments and generate transaction data for user-visible features;
• messaging providers (including the WhatsApp Business Platform) for verification or customer support communications;
• professional advisers;
• regulators, courts or law enforcement where required or authorised by law; and
• other parties with your consent or at your direction.

We take reasonable steps to ensure service providers handle personal information in accordance with appropriate contractual and security requirements.

8. Overseas Disclosure

We use service providers that may process, store or access personal information in locations where they operate, which may include locations outside Australia. Where overseas disclosure occurs, we take reasonable steps to ensure recipients handle personal information in a manner consistent with the Australian Privacy Principles, unless an exception applies.

9. Data Security

We implement administrative, technical and physical safeguards appropriate to the nature of the personal information we hold, including encryption in transit, access controls, monitoring and incident response procedures. While no system is completely secure, we take reasonable and proportionate steps to mitigate risks.

10. Retention, Deletion and Backups

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy or as required by law.

• Account deletion: personal information is deleted or de-identified from active systems within a reasonable period (generally within 30 days), subject to legal or security requirements. Attachments: Gmail attachments are processed to extract transaction data and deleted immediately after processing.
• Backups: residual copies may persist in backups for a limited period and are overwritten or removed in accordance with backup lifecycles (generally within 90 days).
• De-identified data: may be retained for analytics and service improvement.

11. Access and Correction

You may request access to, or correction of, personal information we hold about you by contacting us. We may need to verify your identity and will respond within a reasonable period. You can revoke Google account access at any time in your Google account settings.

If you cannot access the app, submit a data deletion request here: Data Deletion Request

12. Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from an individual under the age of 18 without appropriate authority or consent, we will take reasonable steps to delete that information as soon as practicable.

13. Complaints

If you have a complaint about how we handle personal information, please contact us. We will investigate and aim to respond within 30 days. If you are not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will be available through the Services.

15. Contact

Tracker Tech Pty Ltd
Trading as Track It Today
Email: support@trackertech.com.au