Privacy Policy
Effective: 08 September 2025. We collect the minimum data needed to operate Tai Ora and its features. We do not sell personal data.
1. Compliance
We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also follow equivalent requirements in other regions, including the NZ Privacy Act 2020 and EU GDPR.
2. Data breaches
If a data breach is likely to cause serious harm, we will notify affected individuals and the regulator in line with the Notifiable Data Breaches scheme in Australia.
3. Information we collect
- Account and profile data: name, email, hashed password, preferences
- Wellness and app inputs: notes, routines, wellbeing reflections you choose to share
- Media uploads: photos, videos, audio, timestamps, device type
- Usage and device data: logs, IP, cookies, app version
- Communications: messages, survey responses, support requests
4. How we use information
We use data to operate and improve the Services, enable creator tools, communicate with you, conduct analytics, detect fraud and security issues, and comply with legal obligations.
5. Sharing & disclosure
We share data with service providers under contract, with brands only if you explicitly opt in, and as required by law. We may share aggregated or de-identified insights. We do not sell personal data.
6. Retention & security
We retain account data while active, and content until deleted or licence expiry. We use encryption and safeguards, but no system is 100% secure.
7. Your rights
You may access, correct, or delete your information, withdraw consent, or opt out of marketing. Complaints can be made to the OAIC in Australia.
8. Governing law
This Policy is governed by the Privacy Act 1988 (Cth) and Australian law.