Privacy policy

1. Who we are

DizitalFabrik Pty Ltd ("DizitalFabrik", "we", "us", "our") is an Australian-registered consultancy (ABN 13 703 061 572) based in Sydney. We deliver software, systems integration and cloud engineering for client organisations, and we develop and operate our own mobile and web applications.

This Privacy Policy explains how we handle personal information in both contexts: when you contact us or engage us as a client, and when you use an application we publish (together, our "Services"). Sections 2 to 7 describe the applications, where most personal information is collected. Section 8 covers client and enquiry data.

Our contact for privacy matters: Reveal email

2. Information we collect

2.1 Account & registration information

When you create an account we collect:

• Email address (required for login and notifications)
• Display name or username
• Password (stored as a one-way hash — we never see it in plain text)
• Profile photo (optional, if you choose to upload one)
• Date of birth (where required for age verification)

2.2 Usage & activity data

As you use our Services we automatically collect:

• Log data (IP address, device type, operating system, app version, timestamps)
• Feature interactions and in-app events (to improve the product)
• Crash reports and performance diagnostics
• Search queries and content you post or share within the app

2.3 Communications

If you contact us we keep records of that correspondence to resolve your issue and improve our support.

2.4 Device & push-notification tokens

To send push notifications we store a device push token provided by Apple (APNs) or Google (FCM). You can revoke notification permission in your device settings at any time.

2.5 Information we do NOT collect

• Payment card or banking details (we use third-party payment processors where applicable)
• Precise GPS location (unless a specific feature explicitly requires it and you grant permission)
• Contacts from your address book

3. How we use your information

Purpose	Legal basis (Australia Privacy Act)
Create and maintain your account	Contract performance
Send transactional notifications (login codes, alerts)	Contract performance
Send optional marketing & product updates	Consent (opt-in; revocable)
Improve product features and fix bugs	Legitimate interest
Detect and prevent fraud and abuse	Legitimate interest / legal obligation
Comply with legal obligations	Legal obligation

4. Notifications

We send two categories of notification:

• Transactional — account security alerts, password resets, and service updates. These are essential to running the service and cannot be individually disabled (you may delete your account to stop them entirely).
• Marketing & product — new features, tips, and relevant content. These are opt-in and you can unsubscribe at any time via in-app settings or the unsubscribe link in any email.

5. Sharing your information

We do not sell personal information. We share data only in these circumstances:

• Service providers — cloud hosting, analytics, crash reporting, and email delivery providers acting under contract and data processing agreements.
• Legal requirements — where required by Australian law, court order, or to protect the safety of users.
• Business transfers — in the event of a merger or acquisition, users will be notified before data is transferred to a successor entity.

6. Data storage & security

Data is stored on servers located in Australia and/or the United States (AWS). We apply industry-standard safeguards:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls — staff see only what they need
• Regular security assessments and penetration testing
• Multi-factor authentication on all production systems

No method of transmission over the internet is 100% secure. If we become aware of a breach that affects your data we will notify you in accordance with Australian law.

7. Data retention

We retain account data for as long as your account is active. After account deletion:

• Personal identifiers are deleted or anonymised within 30 days
• Anonymised aggregate analytics data may be retained indefinitely
• Certain records may be kept longer where required by law (e.g. financial records for 7 years)

8. Client and enquiry information

When you contact us through this website or engage us on a project, we collect what you provide — typically a name, an email address, and what you tell us about the work. We use it to respond to the enquiry and to deliver the engagement, and we retain it for the life of the engagement plus the period required by Australian tax and corporations law.

During an engagement we may be given access to systems or data belonging to a client. That access is governed by the engagement contract and any applicable data processing terms, not by this policy. We do not use client data for any purpose other than delivering the engagement, and we do not retain copies after handover unless a contract requires it.

We do not send marketing email to enquiry contacts unless they have opted in.

9. Your rights

Under the Australian Privacy Act 1988 (Cth) and applicable state/territory legislation you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request deletion of your account and associated data
• Withdraw consent — opt out of marketing communications at any time
• Complain — lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any right, email Reveal email. We will respond within 30 days.

10. Children's privacy

Our Services are not directed to children under 13. If a Service targets or permits users aged 13–17, we apply additional safeguards including restricted content, limited data collection, and no behavioural advertising. See our Data Safety page for app-specific audience details.

If you believe we have inadvertently collected data from a child under 13, contact us immediately at Reveal email.

11. Third-party links

Our apps may contain links to third-party websites or services. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via in-app notice or email at least 30 days before they take effect. Continued use of our Services after that date constitutes acceptance of the updated policy.

13. Contact

Privacy Officer — DizitalFabrik Pty Ltd
Email: Reveal email
Registered: New South Wales, Australia