Privacy Policy

[Business name] (ABN [ABN]) ("we", "us") operates BPTBuddy. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we collect, why, and your choices.

What we collect

• Account details - your name, email address and profile picture from Google when you sign in.
• Your study data - highlights, comments, your own notes, and settings such as whether you have seen the welcome tour.
• Subscription details - your email, plan, subscription status and Stripe customer reference. Card details are collected and held by Stripe, never by us.
• Usage information - pages viewed, features used (for example searches, flashcards and highlights), device and browser type, approximate location derived from your IP address, and session recordings of how the site is used. Text you write in your own notes and highlight comments is masked from recordings.

Why we collect it

• to sign you in and provide the Service, including saving your highlights and notes;
• to process payments and manage your subscription;
• to understand how the Service is used so we can fix problems and improve it; and
• to contact you about your account, your subscription or important changes.

We do not sell your personal information, and we do not use it for advertising.

Who we share it with

We use trusted service providers who process information on our behalf:

• Google - sign-in;
• Stripe - payments and billing;
• Vercel - website hosting;
• Neon - our database; and
• PostHog - product analytics and session recordings.

These providers may store information outside Australia, including in the United States. We take reasonable steps to ensure they protect it consistently with the Australian Privacy Principles. We may also disclose information where the law requires.

Cookies and local storage

We use a small number of cookies and browser storage items to:

• keep you signed in;
• remember that you have seen the welcome tour;
• remember preferences such as light or dark theme and your recent searches (stored only in your browser); and
• measure usage through PostHog.

Blocking cookies may stop parts of the Service from working.

How long we keep it

We keep your information while your account is active and as needed to provide the Service. If you ask us to delete your account, we delete your study data and account details, except records we must keep by law (such as payment records).

Security

Information is transmitted over encrypted connections and stored with providers that maintain industry-standard security. No system is completely secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.

Your rights

You can ask to access or correct the personal information we hold about you, or ask us to delete your account, by emailing [contact email]. We will respond within a reasonable time, usually 30 days.

Complaints

If you have a concern about how we handle your information, contact us first at [contact email]. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We may update this policy. We will post the new version here and update the date above. See also our Terms of Use.