Privacy Policy

Version 3.0 · Effective Date: 11 July 2026 · Last Updated: 11 July 2026

AuzyTech Pty Ltd is committed to protecting your privacy and handling personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), the Privacy Act 2020 (New Zealand), the Personal Information Protection and Electronic Documents Act (PIPEDA) (Canada), and other applicable data protection laws. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use the SafeWalks App.

AuzyTech Pty Ltd is responsible for personal information under its control and has designated responsibility for compliance with applicable privacy laws.

For users in India, AuzyTech Pty Ltd acts as a Data Fiduciary in relation to personal data collected through the App.

1. What Information We Collect

Account Information:

Full name
Email address
Phone number
Age confirmation record (whether you confirmed you are 16 or older, or 13–15 with parental consent)
Password (stored as a one-way hash — we cannot see your password)

Location Data:

GPS coordinates during walks
Breadcrumb path of walks
Walk start and end times

Device Information:

Device push notification token (used to send alerts to your device)
Device platform (Android or iOS)

Usage Data:

Walk history and check-in records
SOS events
Subscription status and tier
Terms acceptance records (version, timestamp, IP address)
SOS call logs (date, time, and outcome of automated phone calls placed to your primary emergency contact, where the calling feature is enabled)

Billing and Payment Data (web subscribers only):

Stripe customer identifier (a reference code assigned by our payment processor)
Subscription plan, billing cycle, and renewal dates
Payment status (active, cancelled, failed)
Referral or promotional code used at checkout, if any

We do not store card numbers, CVV codes, bank account details, or full payment instrument data on our servers. This information is held exclusively by our payment processor.

Emergency Contact Data:

Email addresses of people you nominate as emergency contacts
Nomination acceptance status
Primary emergency contact designation (which accepted contact, if any, you have chosen to receive automated phone calls on SOS)

2. How We Use Your Information

We process personal information based on user consent, performance of a contract, compliance with legal obligations, and our legitimate interests in providing, maintaining, and improving the App.

By using the App, you provide meaningful consent for the collection, use, and disclosure of your personal information as described in this Privacy Policy.

Personal data is collected only for specified and lawful purposes and is not processed in a manner incompatible with those purposes.

We use your information to:

Operate and deliver the App's core safety features including walk timers, SOS alerts, and live location sharing.
Send push notifications.
Allow your emergency contacts to view your live location during an active SOS.
Maintain your walk history and allow you to review past walks.
Manage your account, subscriptions, and billing.
Comply with our legal obligations and enforce these Terms.
Improve and troubleshoot the App through anonymised usage analysis.
Communicate with you about your account or changes to the App.
Place automated phone calls to your designated primary emergency contact upon SOS activation, using your contact's registered phone number (Standard, Silver, and Gold subscribers only).
Send you promotional and service update emails about new features, improvements, and offers. By accepting these Terms you consent to receive such emails. You may unsubscribe at any time using the unsubscribe link included in any promotional email, or by contacting us at [email protected].

3. Aggregated and Anonymised Data

We may use anonymised or aggregated data that does not identify individuals for:

service improvements
analytics
research

4. Analytics and Tracking Technologies

The App may use analytics tools to understand usage patterns and improve performance.

These tools may collect device and usage data but do not identify individual users.

5. Who We Share Your Information With

We do not sell your personal information.

Information may be shared with:

Your emergency contacts
Cloud hosting providers
Push notification services
Mapping providers
Telephony provider (for automated phone calls to your primary emergency contact on SOS)

Telephony Provider
When you trigger an SOS and have a primary emergency contact designated, your primary contact's phone number is transmitted to Azure Communication Services (Microsoft) solely for the purpose of placing an automated outbound call. Azure Communication Services processes this data in accordance with Microsoft's Privacy Statement, available at https://privacy.microsoft.com. The phone number is used only to connect the call and is not retained by AuzyTech Pty Ltd beyond the call log entry described in Section 1.

Payment Processor
For web-based subscriptions, your email address and subscription details are shared with Stripe, Inc. to process payments. Stripe acts as a data processor on our behalf and handles payment information in accordance with their Privacy Policy, available at https://stripe.com/privacy. Stripe does not receive your precise location data.

Legal Requirements
We may disclose your information if required to do so by law, court order, or government authority, or where we believe disclosure is necessary to protect the safety of any person.

Business Transfer
If AuzyTech is acquired or merges with another entity, your information may be transferred as part of that transaction. You will be notified as soon as reasonably practicable.

6. Location Data – Special Notice

Location data is sensitive. We treat it accordingly:

Location is only collected while the App is actively tracking a walk or while an SOS is active.
Your live location is only visible to emergency contacts who have accepted a nomination from you and only during an active walk or SOS.
Historical breadcrumb data is stored on our servers and accessible only by you and, during an active alert, your accepted emergency contacts.
We do not share your location with advertisers, data brokers, or any other third party.

7. Data Retention

Walk breadcrumb and location data is retained for up to 30 days, after which it is deleted or anonymised.

Location history is retained solely to support the safety functionality of the App and is not intended to create long-term tracking records of user movements. Deletion may occur earlier or later than the stated timeframe depending on system maintenance cycles, backups, or technical processes.

Account data is retained until the account is deleted.

Push notification tokens are deactivated when you log out and deleted when your account is deleted.

Terms acceptance records may be retained for legal compliance purposes.

SOS call logs, including the date, time, and outcome of automated phone calls placed to your primary emergency contact, are retained for up to 30 days.

Feedback and engagement campaign submission records are retained for up to 12 months.

Billing and subscription records, including payment transaction identifiers, may be retained for up to 7 years for taxation, accounting, and legal compliance purposes, including obligations under Australian taxation law. This retention applies even after account deletion.

When you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it by law.

8. Data Security

We take reasonable technical and organisational steps to protect your personal information from unauthorised access, misuse, loss, or disclosure. These measures include:

RSA-signed JWT tokens for authentication
HTTPS encryption for all data in transit
Secure credential storage on your device (iOS Keychain / Android Keystore)
Access controls limiting which staff can access production data

We implement reasonable technical and organisational security measures designed to protect personal information in accordance with industry standards.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Law Enforcement Requests

We may disclose personal information if required by law or lawful request from government authorities.

9A. Cooperation With Law Enforcement

AuzyTech Pty Ltd may disclose user information, including account information and location data, when required to comply with applicable laws, regulations, legal processes, or lawful government requests.

This may include responding to court orders, subpoenas, or requests from law enforcement authorities investigating suspected criminal activity, threats to safety, or emergencies.

Where permitted by law, AuzyTech Pty Ltd may also disclose information when we believe in good faith that such disclosure is necessary to protect the safety of users or other individuals.

Users acknowledge that such disclosures may occur without prior notice where legally required or where immediate disclosure is necessary to prevent harm.

10. International Data Transfers

Data may be processed on secure cloud infrastructure located in Australia or other jurisdictions used by our service providers.

Our services are hosted using secure cloud infrastructure operated by reputable third-party providers. Depending on system configuration, your information may be stored or processed in Australia, the United States, or other jurisdictions where our service providers operate.

Where your data is transferred outside your country of residence, including outside the United Kingdom or European Economic Area, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

11. Data Breach Notification

If a data breach occurs that is likely to result in serious harm to any affected individual, AuzyTech Pty Ltd will notify affected users and relevant data protection authorities as required by applicable law, including the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches (NDB) scheme established by the Privacy Act 1988 (Cth), and the Data Protection Board of India where required under the Digital Personal Data Protection Act 2023. Notification will be provided as soon as practicable after we become aware of the breach.

12. Your Rights and Choices

Depending on your location, you may have additional rights under applicable data protection laws.

You have the right to:

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct any information that is inaccurate or incomplete.
Deletion — request that we delete your account and associated personal data.
Complaint — you may lodge a complaint with the relevant data protection authority in your jurisdiction, including:
- Australia — Office of the Australian Information Commissioner (OAIC): http://www.oaic.gov.au
- United Kingdom — Information Commissioner's Office (ICO): http://www.ico.org.uk
- Canada — Office of the Privacy Commissioner: http://www.priv.gc.ca
- New Zealand — Office of the Privacy Commissioner: http://www.privacy.org.nz
- India — Data Protection Board of India (DPDP Act 2023)
Withdraw Consent — you may withdraw your consent at any time by stopping use of the App or deleting your account. To unsubscribe from promotional emails only without deleting your account, use the unsubscribe link in any promotional email or contact us at [email protected].
Data Portability — you may request a copy of your personal data in a structured, commonly used format.
Restriction or Objection — you may request that we restrict or stop processing your personal data in certain circumstances.
Right to Nominate (India) — In accordance with India's Digital Personal Data Protection Act 2023, users in India may nominate another individual to exercise their data rights on their behalf in the event of their death or incapacity. To register a nominee, please contact us at [email protected].

13. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their personal information, please contact us and we will delete it promptly. Users aged 13 to 15 may use the App only with parental or guardian consent as described in our Terms and Conditions. We do not knowingly collect personal information from users aged 13–15 without such consent.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App and require you to review and accept the updated policy before continuing to use the App. The version number and effective date at the top of this document will always reflect the current version.

15. Contact

AuzyTech Pty Ltd
Email: [email protected]

Grievance Officer (India)
For users in India, you may contact our Grievance Officer at [email protected] for any concerns regarding your personal data. We aim to acknowledge your grievance within 7 days and resolve it within 30 days.