Privacy Policy

1. Our Privacy Commitment

AceAssist is committed to handling personal information in line with applicable Australian privacy law, including the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Notifiable Data Breaches (NDB) scheme.

2. What Information We Collect

• Account details such as name, email, login data, and authentication settings.
• Content you add in the app, including tasks, contacts, budgets, expenses, income, subscriptions, shopping and pantry items, calendar items, journal notes, media entries, document metadata, and recordings.
• Technical and usage data such as device/browser information, logs, and security events.
• Support and communications data when you contact us.

Some data may be sensitive information under Australian law (for example, health-related notes). We only collect sensitive information where reasonably necessary and with consent where required by law.

If you want additional confidentiality, please apply your own client-side encryption before upload for any content you want to keep highly private. AceAssist does not provide end-to-end client-side encryption across all modules.

3. How We Collect Information

• Directly from you when you create an account or use app features.
• From linked providers you choose to use (for example, Google sign-in).
• Automatically through app logs, cookies, local storage, and security monitoring.

4. Why We Use Information

• To provide, maintain, secure, and improve the service.
• To authenticate users and prevent fraud or misuse.
• To send service communications, including security and operational notices.
• To run user-initiated features such as OCR text extraction and shopping price lookups.
• To comply with legal obligations.

5. Disclosure of Personal Information

We may disclose personal information to:

• Hosting, infrastructure, storage, analytics, and support providers acting on our instructions.
• Professional advisers (for example legal, audit, or security advisers).
• Regulators, law enforcement, or courts where required or authorised by law.

Current categories of service providers include:

• Supabase (database/storage infrastructure you connect to).
• Google services for authentication and OCR, where enabled/configured.
• ScraperAPI and retailer endpoints for optional shopping price lookup features.
• Upstash services for request rate limiting, where configured.

6. Overseas Disclosure

Some providers may process data outside Australia. Where this occurs, we take reasonable steps to ensure overseas recipients handle personal information in a manner substantially similar to the APPs, or otherwise as permitted by law.

7. Direct Marketing

We only send marketing communications in line with applicable law, including the Spam Act 2003 (Cth). You can opt out of marketing messages at any time.

8. Data Security and Retention

We use reasonable technical and organisational safeguards to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. We retain personal information only as long as needed for the purposes above or as required by law.

Data retention periods may vary by feature and legal obligation. You can request deletion or correction of account data by contacting us.

9. Access and Correction

You may request access to personal information we hold about you, and request corrections if it is inaccurate, incomplete, out of date, irrelevant, or misleading. Contact us at admin@aceassist.site.

10. Complaints

If you have a privacy complaint, contact us first at admin@aceassist.site. We aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

11. Data Breach Notifications

If an eligible data breach occurs, we will assess and notify affected individuals and the OAIC as required under the NDB scheme.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with the updated date.