⚠️ Owner note: Have this reviewed by a privacy lawyer before launch. Replace all bracketed sections with your details.
Last updated: [Date] · Effective: [Date]
This Privacy Policy explains how Jack Sephton (ABN: 34 626 845 424) ("we", "us", "Tayla") handles personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy and Other Legislation Amendment Act 2024.
1. What Information We Collect
Account data (stored on our servers): Name, email address, hashed password, consent records, and consent timestamps.
Financial data (stored securely on our servers): Weekly income figures, budget entries, health inputs, goal amounts. This data is encrypted and only accessible by you.
Category data (only if you consent — APP 3 compliant): Anonymised spending category labels (e.g. "Groceries", "Transport"). Never includes dollar amounts, descriptions, or any personally identifiable financial information.
2. How We Use Your Information
Account data is used to authenticate you and maintain your account. Category data (if consented) is used to display relevant advertising and to support free access to the Service. We never sell or share your financial amounts, personal financial situation, or any data that could identify your financial health to third parties.
We apply the "fair and reasonable" test required under the 2024 amendments before any data use. Using anonymised spending categories for relevant advertising — with your explicit consent — meets this standard. Sharing financial amounts or personal financial situations would not, and we do not do this.
3. Consent (APP 3 & 2024 Amendments)
Consent to category data sharing is separate, specific, voluntary, and freely given. You are not required to provide this consent to use Tayla. You can withdraw consent at any time via Settings. Once withdrawn, we will cease relying on that consent for future use or disclosure immediately, in accordance with OAIC guidelines and the amended Privacy Act.
4. Overseas Disclosure (APP 8)
Where advertising partners are located overseas, we take reasonable steps to ensure they are subject to a privacy framework substantially similar to the APPs, or we obtain your specific consent for that disclosure. We will not disclose personal information to overseas recipients who do not meet these requirements.
5. Security (APP 11)
We take reasonable steps to protect personal information from misuse, loss, and unauthorised access. Passwords are hashed before storage. Financial data is encrypted and stored securely on Tayla's servers. In the event of an eligible data breach, we will notify affected individuals and the OAIC as required under the Notifiable Data Breaches scheme.
6. Your Rights
Access (APP 12): You can view all data we hold about you via Settings → View Data.
Correction (APP 13): You can update your account details or request correction of inaccurate information.
Deletion: You can delete your account and all associated data via Settings → Danger Zone.
Withdraw consent: At any time, via Settings → Category Data Sharing toggle.
Complaints: Contact us at [your email]. If unresolved, you may complain to the OAIC at oaic.gov.au.
7. Automated Decision-Making (2024 Amendments)
The Financial Health Score is calculated automatically from inputs you provide. No automated decisions are made about you by third parties based on your Tayla data. We disclose this in compliance with the new transparency obligations under the 2024 amendments (effective December 2026).
8. Contact
Privacy enquiries: [your email address]
Postal: [Your address, State, Postcode, Australia]