Privacy Policy
Last updated: Not yet approved · Requires owner review of applicable Australian privacy rules before launch.
This is a draft framework for owner review, not a completed privacy policy. Being a sole trader or under a turnover threshold does not remove all privacy obligations. The owner must review the entity's actual services, applicable Australian privacy rules, overseas providers and data handling before launch.
1. What We Collect
We collect only data needed to operate membership, billing and redemption: your name, email, login credentials, optional postcode and profile photo. We do not collect casework, income, disability status or reasons for receiving support. Marketing consent is recorded separately and is not pre-ticked.
2. Separation from AAE Services
This rewards database is kept separate from All Access Experiences' operational app. We do not import clients, case notes, NDIS details, family support records, staff casework or child protection information. The rewards app does not reveal whether a member also receives AAE services.
3. What Partners See
On a legitimate scan, partners receive only the minimum verification data needed: first name and surname initial (or approved display name), optional consented photo, current eligibility and offer details. We never reveal card numbers, addresses, email, full birth dates, billing problems or welfare history to cashiers.
4. Verification Tokens
Your digital card uses server-generated, cryptographically random QR tokens with short validity (approximately 30-second refresh, 60-second expiry). We store only a token hash where practical. A screenshot can still be shared during its short validity window, partners re-verify live at the counter.
5. No Sale of Data
We do not sell member data, share member email lists with partners, scrape contacts or use client welfare information for promotion. Partners cannot directly message or export the member audience, promotions are submitted to AAE for approval.
6. Photos & Biometrics
Optional photos are for visual verification only with clear consent. We do not use face recognition, biometric matching or government ID uploads. The partner may conduct its own legally required check, but the app does not retain a copy of the ID by default.
7. Your Rights
You can request data export, correction or deletion from Account. Deletion warns about active subscriptions and provides cancellation. Financial evidence may be retained even after profile deletion as required by law; other data is minimised or pseudonymised where possible.
8. Marketing
Promotional messages are sent only with separate consent, with sender identification and an easy unsubscribe that does not require login. Suppression is applied immediately. Transactional messages (payment confirmations, card updates) are always sent.
9. Storage
Member data is stored in Australia on Australian-based infrastructure. We do not transfer or store member personal data with overseas providers. Data retention is kept to the minimum period required to operate membership, billing and redemption, after which records are deleted or de-identified.
Version: Draft · Status: Pending owner review · This text is a build specification, not a certificate of legal compliance.