Privacy Policy

What we collect

• Email (for authentication)
• Tax data you upload yourself (payslips, receipts, invoices, bank statements)
• Preferences (language, mode, persona)
• Visa number, postcode, ABN (if you provide it)

No invasive 3rd-party tracking. Google Analytics helps us understand page views and aggregate journeys. No ad pixels. No data resale.

We practise data minimisation: we only collect what's used. We do NOT store your passport number or date of birth (they served no purpose). Your nationality is used only for tax-residency rules and Medicare agreements.

Where it's stored

Your primary data is stored on Supabase (Sydney region, Australia). The server code runs on Vercel (Sydney region). When you use OCR, your document may be sent to the following processors to extract its information:

• Google Gemini Flash (AI Studio), for fallback OCR extraction. Data may be processed outside Australia. Google may retain API prompts, their context and responses for up to 55 days to detect and prevent abuse.
• Google Document AI, to parse receipts, invoices, payslips and bank statements. It is configured in the us region (United States). For these synchronous requests, the document is processed in memory and is not persisted to disk; some request metadata may be logged temporarily.
• Veryfi (United States), to parse receipts and invoices. Automatic deletion is enabled: the document is deleted from Veryfi after processing.

Security & retention

Each user can only access their own data (row-level isolation in the database). The most sensitive fields (TFN, super fund member number, API key) are encrypted on top of the database's at-rest encryption.

We keep your tax data for as long as it's useful to you (the current and prior financial years you haven't cleared). You can delete your imported bank statements/transactions anytime from settings. Account deletion is executed immediately on request; residual copies in encrypted backups are purged within 30 days.

TFN (Tax File Number)

The TFN is regulated by the Privacy (Tax File Number) Rule 2015. Hello June does not ask for your TFN in the main flow. If you provide it in settings, it is stored encrypted and never displayed in clear after entry.

Your rights

• Export all your data in one click (/settings → Backup)
• Delete your account permanently anytime
• Request a copy of your data
• Request a correction

Cookies

Hello June uses essential cookies for authentication and may use Google Analytics to measure site traffic. No advertising cookies.

Contact

Questions or requests: help@hellojune.au