Privacy Policy

What we collect

• Email (for authentication)
• Tax data you upload yourself (payslips, receipts, invoices, bank statements)
• Preferences (language, mode, persona)
• Visa number, postcode, ABN (if you provide it)

No invasive 3rd-party tracking. Google Analytics helps us understand page views and aggregate journeys. No ad pixels. No data resale.

We practise data minimisation: we only collect what's used. We do NOT store your passport number or date of birth (they served no purpose). Your nationality is used only for tax-residency rules and Medicare agreements.

Where it's stored

Your data is stored on Supabase (Sydney region, Australia). The server code runs on Vercel (Sydney region). No data leaves Australia, except when you use our OCR via Gemini Flash (Google AI Studio) to extract info from your documents, in which case the image is sent to Google and processed under their policy.

Security & retention

Each user can only access their own data (row-level isolation in the database). The most sensitive fields (TFN, super fund member number, API key) are encrypted on top of the database's at-rest encryption.

We keep your tax data for as long as it's useful to you (the current and prior financial years you haven't cleared). You can delete your imported bank statements/transactions anytime from settings, and delete your account (and everything in it) permanently whenever you want.

TFN (Tax File Number)

The TFN is regulated by the Privacy (Tax File Number) Rule 2015. Hello June does not ask for your TFN in the main flow. If you provide it in settings, it is stored encrypted and never displayed in clear after entry.

Your rights

• Export all your data in one click (/settings → Backup)
• Delete your account permanently anytime
• Request a copy of your data
• Request a correction

Cookies

Hello June uses essential cookies for authentication and may use Google Analytics to measure site traffic. No advertising cookies.

Contact

Questions or requests: help@hellojune.au