Felloship Privacy Policy (Australia)

Last updated: 2025-12-23

This Privacy Policy explains how Felloship ("Felloship", "we", "us") collects, uses, stores, and shares personal information when you use the Felloship mobile and web application (the "App"). We aim to comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Information we collect

We collect information you provide directly, information created when you use the App, and limited technical/log information.

• Account and profile information: name, email address, photo (if provided), phone number (if provided), authentication provider, user ID, and account metadata (created/last login).
• Co-ownership information: felloship name, member names and emails, invitation status, and ownership roles.
• Property and financial information: property address, purchase price, loan terms (interest rate, term), loan calculations, repayment schedules/records, and notes you enter.
• Documents and files: documents you upload (such as contracts, reports, invoices) and file metadata (file name, size, type, uploader, version history).
• Communications: email addresses used for invitations and account-related emails.
• Technical and log data: device/app data and service logs (e.g., timestamps, IP address, device identifiers, and error logs) generated by our infrastructure providers.

How we collect information

We collect information when you:

• Create an account or sign in.
• Create/join a felloship and invite members.
• Enter property/loan/repayment information.
• Upload documents.
• Interact with the App (which generates operational logs via our service providers).

How we use information

We use information to:

• Provide and operate the App (authentication, co-ownership management, calculators, loans, repayments, and document storage).
• Send service communications (invitations, verification, password resets, and account notices).
• Secure the App, prevent abuse, and troubleshoot issues.
• Improve features and user experience via Firebase aggregated insights.
• Ensure compliance with legal obligations (e.g. tax, anti-money laundering) where applicable.

Commercial service messages (if any) will comply with the Spam Act 2003 (including opt-out mechanisms). We do not sell personal information or use it for third-party advertising.

Legal Bases

We collect and process your information under the following legal bases:

• Australia: Legitimate business functions under APP 3 (Collection) and APP 6 (Use and Disclosure).
• EU / EEA / UK: Contractual necessity (to provide the service), legal obligation, or legitimate interests.
• California: Business purposes as defined by CCPA/CPRA.

How we share information

We share information in limited ways:

• With your co-owners: information you add to a felloship is visible to other members of that felloship.
• With service providers that help us run the App, including:
  • Firebase (Google) for authentication, Firestore database, Cloud Storage, Cloud Functions, and hosting.
  • Our email provider (Namecheap PrivateEmail via Nodemailer) to send invitation and account emails.
  • Apple or Google when you use social sign-in (where applicable).
• Legal/safety reasons or business transfer (e.g., merger or acquisition).

Overseas disclosure of personal information

We use cloud service providers to host and process App data. Personal information may be stored or processed outside Australia depending on our cloud configuration and the locations of our providers' systems (primarily Google Cloud/Firebase locations).

• Our primary Firebase data location is Sydney, Australia, but select processing may occur in other regions.
• Where we disclose personal information to overseas recipients, we take reasonable steps to ensure it is handled in a way that is consistent with the Australian Privacy Principles. International transfers may rely on Standard Contractual Clauses (SCCs) or comparable safeguards.

Data storage and retention

• We store account data, felloship data, loans, repayments, and invitations in Firebase Firestore.
• We store uploaded files in Firebase Cloud Storage, with file metadata stored in Firestore.
• We retain personal information for as long as needed to provide the App and for backup/security/audit purposes, unless a longer period is required by law.

Account and data deletion

• In-app deletion: You can delete your account in the App settings. You can delete a felloship from within the App; this removes the felloship record and associated items such as loans, invitations, and documents (subject to the notes below).
• Web deletion request: You can also request account deletion and associated data deletion at: join.felloship.app/delete.

Shared content or records needed for other co-owners or for compliance may be retained until no longer required. Backup copies and logs may persist for a limited period.

Your choices and rights

You can manage your data directly in the App (e.g., update profile, manage felloship members/documents, delete account). Depending on your region, you may have additional rights:

• Australia: Access and correction rights under APP 12-13.
• EU / EEA / UK: Rights to access, rectify, erase, restrict processing, object, port data, and withdraw consent.
• California: Rights to know, delete, correct, and opt-out of sale/sharing (though we do not sell your data).

To exercise these rights, or for help with deletion, contact us at admin@felloship.app. We respond within one month (45 days for CCPA requests).

Security

We use technical and organisational measures to protect personal information, including:

• All traffic uses TLS (Transport Layer Security).
• Firebase encrypts data at rest and in transit.
• Access controls and security rules enforced at the database and storage level.

No system is 100% secure, so we cannot guarantee absolute security.

Children's privacy

Felloship is not intended for children under 18. We do not knowingly collect personal information from minors.

Complaints

If you have a complaint about how we handle personal information, contact us at admin@felloship.app with details. We will respond within a reasonable timeframe (usually within 30 days).

If you are not satisfied with our response, you may contact:

• The Office of the Australian Information Commissioner (OAIC)
• Your local data protection authority (if outside Australia).

Changes to this policy

We may update this policy from time to time. We will give at least 14 days' notice via email or in-app banner for material changes. We will update the "Last updated" date above. Continued use after the effective date indicates acceptance.

Contact us

If you have questions about this policy or your data, contact us at admin@felloship.app.

Disclaimer

Felloship is not a lender, broker, or financial advisor. Content is general information only. Review any financial decisions with qualified professionals.