CARDA App
Last updated: 4 March 2026
This Privacy Policy explains how CARDA (“we”, “us”, “our”) collects, uses, discloses, and stores personal and non-personal information when you download or use the CARDA mobile application (“App”). This policy is designed to comply with the Google Play Store Developer Programme Requirements and applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information We Collect
We may collect and process the following categories of data when you use the App:
A. Personal Information
Information that can reasonably identify you, such as:
- Full name
- Email address
- Contact details
- Organisation name and role
- Subscription account information
We collect this information only when you provide it voluntarily (e.g., account creation, support requests, or communications).
B. Device and Usage Information
Information related to your device and how you use the App:
- Device identifiers (e.g., Android Advertising ID is not used by CARDA)
- Operating system and version
- App interaction data (e.g., pages viewed, functionality used)
- Performance and crash logs
This information is collected to help us improve the App experience and services.
C. Location Information
We do not collect precise GPS location or geolocation data through the App.
2. How We Use Information
We may use the information we collect for the following purposes:
- To provide, operate, maintain, and improve the App and services
- To authenticate users and manage accounts
- To process subscription and billing information
- To respond to support requests or enquiries
- To notify you of important updates or changes to the App
- To monitor and analyse how the App is used
We do not use personal data for advertising or behavioural targeting, and the App contains no advertisements.
3. Legal Basis for Processing (where applicable)
Under Australian privacy law and where relevant:
- We process personal data to fulfil our contractual obligations with users
- We process data to comply with legal obligations
- We process data with your consent where required
4. Third-Party Services
The App may share data with third-party services only to the extent necessary to deliver the App features, including:
- Authentication & Payments: Xero billing and subscription services
- Hosting & Data Storage: Secure cloud providers
- Crash Reporting & Analytics: Aggregated usage information to monitor App performance
These third-party services are privacy-compliant and do not use your data for advertising.
We do not share personal data with advertisers or sell data to third parties.
5. Data Security
We implement reasonable technical and organisational measures to protect information from unauthorised access, use, or disclosure. However, no security system is impenetrable, and we cannot guarantee absolute protection.
6. Data Retention
We retain personal information for as long as necessary to provide services, comply with legal obligations, or fulfil legitimate business purposes. When information is no longer needed, we securely delete or anonymise it.
7. User Rights and Choices
You may:
- Request access to your personal information
- Request correction of inaccurate or incomplete data
- Request deletion of your data (subject to legal requirements)
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at the details below.
8. Children’s Privacy
The App is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us to request its deletion.
9. International Transfers
Your information may be stored and processed in servers located outside Australia. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with applicable law.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us:
Email: people at 2earth dot net
Postal Address: 481 Sussex Inlet Road, Sussex Inlet NSW 2540, Australia
11. Changes to this Policy
We may update this Privacy Policy at any time. When we make changes, the new policy will be posted in the App and on our website (if applicable). The updated policy is effective from the date posted.
By using the CARDA App, you acknowledge that you have read and understood this Privacy Policy.