Privacy Policy

1. Current state — please read

AusTravla is not yet launched ("coming soon"). Right now:

• The public website collects only a small amount of personal information — an email address you give us if you ask to be notified when the app launches (a "notify me" / register-interest field). That is the only personal information the website collects today.
• The app described in the sections below is still in development. Those sections explain how we will handle personal information once the relevant features go live. They are written now so this policy is ready and transparent, but features that are not yet switched on do not collect anything yet.

Where a section applies only to the forthcoming app, it is marked (app — not yet live).

2. Who we are and how to contact us

AusTravla is operated by Cypaction Pty Limited ("we", "us", "our"). We are an Australian company bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Privacy contact: hello@austravla.com.au

3. The personal information we collect

Now (website)

• Interest-registration email — the email address you provide to be notified about the app launch, and the fact and date you registered.

Later (app — not yet live)

Once the relevant features are switched on, we expect to collect:

• Account information — your email address and password (authentication is handled by Supabase Auth; passwords are stored in hashed form, not in readable text), and, if you use them, Sign in with Apple or Google sign-in identifiers.
• Profile information — a public handle/username and display name, an optional avatar, and other profile content you choose to add. Your handle and public profile are visible to other users — please do not use your full legal name as your handle if you do not want it public.
• "Rig" profiles — details of your vehicle/camp setup (for example vehicle type, ground clearance, rig length, sleep setup, and optional make/model/year), used to match listings to your setup.
• Your contributions (user-generated content) — suggested edits and confirmations to listings, ratings, comments, reports/flags you submit, and — once that feature is enabled — photos. Photos are not yet enabled; when they are, they will be covered by a specific collection notice and the Terms of Service photo licence.
• Approximate location — your device's approximate location, used to show nearby listings and power map features while you are using the app.
• Business/supplier information — for businesses that claim or pay for a listing: business contact details and billing information. Payment processing is expected to be handled by a third-party processor (Stripe); we do not intend to store full card numbers.
• Communications and support — messages you send us and support requests.
• Basic technical/diagnostic information — limited device and app information needed to operate the service, keep it secure, and fix faults.

4. How we collect personal information

We collect personal information:

• directly from you — when you register interest, create an account, build a rig profile, or contribute content;
• automatically — basic technical information as you use the app, and approximate device location where you have given the relevant permission; and
• from third parties you choose to use — for example, the sign-in identifier passed to us if you use Sign in with Apple or Google.

We also build the app's listing data from open government datasets and OpenStreetMap. That source data is about places, not about you, and is not personal information about our users.

5. Why we use personal information

We use personal information to:

• notify you about the app launch, if you asked us to;
• provide and improve the app and website;
• show you relevant nearby listings and match listings to your rig;
• enable contributions, ratings, comments and community features;
• keep the platform safe and accurate (moderation, handling reports/flags);
• verify and bill businesses/suppliers (later);
• respond to your messages and support requests; and
• comply with our legal obligations.

We only use or disclose personal information for the purpose we collected it, for a directly related purpose you would reasonably expect, or as otherwise permitted under the APPs (APP 6).

6. Community contributions are public

If you contribute to AusTravla (suggested edits, ratings, comments, reports, and later photos), the content you choose to make public will be visible to other users, along with your public handle. Community contributions are user-generated and are not verified by us unless a listing is separately marked "verified" (a business/trust status — see the Terms of Service). Please do not include personal information about yourself or others in public contributions that you do not want to be public.

7. Who we disclose personal information to

We disclose personal information to:

• service providers who help us run the service, under contract — currently our hosting and backend provider Supabase (see section 8), and, once those features are live, a payment processor (Stripe) and a push-notification provider (Firebase Cloud Messaging);
• other users — but only the content and profile information you choose to make public; and
• others where required or authorised by law, or to protect safety.

We do not sell personal information and we do not disclose it to advertisers.

8. Where your information is stored, and overseas disclosure (APP 8)

Storage location. Our database and stored files are hosted with Supabase in the ap-southeast-2 (Sydney, Australia) region — that is, on Australian infrastructure. We prefer Australian data hosting.

Content delivery (relevant once photos and other media are served). To deliver images and other media quickly, we expect to serve them through a content delivery network (CDN). A global CDN may cache copies of publicly displayed images at edge locations outside Australia. Where that happens, personal information visible in a public image (for example a face or a readable number plate in a user photo) may be cached or accessed outside Australia. Public content is, by its nature, accessible to people overseas.

Under APP 8 of the Privacy Act, before we disclose personal information to an overseas recipient we take reasonable steps to ensure the recipient handles it consistently with the APPs, and we generally remain accountable for that handling (Privacy Act s 16C). We keep the storage origin in Sydney, strip hidden EXIF metadata (including embedded GPS) from uploaded photos, and disclose the CDN arrangement here and at the point of upload.

9. Security of your information (APP 11) and data breaches

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure (APP 11). These steps include database row-level security (RLS), encryption in transit, hashed passwords, stripping EXIF metadata from uploaded photos, and limiting internal access.

If an eligible data breach occurs, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

10. Access and correction (APP 12 and APP 13)

You can ask us to access the personal information we hold about you, and to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. You can also delete your own contributions, which removes them from the live app.

To make a request, contact us at hello@austravla.com.au. We will respond within a reasonable time and in line with the APPs. If we refuse access or correction, we will tell you why and how you can complain.

11. How to complain

If you think we have breached the Privacy Act or the APPs, please contact us first at hello@austravla.com.au so we can try to resolve it. We will acknowledge your complaint and respond within a reasonable time.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992

12. Cookies and analytics

The public website uses no third-party advertising or ad-tracking cookies. It uses only cookies and technologies that are strictly necessary to make the site work. We do not use third-party ad networks or behavioural advertising anywhere in AusTravla.

13. Automated decision-making and AI (app — not yet live)

AusTravla is designed as an AI-native service. AI agents help moderate content and perform routine admin tasks, and a planned feature summarises community comments. Decisions that could significantly affect you (for example removing your content or restricting your account) are designed to involve human review before they take effect.

From 10 December 2026, the Privacy Act 1988 (Cth) — as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth) — requires a privacy policy to include specified information about certain automated decisions that use personal information and could reasonably be expected to significantly affect the rights or interests of an individual (new APP 1.7). We will update this policy to meet that obligation before it applies to any automated decision we make.

14. Children and young people

AusTravla is a general-audience app that families may use, so people under 18 may use it. We take extra care with the personal information of children and young people, consistent with the APPs, and we will comply with the Children's Online Privacy Code once it commences.

15. Changes to this policy

We may update this policy from time to time. If we make a material change we will take reasonable steps to notify you (for example in-app or on the website). The "last updated" date above shows the current version.

16. Effective date

This policy is effective from 9 July 2026.

← Back to home