Privacy Policy

AussieBuckets is built by Adriana Acero, operating from Australia. This policy explains what AussieBuckets collects, why, and what you can do about it. It's written to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) — even though a business this size may fall under the Privacy Act's small business exemption, we've chosen to follow it anyway, because "we never connect to your bank" only means something if the rest of how we handle your data holds up too.

The one rule everything else follows

AussieBuckets never connects to your bank account. There is no bank login, no Open Banking connection, and no third party that can see your online banking password — because we never ask for it. You export a CSV statement yourself and drop it in.

What we collect

• Your email address and, if you give it, your first name — to create your account and let you log back in.
• Your pay cycle, income figures, and the buckets/categories you set up.
• The transactions in the CSV files you import (merchant, amount, date) — never your bank login.
• Any Offset, HECS-HELP or Super balances you choose to type in manually — these are entered by you and never calculated automatically or pulled from anywhere.
• If you use the shared-household feature: your partner's name and email, which you provide to invite them.

We don't collect your date of birth, phone number, physical address, or any government ID. Card and payment details are handled entirely by Stripe (see below) — we never see or store your card number.

What we don't do

• We don't connect to your bank or ask for your online banking password, ever.
• We don't sell or share your financial data with advertisers or data brokers.
• We don't run your data through a third-party AI or language model — categorisation is done with rules stored in our own database, not an AI service. There is nothing about your finances that leaves our systems to be "read" by an AI.
• We don't show ads.
• We don't currently use analytics, tracking pixels, or advertising cookies. The only cookie AussieBuckets sets is the one that keeps you logged in — see "Cookies" below. If that ever changes, this policy and a consent banner will change first.

Who processes your data, and where

We use a small number of specialist providers to run AussieBuckets — each one only does the specific job listed here, under their own data-processing terms:

• Supabase — our database and login system. Your account data and imported transactions are stored on Supabase's infrastructure in Asia Pacific (Tokyo, Japan).
• Vercel — hosts the AussieBuckets website and app (United States).
• Stripe — processes subscription payments. Stripe handles your card details directly; we only ever see that a payment succeeded, not your card number.
• Resend — sends the sign-in ("magic link") emails and any receipts.

Because our database is hosted overseas (Japan) rather than in Australia, this counts as an overseas disclosure of personal information under APP 8. Each provider above is a specialist infrastructure company bound by its own security and data-processing terms — none of them are permitted to use your data for their own purposes.

Cookies

AussieBuckets currently sets only strictly necessary cookies — the one that keeps you signed in. We don't use analytics, advertising, or tracking cookies of any kind today, so there's nothing to ask your permission for yet. If we ever add analytics or advertising cookies, we'll update this page and show a cookie banner where accepting and declining are equally easy — before any non-essential cookie loads.

Your rights, and how to use them

You can ask to see a copy of your data, correct it, or delete your account and everything attached to it at any time:

• Delete it yourself — Settings → "Delete my account" inside the app removes your login and everything tied to you immediately. If you share a household with a partner, only your own access is removed; your partner keeps the shared data.
• Or email us — write to support@aussiebuckets.app for access, correction, or deletion requests, or if you'd rather we do it for you.

If you're not satisfied with how we've handled a privacy request, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Who can see your data

Only you — and, for shared-household features, the partner you invite. Our infrastructure providers listed above process data on our behalf under standard processing terms, but none of them use it for their own purposes.

Minimum age

AussieBuckets is a paid financial-tracking subscription and isn't intended for anyone under 18.

Changes to this policy

We'll update the date at the top of this page whenever this policy changes, and email active users about any change that materially affects how your data is used — we won't change the deal in silence.

Contact

Questions about your data or this policy: support@aussiebuckets.app.