Privacy Policy

1. About this policy

Keys Down Under (“we”, “our”, or “us”) operates the Keys Down Under web application. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service, in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using Keys Down Under you agree to the collection and use of information described in this policy. If you do not agree, please do not use the service.

2. Information we collect

Information you provide directly

• Account information — your name, email address, and password when you register.
• Financial profile — income, savings, employment type, living costs, existing debts, salary sacrifice, and whether you have a HECS/HELP debt. Used solely to personalise your affordability and borrowing estimates.
• Plans and preferences — your target price and deposit goal, current and target suburbs, itemised spending, and any rent-vs-buy scenarios you save.

Information collected automatically

• Usage data — pages visited, features used, and time spent, collected via Google Analytics.
• Device information — browser type, operating system, screen size, and IP address.
• Terms acceptance records — the timestamp (and IP address) of when you accepted our Terms of Use and disclaimer. See Section 8.
• Cookies — session cookies for authentication and analytics cookies. See Section 6.

3. How we use your information

We use the information we collect to:

• Provide and operate the Keys Down Under service
• Personalise affordability, upfront-cost, borrowing, and rent-vs-buy calculations to your profile
• Save and display your budget, scenarios, and saved suburbs across sessions
• Send transactional emails (password reset, account confirmation, welcome message)
• Analyse usage patterns to improve the app
• Maintain legal records of Terms acceptance
• Comply with our legal obligations

We do not sell, rent, or share your personal financial data with third parties for their marketing purposes, and we do not earn loan referral commissions on your buy/wait/rent decision.

4. Data storage and security

Your data is stored securely using Supabase, a cloud database platform with row-level security (RLS) enabled. RLS ensures that every database query is automatically scoped to your account, so no query can access another user's data. All data is transmitted over HTTPS and encrypted at rest. AI features run in the Sydney (ap-southeast-2) region to keep processing onshore.

While we take reasonable measures to protect your information, no internet transmission is 100% secure. We encourage you to use a strong, unique password.

5. Third-party services

We use the following third-party services, each governed by its own privacy policy:

• Supabase — database and authentication. Privacy Policy
• Vercel — web hosting and deployment. Privacy Policy
• Amazon Web Services — AI summaries (Bedrock) and mapping/geocoding (Location Service). Privacy Policy
• Resend — transactional email delivery. Privacy Policy
• Google Analytics — usage analytics. Privacy Policy

6. Cookies

We use cookies for the following purposes:

• Essential cookies — required for authentication and keeping you logged in. These cannot be disabled without breaking the service.
• Analytics cookies — Google Analytics uses cookies to track page visits and behaviour in aggregate, anonymised form.

You can control cookies through your browser settings, though disabling essential cookies will prevent you from logging in.

7. Data retention

We retain your account and profile data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except where we are required by law to retain it longer.

8. Legal records

When you create an account, we record your acceptance of the Terms of Use and disclaimer. This record includes:

• Your user account identifier
• The version of the terms you accepted (a date string, e.g., 2026-06-25)
• The exact UTC timestamp of your acceptance
• Your IP address at the time of acceptance, captured server-side

These records are retained for legal and compliance purposes and may not be deleted on account-deletion requests where retention is required by law. They are not used for any marketing or targeting purpose.

9. Your rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you (you can export your data from your profile)
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Complain about a privacy breach to us or to the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at info@keysdownunder.com.

10. Children's privacy

Keys Down Under is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new policy on this page with a revised version date. Continued use of the service after changes constitutes acceptance of the revised policy.

12. Contact us

For questions about this Privacy Policy or our data practices, contact us at:

Keys Down Under
Email: info@keysdownunder.com