Privacy Policy

Version 2026-06-01 · Last Updated: June 1, 2026

1. Information We Collect

We collect only the information necessary to provide our financial commitment services, including:

  • Personal Identification: Name, email address, and phone number.
  • Financial Information: Transaction data and bank account details required for fund transfers via our regulated payment partner.
  • Trusted Contact Data: Name and email address of your nominated Trusted Contact.
  • Usage Data: Goal progress, lock initiation logs, and override requests.

2. Data Residency and Security

Data Residency: Your personal and financial data is hosted on secure servers located within Australia. We prioritize the use of Australian-based cloud infrastructure to ensure compliance with local data handling expectations.

Security: We employ encryption for all data in transit and at rest. We maintain rigorous access controls to prevent unauthorized access to your account or financial records.

3. Compliance with Australian Privacy Principles (APPs)

We are committed to the APPs as outlined in the Privacy Act 1988 (Cth). Our commitment includes:

  • Open and Transparent Management: This policy outlines clearly how we handle your data.
  • Anonymity: Where lawful and practicable, you may interact with us anonymously; however, due to the nature of financial services, this is generally not possible for active accounts.
  • Collection of Solicited Information: We only collect personal information that is reasonably necessary for our service.
  • Third-Party Consent: By providing the email address of a "Trusted Contact," you warrant that you have obtained their express consent for us to store their contact details and communicate with them for the purposes of the VaultLock service.
  • Data Quality & Security: We take reasonable steps to ensure your information is accurate, complete, and up-to-date, and we protect it from misuse, interference, or loss.

4. How We Use & Share Your Information

We do not sell your personal data. We share it only for service-specific needs:

  • Payment Processing: Necessary transaction data is shared with our regulated payment partner for the secure holding and transfer of your funds.
  • Legal/Regulatory: We may disclose information if required by law or to comply with investigations by financial regulators (e.g., ASIC or AUSTRAC).

5. Your Rights

Access & Correction: You may request access to or correction of your personal information at any time.

Deletion: You may request account deletion. Please note that under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), we may be legally required to retain specific financial records for a period of seven years, even after your account is closed.

6. Changes to this Policy

We may update this policy periodically. Significant changes will be communicated via the app or email.

7. Contact

For privacy-related inquiries, please contact our support team at: Staff@vaultlock.com.au