Privacy Policy

About this policy

Mellow Owl (mellow-owl.app) is a personal budgeting tool. This policy explains what personal information we collect, why we collect it, how we store and protect it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By signing in to Mellow Owl you agree to the collection and use of your information as described in this policy.

What personal information we collect

We collect the following categories of information:

• Account information — your email address, used to authenticate you via a sign-in link or Google OAuth.
• Financial data you enter — pay amount and frequency, pay dates, monthly bills, account balances, planned expenses, and spend logs. This data is entered voluntarily by you to power the budgeting features.

We do not collect your name, phone number, address, payment card details, or any government identifiers.

How we collect your information

We collect information directly from you when you:

• Sign in with your email address or Google account.
• Complete the app's setup wizard (pay cycle, bills, buffer balance).
• Log everyday spending or record planned expenses.

We do not collect information from third parties, data brokers, or publicly available sources.

Why we collect your information

Your information is used solely to provide the Mellow Owl budgeting service:

• To authenticate you and keep your data private from other users.
• To save and sync your budgeting data across devices.
• To calculate your pay cycles, buffer balance, and spending summaries.

We do not use your information for advertising, marketing, or profiling, and we do not sell your data to any party.

How we store and protect your information

Your data is stored in Supabase — a cloud database platform. Access to your data is protected by Row Level Security, meaning only you (authenticated with your account) can read or write your data.

Data is encrypted in transit (TLS) and at rest. We retain your data for as long as your account exists. You may request deletion at any time (see Your rights below).

Disclosure to third parties and overseas recipients

We use the following third-party services that may process your personal information. These services are located outside Australia, primarily in the United States:

• Supabase, Inc. (USA) — stores your account and budgeting data. Supabase is bound by its own privacy policy and is SOC 2 Type II certified.
• Google LLC (USA) — if you sign in with Google, Google authenticates you under Google's OAuth service. We receive only your email address from Google.
• Vercel, Inc. (USA) — hosts the Mellow Owl web application and serves it to your browser. Vercel may process your IP address in serving the site.

We take reasonable steps to ensure these overseas recipients handle your information in a manner consistent with the Australian Privacy Principles, including by relying on their privacy certifications and contractual commitments.

We do not share your information with any other third parties.

Your rights

Under the Australian Privacy Principles you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct information that is inaccurate, out of date, or incomplete.
• Deletion — ask us to delete your account and all associated personal information.

To exercise any of these rights, contact us at the address below. We will respond within a reasonable time, and no later than 30 days.

Complaints

If you believe we have handled your personal information in a way that breaches the Australian Privacy Principles, please contact us first so we can attempt to resolve your concern.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of Mellow Owl after a change constitutes acceptance of the updated policy.

Contact

For privacy-related enquiries or to exercise your rights, contact us at: