Privacy Policy

1. Introduction

1.1 This Privacy Policy explains how we collect, use, disclose, and protect your Personal Information.

1.2 We comply with the Privacy Act 1988 (Cth), Australian Privacy Principles (APPs), and the Notifiable Data Breaches scheme.

2. Information We Collect

2.1 We collect the following categories of information:

• Identity information – name, date of birth, government-issued ID
• Contact details – email address, phone number
• Location data – GPS tracking during trips
• Trip data – routes, timestamps, and transport usage records
• Device information – IP address, browser type, and device ID
• Usage data – cookies, log files, web beacons, and analytics data
• Biometric data – facial recognition and fingerprint data
• Enterprise data – transaction records and ESG verification data

3. Automatic Data Collection

3.1 We automatically collect "Device Information" including:

• IP address, browser type, and time zone
• Pages visited and interaction patterns
• Referral sources and usage analytics

3.2 This data is collected via cookies, log files, and tracking technologies such as web beacons and analytics scripts.

4. Purpose of Collection

4.1 We use Personal Information to:

• Facilitate carpooling coordination and public transport tracking
• Verify trips and prevent fraud
• Calculate CO₂ reduction
• Generate ESG reporting outputs
• Improve platform performance and conduct analytics
• Communicate with Users
• Screen for risk or fraudulent activity

5. Sharing of Information

5.1 We may share Personal Information with:

• Service providers – hosting, analytics, and support vendors
• Enterprise Buyers – aggregated and anonymised data only
• Legal and regulatory authorities – where required by law

5.2 We do not sell Personal Information or Biometric Data.

6. Analytics and Advertising

6.1 We may use analytics tools (e.g. Google Analytics) to understand user behaviour and improve platform performance.

6.2 Users can opt out of tracking tools where supported by the relevant tool or device settings.

7. Biometric Data

7.1 Biometric data is used for identity verification and trip authentication.

7.2 Biometric collection is mandatory for core platform features and cannot be opted out of while retaining full platform access.

7.3 All biometric data is encrypted and stored securely using industry-standard controls.

7.4 Withdrawal of consent to biometric data collection will result in loss of access to core platform features or full account termination.

8. Data Retention

8.1 Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected.

8.2 Certain data may be retained for longer periods where required by law, for compliance purposes, or to protect our legitimate interests including fraud prevention, dispute resolution, and audit integrity.

9. Cross-Border Disclosure

9.1 Data may be stored or processed overseas via our cloud infrastructure and third-party service providers.

9.2 By using the Platform, you consent to such international transfers of your Personal Information.

10. Your Rights

10.1 You may submit a request to:

• Access your Personal Information held by us
• Correct inaccurate or outdated information
• Delete your Personal Information, subject to legal and platform integrity requirements

10.2 To exercise any of these rights, contact us at: support@carpoolapp.com.au

11. Complaints

11.1 If you have a privacy concern or complaint, please contact us in the first instance to allow us to attempt resolution.

11.2 If your complaint is not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Changes to This Policy

12.1 We may update this Privacy Policy from time to time to reflect changes to our practices, legal obligations, or platform features. The current version will always be available on the Platform or our website.

13. Contact