Privacy Policy

TEMPLATE: NOT LEGAL ADVICE. TO BE REVIEWED by a qualified Australian lawyer before public launch. Items in [brackets] must be completed. Last updated: [DATE].

This policy explains how [Legal entity name, e.g. Jack McBride-Schofield trading as Motovue] (ABN [ABN]) ("we") handles personal information through the Motovue app and website. We aim to handle personal information consistently with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). [Review whether the Privacy Act applies to you, e.g. the small business exemption under $3m turnover and its exceptions, and whether you choose to opt in. Many apps follow the APPs anyway.]

1. What we collect

Account: email, display name and password (stored only as a salted scrypt hash).
Content you post: car spots (make, model, suburb or state, optional map pin), photos, comments, Revs, Pit Stops, Short Laps videos, likes, follows and reports.
Photos: we remove embedded metadata, including GPS location (EXIF), from photos when they're uploaded. Don't post photos showing people's faces or number plates without consent.
Bookings and enquiries: name, phone, suburb, preferred time, vehicle details for Detail Pros or Garage Share requests, ad enquiries and beta sign-ups.
Game progress: Cardex, XP, quests, character and backyard settings.
Payments: handled by Stripe. We receive confirmation of purchase and your email, not your card details.
Technical: IP address and request logs for security (e.g. rate limiting) and a session cookie needed to keep you logged in. [List any analytics tools if added.]

2. Why we use it

To run your account and the community features, show your content to other users, pass booking requests to the business you booked with (e.g. the detailer or garage host), process payments, send account emails (verification, password reset), keep the service safe (moderation, abuse prevention), and improve the app. We don't sell personal information. [State whether you'll send marketing emails, with consent and an unsubscribe option, under the Spam Act 2003.]

3. Who can see what

Spots, photos, comments, Revs, Pit Stops (for 24 hours), Short Laps, your display name, follower counts and leaderboard points are visible to other users. Your email isn't shown publicly. Booking details are shared with the relevant business owner.

4. Disclosure & overseas storage

We use service providers who may store data outside Australia: hosting [Render, USA/EU/Singapore region], database [Render Postgres], file storage [Cloudflare R2], email [Resend/SMTP provider], payments [Stripe]. [Confirm the providers and regions, and take reasonable steps under APP 8.]

5. Security & retention

We use HTTPS, hashed passwords, hashed session tokens, access controls and rate limiting. No system is perfectly secure. We keep data while your account is active and for [X months] afterwards, unless the law requires longer. If an eligible data breach occurs, we'll follow the Notifiable Data Breaches scheme where it applies.

6. Your choices & rights

You can access and correct your information, delete your posts, or ask us to delete your account by emailing [privacy email]. We'll respond within [30] days. You can use the app in local-only mode without an account.

7. Children

Motovue is intended for users aged [13/16]+. [Confirm the age policy and any parental consent approach.]

8. Complaints

Contact [privacy email] first. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Changes

We'll post updates here and tell you in the app about significant changes.