Privacy Policy

1. Who this policy is from

Accident Sniffer is operated by The Trustee for Lambda Trust (ABN 84 102 943 944), trading as Alpaca Analytics, of Beaumaris, VIC 3193. That entity is the one responsible for your personal information. In this policy, “we” and “us” mean Alpaca Analytics, and “the app” means the Accident Sniffer mobile application for iOS and Android.

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Where that Act does not strictly apply to a business of our size, we still follow the Principles as our standard.

2. What we collect and why

Everything we hold about you is listed here. We do not collect information “just in case” — each item below exists because a specific feature stops working without it.

If you use Sign in with Apple, you can choose to hide your real email address. If you do, Apple gives us a relay address instead, and we never see the address behind it. We ask Apple for your name only to personalise the app; you can decline without losing any functionality.

3. Your phone’s location stays on your phone

The app asks for location permission while it is open. That location is used entirely on your device — to show how far away an incident is, to place your position on the map, and to hand a destination to your navigation app. It is never sent to us and never stored on our servers.

The only geographic information we hold is the coverage areas you deliberately create: a suburb, a centre point and a radius. Those describe where you want to be alerted, not where you are or have been. We keep no location history of any kind, and there is nowhere in our systems that a record of your movements could be reconstructed.

Declining location permission does not stop alerts arriving. It only removes on-screen distances and your position marker on the map.

4. Payments

Subscriptions are sold through the Apple App Store and Google Play, not by us. Your card number, billing address and payment details are handled entirely by Apple or Google and are never transmitted to or stored by us.

What we receive is the outcome: whether a subscription is active, when it renews or expires, which store it came from, and which product was purchased. This reaches us through RevenueCat, which manages subscription entitlements on our behalf.

5. Who else handles your information

We do not sell your personal information, and we do not disclose it for anyone else’s marketing. We use the following service providers, each of which handles data only to perform its function for us:

• Supabase — hosts our database, authentication and server functions. Holds all of the account information listed in clause 2.
• Expo — delivers push notifications. Receives the push token and the alert content.
• Apple and Google — issue push tokens and carry the notification to your device, provide Sign in with Apple, and process subscription payments.
• RevenueCat — records subscription entitlement state against your account identifier.
• MapTiler — serves the map imagery. Like any map provider it receives your IP address and the area of the map being viewed as your device requests tiles.
• Vercel — hosts this website and keeps standard server request logs.

Some of these providers store or process data outside Australia, including in the United States and the European Union. We take reasonable steps to ensure they handle your information consistently with the Australian Privacy Principles.

We may also disclose information where the law requires it, or where it is reasonably necessary to protect someone’s safety or to enforce our Terms of Service.

6. What we deliberately do not do

Some absences matter as much as the inventory above, so they are stated plainly:

• We run no advertising, and no advertising or tracking SDKs are built into the app.
• We do not track you across other apps or websites, and we use no advertising identifiers.
• We do not sell, rent or trade personal information.
• We do not build behavioural or location profiles.
• This website runs no analytics and sets no cookies. It is a set of static pages; you can read it without identifying yourself in any way.

7. Incident information

The incidents shown in the app are gathered from third-party reports and automated detection. They describe road events — a location, a street, a time, a type — and are not about you. Reporting an incident is not a feature of the app, so nothing you do creates an incident record attributable to you.

8. How long we keep it

Account information is kept while your account exists. Delete your account and the record is removed, along with your coverage areas, device registrations and preferences.

Alert delivery records are operational logs tied to your device registration and are removed with it. We may retain a minimal record of a transaction where tax or record-keeping law requires it, and backups may hold residual copies for a short period before being overwritten in the ordinary cycle.

9. Security

Traffic between the app and our servers is encrypted in transit. Sign-in tokens are held in the operating system’s secure storage on your device. Database access is governed by row-level security so that one account cannot read another’s data, and administrative access is limited to those who need it.

No system is perfectly secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

10. Accessing, correcting and deleting your information

You can do most of this yourself, immediately, in the app:

• Correct your coverage areas and preferences at any time in the app.
• Turn off alerts in Settings, which stops us sending to your device.
• Delete your account from Settings. This permanently removes your profile, coverage areas and device registrations. A store subscription is separate and must be cancelled through Apple or Google — see the Terms.

You may also ask us for a copy of the personal information we hold about you, ask us to correct it, or complain about how we have handled it. Contact us using the details in clause 13 and we will respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.

11. Children

Accident Sniffer is built for drivers and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

If we change this policy we will update the effective date at the top of this page. Where a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect.

13. Contact us

For any privacy question, request or complaint, email solutions@alpaca-analytics.com.au, or write to us at Beaumaris, VIC 3193. You can also reach us through our support page.