Privacy — common questions

No. When you tap “Send enquiry,” the provider only receives:

• Your name and email (so they can reply)
• The school name
• Your child's age
• The optional message you wrote

We never send your child's name, school year, gender, or anything else from your profile.

Yes — we designed it that way. Browse providers, save favourites, set reminders, and send enquiries anonymously. A random device ID stored on your phone is what links your data between sessions. You can create an optional account if you want to recover your data across devices, but it's never required.

Most local data (device ID, favourites, your school selection) is stored on your phone and is erased the moment you uninstall.

Data we hold on our servers (e.g. enquiries you sent, push tokens) is kept for the retention periods listed in the policy. If you want all server-side data deleted immediately, email info@busyroo.com.au — we'll erase it within 30 days.

No, never. We don't run ads in the app. We don't sell or rent your data. We don't share it with data brokers. We don't use Apple's IDFA or Google's advertising ID. Our analytics are keyed to an anonymous device ID and are never linked back to you for marketing.

Our database is hosted in Australia (Supabase's Sydney region). Some of the services we use to send emails, deliver push notifications, and report crashes process data in the United States or EU. We have data-protection agreements with each of them that meet the standard required by the Australian Privacy Principles. The full list is in section 5.2 of the policy.

Three layers:

1. Minimal collection. We only collect age, school, and (optionally) gender. No name, no DOB, no photo.
2. Encryption at rest. The onboarding profile (where this data lives) is stored in our managed Postgres database with disk-level encryption at rest, and reached only over HTTPS (TLS 1.2+).
3. Never shared. Your child's information is never used for advertising, never displayed publicly, and never sent to a provider unless you explicitly send an enquiry — and even then, only the school name and child's age.

Once an enquiry email has left our servers and reached the provider's inbox, we can't recall it — that's how email works. We can delete our record of the enquiry on request, but the provider will still have a copy of the email they received. If you need a provider to delete an enquiry on their end, contact them directly.

No. We don't run a marketing email programme. You'll only hear from us about an enquiry you sent, a reminder you set up, a material change to this policy, or a security issue. You can opt out of push notifications any time in your device settings.

Use the “Report a problem” option in the app, or email info@busyroo.com.au. Provider data is sourced from Google Places and our own research — we may have out-of-date information and we want to fix it.

Email info@busyroo.com.au. We'll investigate and respond within 30 days.

If you're unsatisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.