Privacy Policy

SplitCheck is a product of SplitCheck Pty Ltd (ACN 702 103 142, ABN 73 702 103 142), an Australian private company based in South Australia. In this policy, "we", "us" and "our" mean that company. This policy covers the SplitCheck app for iPhone, the servers behind it, and the website at splitcheck.com.au (a single page that describes the app and links to the App Store). It explains what personal information we collect, why we collect it, who we share it with, and the choices you have. We follow the Australian Privacy Principles (the "APPs") in the Privacy Act 1988 (Cth). We do this even if our business is small enough that the Act does not strictly require it. Effective: 27 September 2026.

1. Who we are and how to contact us

SplitCheck Pty Ltd, ACN 702 103 142, ABN 73 702 103 142. Registered office: South Australia.

Privacy questions and requests: privacy@splitcheck.com.au. General support: support@splitcheck.com.au.

2. What we collect, and when

We collect different things at different stages. You can run your first check without telling us who you are.

When you run a check (with or without an account)

• The address you type, or the location you choose. We need the address, and the map coordinates we work out from it, to find the land parcel and its planning rules. If you choose the "use my location" option, the app sends your device's coordinates to us at that moment only, to find the block you are standing on. We never read your location in the background, and we do not build a location history.
• The answer, saved to your history. Every successful check gets a check id (a random code that looks like chk_ followed by 16 characters). We store the address you typed, the address we matched it to, the state, the full answer with its working, a short summary, and the time. This is your check history. You can reopen any answer for free, and you can delete any of them in the app. History is linked to your account if you are signed in, or otherwise to the anonymous identifier described next.
• An anonymous identifier. The first time the app runs a check, it creates a random code and stores it on your device. The app sends that code with each request. We use it to count the check you ran before signing in and to show you your history on that device. It is not your name, your device's serial number, or an advertising identifier, and we cannot work out who you are from it. If you later sign in, the history under that code is moved into your account.
• Standard server logs. Your IP address, the app version and device type, the request itself (which includes the address checked), and the time. We use these to run the service, keep it secure, and stop abuse. Our rate limits (the controls that slow down unusually heavy use) work from your IP address.
• A cache of planning data, by property. We keep the planning and land data we fetched for a property so we do not have to ask the government services again. The cache is about the property, not about you, and is not linked to your account or your identifier.

When you sign in

You can sign in two ways. Neither uses a password.

• Sign in with Apple. Apple confirms who you are and sends us the email address on your Apple Account. If you choose Apple's Hide My Email option, Apple sends us a private relay address (ending in privaterelay.appleid.com) instead of your real one. That relay address becomes your account email. Apple forwards emails we send to it, so our sign-in links and account notices still reach you. We do not ask for your name. If Apple offers to share it, we do not store it.
• Emailed sign-in link. You type your email address and we send you a link. Opening it signs you in. Each link works once and expires after 15 minutes.
• A sign-in session. Once you are signed in, the app holds a random session token and sends it with each request. We store only a scrambled version of it (a hash), so a copy of our database could not be used to sign in as you. The session ends when you sign out, when you delete your account, or after 90 days without use.
• Your usage. How many checks you have run this month, and when, so your free allowance and any plan limit work correctly.

We do not ask for your name, phone number, or date of birth.

If you buy a plan or a single check

• Apple is the merchant. Purchases are made through Apple's In-App Purchase system. Apple takes your payment, issues your receipt, and handles refunds. Apple's privacy policy applies to what Apple collects.
• What we receive. RevenueCat, a subscription service we use, receives your App Store transaction records from Apple and tells us what was bought, whether it is active, when the current period ends, and when it renews, is cancelled, or is refunded. RevenueCat identifies you to us by your SplitCheck account number, which it calls its "app user id". We store the plan tier, its status, and the period end date on your account.
• What we do not receive. Your card or bank details, your billing address, or your Apple Account password. Those stay with Apple.

If you keep an answer or get a PDF report

• Plans that include "Keep" let you mark an answer as kept. A kept answer stays in your history until you remove it or delete your account.
• A PDF report is generated on our server from the stored answer and handed to your device to view or share. We do not keep a separate copy of the PDF. The answer itself is already in your history.

If you report a problem with an answer

• You can tell us that an answer looks wrong. We collect the note you write (up to 2,000 characters), an optional contact email address if you want a reply, and the check id or address the report is about. The report is linked to your account if you are signed in, or otherwise to your anonymous identifier.
• A person reads every report. The owner is told by email that a report has arrived. That email carries only a subject line. The note itself is read from our own store.

If you contact us

• Your email address, the content of your message, and anything you attach.
• Our support mailbox runs on Google Workspace. Email to support@splitcheck.com.au is delivered straight to it.
• We may use software we run ourselves to sort incoming email and prepare a draft reply. A person reviews every reply before it is sent.

Crash reports (only if you have opted in)

• If you have turned on sharing of analytics and crash data with app developers in your iPhone's settings, Apple may share crash reports with us. They describe the device model, iOS version, app version, and what the app was doing when it failed. They do not contain your address searches, your email, or your account details. If that iPhone setting is off, we receive nothing.

If you visit the website

• The website is a single page that describes the app and links to the App Store. It has no sign-in, no purchases, no cookies of our own, and no analytics. Standard server logs apply.
• If we ever offer purchases on the website, we will update this policy and our terms before that happens.

3. What we do not collect or do

• We do not ask for your name, phone number, date of birth, or identity documents.
• We do not see or store payment details. Only Apple does.
• There is no third-party analytics, advertising, or tracking software in the app. We do not use an advertising identifier, and we do not track you across other apps or websites.
• We do not read your location in the background, and we do not read your contacts, photos, calendar, or messages.
• We do not sell, rent, or trade personal information. Ever.
• We do not put your details into a third-party marketing or customer-relationship (CRM) tool. Our own account list is the only list.
• We do not build advertising profiles about you, and we do not make automated decisions about you based on profiling.

4. How we use your information

• To run the check you asked for and show you the answer.
• To save your answers so you can reopen them for free, and to let you keep, delete, and export them.
• To sign you in and keep you signed in.
• To count your checks each month and apply the limits of the free allowance or your plan.
• To confirm your purchases through Apple and RevenueCat, and to give you what you paid for.
• To send you the emails your account needs: sign-in links, account and plan notices, changes to our terms or this policy, and security notices. You cannot opt out of these while you have an account, because we need them to run your account.
• To read and act on the problems you report, and to improve the accuracy of our answers.
• To answer your questions and support requests.
• To keep the service secure, prevent abuse, and apply our fair use rules.
• To understand how the service is used overall, using daily totals that do not identify anyone (for example, how many checks were run in New South Wales on a given day and how many answered "no"). No identifier, address, or IP address is stored with these totals.
• To meet our legal obligations, such as tax and company record keeping.

5. Who we share it with

We share personal information only with the providers that help us run SplitCheck. Each one may use it only to provide its service to us. Here is the full list: what each provider receives, why, and where it processes the data.

• Apple Inc. Provides Sign in with Apple (Apple sees that you signed in to SplitCheck and, if you use Hide My Email, forwards our emails through its relay), In-App Purchase (Apple takes payment and holds your purchase records), and, only if you opted in on your device, crash reports. Apple processes data worldwide under its own privacy policy (apple.com/legal/privacy).
• RevenueCat, Inc. (United States). Confirms your purchases. RevenueCat receives your App Store transaction records and your SplitCheck account number as its "app user id", and tells us when a plan starts, renews, is cancelled, or is refunded. Because the RevenueCat software inside the app talks to RevenueCat directly, RevenueCat also sees your device's IP address and basic device details such as the iOS version and app version. RevenueCat does not receive your email address. It processes data in the United States (revenuecat.com/privacy).
• Amazon Web Services (Lightsail), Sydney region. Hosts our servers and our data. Your account details, check history, usage counts, issue reports and server logs are stored here, in Australia (the AWS "ap-southeast-2" region).
• Google Workspace (Gmail), sending as noreply@splitcheck.com.au. Sends our sign-in links and account emails on our behalf, and receives your email address and the content of those emails. Google may process this data outside Australia.
• Amazon Web Services (Route 53), the domain name service. Turns splitcheck.com.au into our server's address. It handles name lookups only and receives none of your requests, searches or account details.
• Google Maps Platform (Places Autocomplete and Geocoding). When you type an address, our server sends the text you typed to Google to suggest matching addresses and to turn the chosen address into map coordinates. Our server makes this request with our own key. The app never talks to Google directly, and Google does not receive your email address, account details, or identifier. Google may process this data outside Australia. When we are not using Google, our server uses the free NSW Government address search instead (see the next item).
• NSW Government planning, land and imagery services. Our server sends the coordinates of the property (and, where the government address search is used, the address text) to official NSW Government spatial, planning and imagery services. These services look up the land parcel, zoning, minimum lot sizes, planning overlays and aerial imagery. They receive the location only. They never receive your email address, account details, or identifier. If we add coverage for another state, we will use that state's equivalent government services in the same way, and we will update this policy.
• Google Workspace. Runs our support mailbox. Emails you send to support@splitcheck.com.au, and our replies, are stored there. Google may process this data outside Australia.

We do not share your personal information with anyone else, unless the law requires it (for example, a court order or a lawful request from a regulator), or you ask us to. If our business is sold or restructured, your information may transfer to the new owner, who would have to honour this policy.

6. Sending information overseas

Your information is stored in Australia. Some of the providers named above (Apple, RevenueCat and Google) may handle data in other countries, mainly the United States, while providing their service to us. This is what APP 8 (the rule about sending personal information overseas) covers. We send these providers only what they need, and we choose providers with strong security practices and contractual privacy commitments. We remain responsible under the Privacy Act for how they handle your personal information on our behalf. If we add a provider that will handle your information overseas, we will update this policy first.

7. Emails from us

• Service emails. We email you only when your account needs it: sign-in links, notices about your account or plan, changes to these documents, and security notices. Receipts for purchases come from Apple, not from us.
• Marketing. We do not send marketing or product update emails. If we ever add them, they will be opt-in, every one will carry a working unsubscribe link, and we will action unsubscribe requests within five business days as the Spam Act 2003 (Cth) requires, and usually straight away.
• We do not buy email lists, and we do not email people who have not used SplitCheck.

8. Identifiers and data held on your device

• The anonymous identifier described in section 2 stays on your device until you delete the app.
• The sign-in session token stays on your device until you sign out, and is removed when you delete your account or the app.
• The website sets no cookies and loads nothing from third parties.
• We do not use advertising identifiers, advertising cookies, or third-party analytics on the app or the website.

9. How long we keep it

These are the periods the service is built to.

• Check history on an account: each answer is kept for 24 months from the date of the check, then deleted automatically. An answer you have marked as kept, and the answer from any single check you paid for, stays until you remove it or delete your account. Anything you delete in the app goes at once.
• Anonymous check history (never signed in): 90 days from the date of the check, then deleted automatically. If you sign in within that time, it joins your account and the 24 month period applies.
• Account data (email address, usage counts, plan status): kept while your account is active. When you delete your account in the app, we remove your email address and your sign-in sessions and delete your stored answers straight away, and we remove your account link and contact email from any problem reports you filed. We also ask RevenueCat to delete its record of you; Apple keeps its own purchase records under its own policy. We keep a record that the account existed, holding only an internal number and dates, so that a late billing message from Apple or RevenueCat can be matched and not acted on. Your monthly usage counts are kept without the addresses. If your account has been unused for 24 months, we may delete it, after emailing you first, unless it still has an active subscription, an unused paid check, or kept answers.
• Problem reports: kept for 24 months so we can fix the answer and check the fix, then deleted. The contact email and the account link on a report are removed sooner if you delete your account.
• Plan and purchase records: we keep the plan tier, status and period end while your account is active. Apple and RevenueCat keep their own transaction records under their own policies. We keep the sales records that tax and company record-keeping laws require us to keep, generally for up to seven years.
• Server logs: kept for up to 90 days, then deleted.
• Support emails: kept for two years after the last message, so we can refer to the history if you contact us again.
• Cached planning data: about a property, not a person, and not linked to you. Each entry is kept for up to about six months, then fetched again.
• Backups: deleted data may remain in our encrypted backups for up to 35 days before the backup is overwritten.

10. Storage and security

Our servers run in the AWS Sydney region. Data is encrypted in transit (HTTPS). Sign-in tokens are stored only as hashes. Only the people who run SplitCheck can access account data, and only when needed. The service runs as a restricted, non-administrator process, and access keys are kept out of the code. Payment details are never on our systems. No system is perfectly secure, and we cannot promise absolute security. If a data breach happens that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

11. Your rights and choices

• Access. You can ask us what personal information we hold about you, and we will give you a copy (APP 12). Your check history is already visible in the app.
• Correction. You can ask us to correct anything that is wrong or out of date, including the email address on your account (APP 13).
• Delete a check. You can delete any stored answer in the app at any time.
• Delete your account. You can delete your account in the app, from the account screen. Deletion takes effect straight away, as described in section 9. You can also ask us by email and we will do it within 30 days. Deleting your account does not cancel a subscription bought through Apple. Cancel it first in Settings > Apple Account > Subscriptions, or you may keep being charged.
• Location. You can decline the iPhone location permission when the app asks for it, or turn it off later in Settings, and type addresses instead.
• Complaints. If you think we have mishandled your information, contact us first at privacy@splitcheck.com.au. We will reply within 30 days. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

We do not charge for these requests. We may need to confirm that a request really comes from you, usually by emailing the address on your account.

12. Children

SplitCheck is for adults. It is not directed at people under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new effective date. If a change is significant, we will tell account holders by email or in the app before it takes effect.

14. Contact

SplitCheck Pty Ltd (ACN 702 103 142, ABN 73 702 103 142), South Australia. Privacy: privacy@splitcheck.com.au. Support: support@splitcheck.com.au. Our Terms of Service also apply to your use of SplitCheck.