1 · Who we are

Magnet-Me Pty Ltd (ABN 54 619 839 208), an Australian proprietary company. We operate the Magnet-Me business under licence from Magnet-Me Holdings, and run our franchise network through Magnet-Me Partners. Privacy queries: magnetmesupp@gmail.com.

2 · What we collect

• From you, at activation: name, phone (country code + local), plan, device-identifier hash.
• From PayPal, after you approve the subscription: subscription ID, payer name + email, billing/shipping address, a vault token + last 4 of your card, language preference. We never see your full card number, CVV or expiry.
• While you use the service: lifecycle events (activations, renewals, cancellations), magic-link tokens (stored as SHA-256 hashes), aggregated print-job metadata sent automatically by the desktop app (counts, paper size, printer model, app and OS versions — no guest photos or guest data), and any support emails you send us.
• Through the website: a single first-party mm_geo cookie for language detection, and standard server logs (IP, user-agent, request path).

3 · How we use it

To run your trial and subscription; to bill you via PayPal; to send transactional emails (activation codes, magic-link sign-ins, billing notifications); to improve the App and diagnose issues using the print-job telemetry described in Section 2; to operate the franchise network and the ambassador program; to detect fraud and trial abuse; to comply with our legal obligations; and to assess and notify eligible data breaches under the NDB scheme.

4 · Who we share it with

PayPal Australia Pty Limited (payments); Twilio SendGrid (transactional email); Cloudflare (website edge + DNS); Fly.io, Inc. (our licence server and admin database, hosted in Sydney, Australia). Their privacy policies: PayPal, SendGrid, Cloudflare, Fly.io. We don't sell personal information to anyone.

5 · Cookies and tracking

magnetme.app sets one first-party cookie (mm_geo) for language detection and loads no third-party trackers today. We may add Google Analytics, Google Ads remarketing and Meta Pixel to this site or to separate marketing properties as the business grows; when we do, we will update this Section.

6 · Minors and event guests

Photographers and franchisees using the App often photograph children — at schools, kindergartens, bar and bat mitzvahs, birthday parties and similar events. The operator, not Magnet-Me Pty Ltd, photographs guests and is responsible for the consents required by the law of the place the event is held. The current App does not transmit guest photos or guest details to us. If you are a parent or guardian who wants a child's photo removed, contact the operator first; if they can't be reached, write to us at magnetmesupp@gmail.com and we'll help. The App and our website are intended for users aged 16 and over.

7 · Security, retention and your rights

We protect personal information with TLS in transit, store the device identifier and activation codes only as SHA-256 hashes, store payment details only as PayPal vault references and last-4 digits, and restrict admin access to authorised Magnet-Me staff. We keep your subscription record while it's active and for 24 months after cancellation; payment and tax records for 7 years; server logs typically 90 days; de-identified print-job aggregates indefinitely for product analytics. You can ask us at any time to access, correct, delete or export the personal information we hold about you, and you can complain to the OAIC if you're not satisfied with our response.

8 · Notifiable Data Breaches

We comply with the NDB scheme (Part IIIC, Privacy Act 1988 (Cth)). If an eligible data breach occurs we will notify the OAIC and affected individuals as soon as practicable, after a 30-day assessment window.

9 · Future features

We plan to add cloud storage of event photos, guest QR capture with online photo download, opt-in facial-recognition matching, and a newsletter. These are not in the product today. We will update this policy before any new category of personal information is collected, and biometric data will only be collected with the express opt-in consent of the individual.

10 · Overseas disclosure

Most personal information sits in Australia. PayPal processes payments in the United States; SendGrid may process email content in the United States; Cloudflare operates globally. By using the service you consent to these overseas disclosures for the purposes set out in Section 3.

11 · Changes

We may update this policy. When we do, we will change the "Last updated" date at the top of this page. We do not email subscribers about updates — please check this page periodically.

12 · Contact

Privacy Officer, Magnet-Me Pty Ltd (ABN 54 619 839 208)
Email: magnetmesupp@gmail.com
Support: magnetmesupp@gmail.com