Privacy Policy

Section 01

Who We Are

AI Safe Cyber Pty. Ltd. operates AI Safe Cyber, a cybersecurity awareness platform designed for Australians. The platform is built on the Touch Pause Engage Situational Awareness Model — a framework derived from peer-reviewed doctoral research — and is operated from Australia.

For any privacy-related enquiries, please contact us using the details at the end of this policy.

Section 02

Information We Collect

We collect only the information necessary to provide and improve the AI Safe Cyber service. This includes:

Information you provide directly

• Name and email address when you create an account
• Password (stored in encrypted form — we never store plaintext passwords)
• Subscription and payment information (processed securely through our payment provider — we do not store full card details)
• Any messages or queries you submit through in-app support or contact forms

Information collected automatically

• App usage data, including which sessions you complete and your responses within training scenarios
• Session performance data used to generate your personalised AI debrief summaries
• Device type, operating system version, and app version for compatibility and support purposes
• Crash reports and error logs to help us fix technical issues

Information we do not collect

• We do not collect your location data
• We do not access your contacts, camera, or microphone without explicit permission (microphone access is requested only for the Voice Coach feature, if enabled)
• We do not collect or store the content of suspicious messages you describe to the AI coach

Section 03

How We Use Your Information

We use the information we collect to:

• Create and manage your account and subscription
• Personalise your training sessions and AI debrief summaries based on your performance
• Send you transactional emails such as account confirmations, subscription receipts, and password resets
• Provide in-app and email support when you contact us
• Improve the app's content, features, and AI coaching quality
• Comply with our legal obligations under Australian law

We do not use your personal information for advertising purposes, and we do not sell your data to third parties under any circumstances.

Section 04

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share limited information with trusted third-party service providers who help us operate the platform, including:

• Cloud infrastructure providers (such as AWS or equivalent) for secure data storage and hosting
• Payment processors (such as Stripe) to handle subscription billing securely
• AI service providers for powering the Chat Coach and Voice Coach features
• Analytics tools for understanding app usage patterns in aggregated, anonymised form

All third-party providers are carefully selected and are required to handle your data in accordance with applicable privacy laws. We do not permit them to use your data for their own purposes.

We may also disclose your information if required to do so by law, or to protect the rights, property, or safety of AI Safe Cyber Pty. Ltd., our users, or the public.

Section 05

Data Storage and Security

Your data is stored on secure cloud infrastructure with encryption in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only, and we maintain security practices aligned with industry standards.

While we take all reasonable steps to protect your information, no method of internet transmission or electronic storage is 100% secure. If you have reason to believe your account has been compromised, please contact us immediately.

Your data is stored in Australia or in jurisdictions with equivalent data protection standards. We do not transfer your personal information to countries that do not provide adequate privacy protections.

Section 06

Data Retention

We retain your personal information for as long as your account is active and for a reasonable period afterwards to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you close your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain certain information for a longer period.

Aggregated and anonymised usage data (which cannot identify you) may be retained indefinitely for research and product improvement purposes.

Section 07

Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Request deletion of your personal data (subject to legal retention obligations)
• Withdraw consent to processing where consent is the basis for processing
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy rights have been breached

To exercise any of these rights, please contact us at the address below. We will respond to all requests within 30 days.

Section 08

Children's Privacy

AI Safe Cyber is designed for adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

Section 09

Cookies and Tracking

Our website uses minimal cookies necessary for the site to function correctly, including session management and security cookies. We do not use advertising or tracking cookies.

The AI Safe Cyber mobile application does not use cookies. App-based session data is stored securely on our servers and associated with your account only.

Section 10

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of AI Safe Cyber after changes take effect constitutes acceptance of the updated policy.