Legal

Privacy Policy

Akrue Pty Ltd  ·  Last updated: 21 September 2026

01

About this policy

Akrue Pty Ltd ("Akrue", "we", "us", or "our") is an Australian company building a financial literacy education platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit akrue.com.au, join our waitlist, or create an account and use the Akrue platform — including our paid pilot program (account creation, lessons, and payment).

We are committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained within it.

Short version: If you're on our waitlist, we only ask for your email address. If you've signed up for the pilot program, we also collect account details (like your name, email, and date of birth) and your lesson progress, and your payment is processed by Stripe — Akrue never sees your card details. We don't sell your data, we don't run advertising networks, and we store your information securely.

02

Information we collect

We collect the following categories of personal information, depending on how you interact with us:

If you join our waitlist:

  • Email address: when you submit our waitlist form. This is the only personal information we actively request from you.
  • Approximate location: inferred from your IP address at the time of form submission, used to understand where our audience is based (country/state level only).
  • Device & browser information: including browser type, operating system, and referring URL, collected automatically via server logs and third-party fonts services. This information is not linked to your identity.

If you create an account for our pilot program:

  • Account data: your name, email address, password (stored hashed, never in plain text), and date of birth, collected when you sign up;
  • Lesson progress data: which lessons you've started or completed, and your progress through the course, stored against your account; and
  • Payment data: your payment for pilot access is processed by Stripe Checkout. Akrue does not receive or store your card details — see Section 5 below for details.

We do not collect sensitive information such as government identifiers, health information, or biometric data through this website or platform. Date of birth is collected solely to confirm you meet our 16+ age requirement (see Section 12).

03

How we use your information

We use the information we collect for the following purposes:

  • To notify you when the Akrue app launches;
  • To send you important product updates, founder news, and early-access information as a founding member;
  • To create and manage your account, lesson access, and lesson progress if you join our pilot program;
  • To process your payment and manage your pilot access via Stripe;
  • To understand the geographic distribution and size of our waitlist;
  • To protect the integrity of our waitlist and pilot platform (e.g. detecting and filtering bot submissions or fraudulent payments); and
  • To comply with our legal obligations.

We will only contact you about Akrue. We will not use your email address for unrelated marketing purposes or sell it to third parties.

04

How we share your information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

  • Service providers: with trusted third-party services that help us operate our platform (described in Section 5 below). These providers process data only on our instructions.
  • Legal obligations: if required by law, regulation, or a valid court order, or to protect the rights, property, or safety of Akrue, our users, or others.
  • Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email before your information is subject to a different privacy policy.
05

Third-party services

Our website uses the following third-party services that may process your personal data:

Each of these providers has its own privacy policy. Google's privacy policy is available at policies.google.com/privacy. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy. Supabase's privacy policy is available at supabase.com/privacy. Stripe's privacy policy is available at stripe.com/privacy.

06

Overseas disclosure

Some of the third-party services described in Section 5 store or process personal information outside Australia.

  • Supabase: our Supabase project is hosted in Australia, so we do not treat storage of your account and lesson-progress data in Supabase as an overseas transfer. Supabase Inc. is a US company, however, and its support staff or subprocessors could, in limited circumstances, access that data from overseas as part of maintaining the service.
  • Stripe, Google, and Cloudflare: these providers process personal information outside Australia as part of their global infrastructure — Stripe primarily in the United States, and Google and Cloudflare across multiple countries via their global networks.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to that information, consistent with Australian Privacy Principle 8. If you have questions about our overseas disclosure practices, please contact us using the details in Section 14.

07

Cookies & tracking

Cookies are small text files placed on your device by a website. We use cookies and similar technologies to operate our website and, where you consent, to analyse usage.

You can manage your cookie preferences at any time by clicking Cookie Settings in the footer of our website, or by clearing your browser's local storage.

Please note that Google Fonts loads typefaces from Google's servers, meaning your IP address is shared with Google as part of a standard HTTP request. This occurs regardless of cookie settings, as it is required to render the page correctly.

08

Data security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Waitlist submissions (your email address) are stored in a Google Sheet that is accessible only to Akrue's founders.

Account and lesson-progress data for pilot users is stored in Supabase, which encrypts data at rest and in transit and restricts access through authenticated, role-based controls. Only authorised Akrue personnel can access this data, and only as needed to operate the platform and support pilot users.

All data transmitted between your browser and our servers (and to our service providers' servers) is encrypted in transit using TLS (HTTPS).

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

09

Data breach response

We have procedures in place to identify, contain, and respond to data breaches involving personal information, consistent with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth).

If we experience a data breach that is likely to result in serious harm to you — for example, unauthorised access to your account or payment data — we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law, and let you know what happened, what information was involved, and what steps we and you can take in response.

10

Data retention

We retain your email address for as long as necessary to fulfil the purposes described in this policy; specifically, for as long as Akrue is operating and the waitlist is relevant.

If you ask us to delete your information, we will remove it from our waitlist records within 30 days (subject to any legal obligations that require us to retain it).

11

Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

  • Access: request a copy of the personal information we hold about you;
  • Correction: ask us to correct inaccurate, incomplete, or out-of-date information;
  • Deletion: request that we delete your personal information from our records;
  • Opt-out: unsubscribe from our communications at any time using the link in any email we send you; and
  • Complaint: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your personal information.

To exercise any of these rights, please contact us using the details in Section 14 below.

12

Children's privacy

Our waitlist is intended for individuals aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has submitted their information to us, please contact us and we will promptly delete it.

13

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will notify waitlist members and pilot users by email.

We encourage you to review this policy periodically to stay informed about how we protect your information.

14

Contact us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact us:

We aim to respond to all privacy-related enquiries within 30 days.