Privacy Policy

mycache is a trading name of mycache Pty Ltd, an Australian company headquartered on the Sunshine Coast, Queensland, Australia. We operate a membership and loyalty platform for clinics and wellness businesses ("the Platform").

If you have questions about this policy or how we handle your personal information, please contact us at hello@mycache.com.au.

We collect personal information in the following ways:

From clinic operators (business users): When you create or manage a mycache account, we collect your name, business name, email address, phone number, ABN or business registration details, and Stripe account information.

From end clients (members): When a member joins a clinic's mycache-powered program, we collect their name, email address, mobile phone number, and wallet/transaction history. We do not directly store payment card details — all card processing is handled by Stripe, which maintains its own privacy standards and PCI-DSS compliance.

Usage data: We collect information about how the Platform is accessed and used, including IP addresses, browser type, pages visited, and session timestamps. This data is used for analytics, security, and product improvement.

We use personal information to:

- Create and manage your account and the services we provide to you
- Process payments and wallet transactions through Stripe
- Issue Apple Wallet and Google Wallet passes with live balance updates
- Send push notifications about wallet activity (in your clinic's name)
- Provide customer support and respond to enquiries
- Comply with legal obligations and prevent fraud
- Improve the Platform through analytics and product research

We do not sell your personal information to third parties.

To operate the Platform, we share data with the following categories of third-party service providers:

Stripe: Payment processing, subscription management, and financial reconciliation. Stripe processes card data on our behalf and is subject to PCI-DSS standards. See stripe.com/privacy.

Apple and Google: Wallet pass delivery. Pass data (balance, tier, member name) is transmitted to Apple Pass Server and Google Wallet APIs to generate and update digital passes.

Cloud infrastructure: We use cloud hosting services (including Vercel and Supabase) that may store data in data centres within Australia or overseas. All providers we use are bound by appropriate data processing agreements.

We require all third parties to respect the security of your data and to treat it in accordance with applicable law.

Your information is stored on secure servers. We implement technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction, including encryption in transit (TLS) and at rest.

Despite our efforts, no method of data transmission over the internet is 100% secure. If you become aware of any security issue affecting your account, please notify us immediately at hello@mycache.com.au.

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. When an account is closed, we will delete or anonymise personal information within a reasonable period, unless we are required to retain it for legal or regulatory purposes.

Transaction records may be retained for up to seven years to meet financial reporting obligations.

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

- Access the personal information we hold about you
- Request correction of inaccurate or out-of-date information
- Request that we delete your information (subject to legal obligations)
- Complain about a breach of the APPs to us or to the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at hello@mycache.com.au. We will respond within 30 days.

Our website and Platform use cookies and similar tracking technologies to improve your experience and gather analytics data. Essential cookies are required for the Platform to function. Analytics cookies help us understand usage patterns.

You may configure your browser to refuse cookies; however, some features of the Platform may not function correctly without them.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are significant, notify affected users by email.

Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

For any privacy-related questions or requests, please contact:

mycache Pty Ltd
Sunshine Coast, QLD, Australia
hello@mycache.com.au