1. Who this covers
This policy explains how OzRunnr (ABN 52 922 762 259) ("we", "us") collects, uses, and protects your personal information when you use the OzRunnr website and app.
2. What we collect
- When you create an account: name, phone number, email address, and password (stored securely by our authentication provider, Supabase — we never see or store your raw password).
- When you place a request: delivery address (or a saved address from your profile), items requested, budget, delivery preferences and notes, and any image you choose to upload with a request.
- For custom pickup requests: the store or marketplace listing details you provide, including any listing URL and the price you've agreed with a seller.
- During an order: in-app messages between you and us, receipt images and item photos we upload once your order is shopped, and payment status (which payment method you used and whether it's been received — we don't collect or store card numbers, since we don't currently accept card payments).
- After a completed order: any rating and feedback you leave, and any rating we record about the order on our side.
- When you apply to be a runner: your vehicle and its registration plate, make, model and colour, the suburbs you'd cover, your ABN, and a national police check with its issuer, issue date and reference number. We check the plate with the state's public registration service rather than asking for the registration papers. We keep the police check's details and our decision after the certificate image is deleted. Your driver's licence and a selfie go to Stripe Identity, which checks them and tells us the result, the licence type and its expiry date. We don't receive or store the licence image, number or your date of birth; Stripe's copy is deleted 30 days after the check.
- Automatically: basic usage analytics (e.g. when a request is started or submitted) used to understand where the request process could be improved. This isn't used for advertising and isn't shared with anyone outside OzRunnr.
3. How we use it
We use your information to:
- create and manage your account;
- process, fulfil, and deliver your requests;
- communicate with you about your orders (status updates, payment confirmations, delivery issues);
- record and reconcile payments;
- respond to support/contact enquiries;
- improve the Service based on aggregate usage patterns and feedback.
We don't sell your personal information, and we don't use your account, order or payment information for third-party advertising. Our public pages do carry an advertising pixel — see "Cookies and similar technology" below.
4. Who we share it with
- Supabase (our database, authentication, and file-storage provider) — hosts all the data described above.
- Resend (our transactional email provider) — sends order and account emails on our behalf.
- Vercel (hosting) and its analytics — basic, non-identifying usage metrics.
- Meta (Facebook) — when you visit our public pages, our advertising pixel tells Meta that a page was viewed, and that an account was created if you sign up, so we can measure and target our ads. It is never told who you are, and it runs on the public pages only, never on the signed-in part of the app, so it is never told anything about your orders, addresses or payments. See "Cookies and similar technology" below.
- We don't share your information with marketplace sellers or stores beyond what's needed to complete a purchase or pickup on your behalf (e.g. showing up at an agreed pickup address).
- Our own team — to resolve a support request or investigate a fault, an OzRunnr admin may open your account and see it as you see it. They can only look: those sessions cannot change anything, place an order, send a message or move money. Every one of them is time-limited and recorded, with the reason it was opened.
- We may disclose information if required by law, or to protect the safety of our customers, staff, or the public.
5. Where your data is stored
Your data is stored with our infrastructure providers (Supabase, hosted in the ap-southeast-2 region). We take reasonable technical steps (access controls, encryption in transit) to keep it secure, but no online service can guarantee perfect security.
6. How long we keep it
We keep order history, receipts, and account information for as long as your account is active, and for a reasonable period after (to meet record-keeping obligations, e.g. for tax purposes).
Some things we delete on a fixed schedule, whether or not you ask:
- photos and files sent in an order's messages are deleted 12 months after that order is finished;
- photos attached to a support report are deleted 12 months after that report is resolved;
- documents uploaded with a runner application are deleted 30 days after the application and the document have been decided; we keep a record that the document was seen and what was decided. Stripe's copy of a verified licence is deleted 30 days after the check; we keep only the result and the expiry date.
- usage records we keep to measure how the service is working are unlinked from your account after 90 days and deleted after 12 months;
- notes an administrator writes when an account is suspended are removed after 24 months.
You can ask us to delete your account and associated personal information at any time, subject to anything we're legally required to retain. When we do, we remove your name, contact details, saved addresses, payment details and any documents you uploaded, and keep the records of orders you placed or delivered without your personal details attached.
7. Your rights
You can:
- access and update most of your information directly in your Profile;
- ask us for a copy of the personal information we hold about you;
- ask us to correct inaccurate information;
- ask us to delete your account and data, subject to legal record-keeping requirements (e.g. we may need to retain records of completed transactions).
To do any of the above, contact us at support@ozrunnr.com.au.
8. Photos and images
Item photos, receipt images, and any images you upload with a request are stored privately and only accessible to you and OzRunnr — they aren't public or shared with other customers.
9. Cookies and similar technology
The app uses essential cookies/local storage to keep you signed in and remember basic preferences, and lightweight, privacy-respecting analytics (see "Automatically" above).
Our public pages — the home page, pricing, FAQ, about, contact, browse stops, become a runner, and the sign-in and sign-up pages — also load the Meta (Facebook) advertising pixel, which sets cookies and reports the page you viewed to Meta. It reports one thing beyond page views: if you create an account, it tells Meta that a registration was completed, without saying who completed it. We use all of this to measure our ads and to show ads to people who have visited us. Two limits we hold ourselves to:
- It is not loaded anywhere inside your account. Nothing about your orders, delivery addresses, receipts or payments is ever sent to Meta.
- We have turned off its "automatic advanced matching", so it does not read what you type into our contact or sign-up forms.
You can opt out of Meta's ad targeting in your Facebook ad preferences, and browser tracking protection or an ad blocker will stop the pixel loading at all — nothing on OzRunnr depends on it.
10. Children
OzRunnr isn't intended for anyone under 18, and we don't knowingly collect information from children.
11. Changes to this policy
We may update this policy from time to time. If we make a material change, we'll let you know (email or an in-app notice).
12. Contact us
Questions about this policy, or want to exercise any of the rights above? Contact us at support@ozrunnr.com.au or through the contact form on the site.