Fly app privacy.

FLY ENTERPRISES PTY LTD (ABN 95 699 352 675) (“Fly”, “we”, “our”, or “us”) publishes the Fly app — a personal loyalty wallet that lets you collect points, discover nearby shops, and pay at businesses that use Fly.

This policy covers that app and the accounts behind it. If you are a business using the Fly point-of-sale platform, the policy that applies to you is at useflysystems.com/privacy instead.

We handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We only collect what the app needs to work. Specifically:

• Your name, email and postal address — to create your account, put a name to your loyalty card, and send receipts and orders to the right place.
• Your phone number — if you choose to sign in with a phone number, we send a one-time code to it. If you sign in with Apple or Google instead, we do not ask for a phone number and your account has none.
• Your location — only while you are using the app, and only to show you shops near you on the map. We ask your permission first, and the app works without it — you can decline and still use everything except the nearby-shops view. We do not track your location in the background, we do not build a location history, and we never sell or share it for advertising.
• Your purchases and points — the transactions you make through Fly, so you can see your receipts and your balance, and so the shop can honour your points.
• Payment details — see section 18.03. We never see or store your full card number.
• How you use the app, and crash reports — to keep it working and fix what breaks.

We do not use any of this for advertising, we do not run third-party ad software in the app, and we do not track you across other companies’ apps or websites.

Payments in Fly are processed by Stripe, a PCI-DSS Level 1 certified payment provider. When you add a card, the details go directly to Stripe.

Fly never receives or stores your full card number. We keep only a token issued by Stripe and the last four digits, so you can recognise your own card in a list.

Charges you make with Fly are for real goods and services at real businesses. Stripe handles them under its own privacy policy, at stripe.com/au/privacy.

We do not sell your personal information. We share it only:

• With the shop you are buying from — when you scan your Fly card or pay at a business, that business sees the purchase and enough about you to run its loyalty programme and give you your receipt. That business then handles that information under its own privacy policy.
• With Stripe — to process payments (section 18.03).
• With service providers who run our systems — hosting, email and SMS delivery, and crash reporting — and only so they can do that job for us.
• Where the law requires it — or to protect someone’s safety or our legal rights.

You can delete your account at any time, from inside the app: More › Profile › Delete account. You do not need to email us or wait for us to action it.

When you do, we immediately and permanently:

• remove your name, email, phone number and address;
• detach your saved cards and delete your customer record at Stripe;
• unlink you from every shop’s loyalty programme; and
• sign you out everywhere.

What remains is the transaction record itself, with your personal details stripped out of it. We are required to keep records of sales for seven years under Australian tax law, and those records belong to the business you bought from as well as to you — so we de-identify them rather than erase them. They can no longer be connected back to you.

You can also email support@useflysystems.com if you would rather we did it for you.

You can, at any time:

• see and correct your details in the app, under Profile;
• turn off location permission in your phone’s settings — the app keeps working;
• ask us for a copy of what we hold about you;
• delete your account (section 18.05); and
• complain to us, and — if we do not resolve it — to the Office of the Australian Information Commissioner at oaic.gov.au.

Ask us anything about your information at support@useflysystems.com.

Your information is encrypted in transit, and is stored on servers in Australia. Access is restricted to the people who need it to run and support the service.

No system is perfectly secure, but if a data breach ever put you at likely risk of serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Fly is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us their information, email support@useflysystems.com and we will delete it.

If we change this policy we will update this page, and — where the change matters to you — tell you in the app or by email before it takes effect.

FLY ENTERPRISES PTY LTD (ABN 95 699 352 675)
support@useflysystems.com