PRIVACY POLICY

Last Updated: 1st January 2024

Effective Date: 1st January 2024

Carmunicate Pty Ltd (ABN: 29 673 130 535)
Director: Dale Bonello

Carmunicate respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Carmunicate mobile application and related services (the “App”). It applies to all users worldwide, including in Australia, USA, Canada, New Zealand, United Kingdom, China, Russia, and Japan.

By using the App, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. What Information We Collect

We collect information that identifies you or relates to you as an identifiable individual (“Personal Information”).

1.1 Information You Provide Directly

Account Information: Name, email address, mobile number, password, and vehicle number plate(s).
Profile Information: Username (which may be a number plate), profile picture, business information (if subscribed – name, logo, website, social media links, email, address, business hours).
Vehicle Information: Registration details for reminders, vehicle make/model/year (if you list a car for sale or enter a raffle).
Payment Information: When you subscribe or pay platform fees, payment details are processed by our third‑party payment processor; we do not store full card details.
User Content: Messages sent via number plate, posts on the social feed, product listings, pothole reports (including location), tow requests, raffle entries, driving quiz answers, ride‑share trip details.

1.2 Information Collected Automatically

Location Data: When you use navigation maps, report a pothole, request a tow truck, or use Carmunicate’s ride‑share feature, we collect precise GPS location (with your permission). You can disable location in your device settings, but some features will not work.
Device Information: IP address, device type, operating system, unique device identifiers, mobile network information, time zone, language settings.
Usage Data: App features accessed, timestamps, interactions (e.g., messages sent, reminders set, quiz scores), subscription status, in‑app store transactions.
Driving Mode Data: If you use Android Auto / Apple CarPlay, we may collect that the feature is active, but we do not record driving behaviour or vehicle telemetry.

1.3 Information from Third Parties

Mapping Service (e.g., Google Maps): When you use navigation, the mapping service may collect location data according to its own privacy policy.
Mapping Service (e.g., Google Maps): When you use navigation, the mapping service may collect location data according to its own privacy policy. may collect viewing data according to its privacy policy.
Tow Truck Providers: Basic contact and location details are shared with the tow provider you select.
Payment Processors: We receive confirmation of payment and subscription status, but not full card numbers. We do not collect or store biometric data, health information, or government identifiers (other than number plates, which are public).

2. How We Use Your Information

We use your Personal Information for the following purposes:

To provide, maintain, and improve the App – e.g., sending rego/parking/licence reminders, facilitating messaging, processing car sales and raffles, providing navigation, operating ride‑share matching.
To communicate with you – e.g., push notifications for reminders, subscription confirmations, support messages, security alerts.
To process subscriptions, platform fees, and payments – billing, renewal notices, refunds.
To enable user‑to‑user interactions – e.g., showing your decorated plate/business information to other users, facilitating messages, ride‑share matching.
To ensure safety and compliance – monitoring for prohibited conduct (e.g., harassment, driving while using the App, fraudulent listings), enforcing our Terms, responding to legal.
To provide, maintain, and improve the App – e.g., sending rego/parking/licence reminders, facilitating messaging, processing car sales and raffles, providing navigation, operating ride‑share matching.
To communicate with you – e.g., push notifications for reminders, subscription confirmations, support messages, security alerts.
To process subscriptions, platform fees, and payments – billing, renewal notices, refunds.
To enable user‑to‑user interactions – e.g., showing your decorated plate/business information to other users, facilitating messages, ride‑share matching.
To ensure safety and compliance – monitoring for prohibited conduct (e.g., harassment, driving while using the App, fraudulent listings), enforcing our Terms, responding to legal.
To analyse and improve the App – anonymised usage statistics, feature popularity, crash reports (no individual identification).
To integrate with third‑party services – e.g., sending your location and pothole report to a local council, sharing ride details with a driver, providing map data via the mapping service. We will not use your Personal Information for purposes incompatible with those listed above without your consent.

3. How We Share Your Information

We do not sell your Personal Information. We may share it in the following circumstances:

3.1With Other Users

Number Plate Messaging: Your number plate (as your username) is visible to any user who enters it. Messages you send are visible to the recipient.
Car Sales & Social Feed: Your username, listing details, and posts are visible to other users.
Decorated Plate / Business Information: If you subscribe, your decorated plate and business details are visible to other users.
Ride‑Share: If you use Carmunicate’s ride‑share feature, your first name, rating (if any), pickup location, and destination are shared with potential drivers. Drivers’ names, vehicle details, and locations are shared with riders.

3.2 With Third‑Party Service Providers

Payment Processors: To handle subscription and platform fee payments (e.g., Stripe, Apple Pay, Google Pay, Alipay, WeChat Pay for China).
Tow Truck Companies: Your name, location, and contact number are shared with the tow provider you select.
Mapping Service (e.g., Google Maps): Your location data is shared with the mapping service when you use navigation.
YouTube: Embedded tutorials – Google/ YouTube may collect data as described in their privacy policy.
Local Councils (Pothole Reports): Your pothole report (including location and any photo you submit) may be forwarded to the relevant council. We encourage you not to include personal identifiers in pothole reports.
Cloud Hosting & Analytics: We use cloud providers (e.g., AWS, Google Cloud, Alibaba Cloud for China) and analytics tools (e.g., Firebase) to store data and improve the App.

3.3 For Legal and Safety Reasons

We may disclose your Personal Information to:

Law enforcement, police, courts, or government agencies if required by law or in response to a valid legal request (e.g., subpoena, court order, search warrant).
To protect the safety, rights, or property of Carmunicate, our users, or the public (e.g., if you use the App to harass another user, commit fraud, or drive dangerously).
To comply with data localisation laws (e.g., in Russia or China) where applicable.

3.4 Business Transfers

If Carmunicate is involved in a merger, acquisition, or sale of assets, your Personal Information may be transferred as part of that transaction. We will notify you via the App or email before your information becomes subject to a different privacy policy.

3.5 With Your Consent

We may share your information for other purposes with your explicit consent.

4. International Data Transfers

Carmunicate is based in Queensland, Australia. However, because we operate (or will operate) in the USA, Canada, New Zealand, United Kingdom, China, Russia, Japan, your Personal Information may be transferred to and processed in those countries, as well as other countries where our service providers are located (e.g., cloud servers in the US, EU, or China).

When we transfer your information internationally, we take steps to protect it:

For transfers from Australia: We comply with Australian Privacy Principle 8 (cross‑border disclosure) by ensuring that recipients are subject to laws that provide substantially similar protections or by obtaining your consent.
For transfers from the UK/EU (GDPR): We use Standard Contractual Clauses (SCCs) or equivalent safeguards.
For transfers from China: We comply with PIPL requirements, including conducting security assessments where required.
For transfers from Russia: We comply with data localisation laws (certain data may be stored on servers within Russia).
For transfers from Japan: We comply with APPI requirements for cross‑border transfers.

By using the App, you consent to the transfer of your information to these countries.

5. Your Privacy Rights

Depending on your location, you may have the following rights. To exercise any of them, contact us at privacy@carmunicate.app. We will respond within the timeframes required by law (generally 30 days). We may ask you to verify your identity.

Jurisdiction Rights complain to OAIC. California (USA) (CCPA/CPRA) Know what data we collect/use/disclose, delete (subject to exceptions), opt out of “sale” (we do not sell), non‑discrimination. Canada (PIPEDA) Access, correct, challenge compliance. New Zealand (Privacy Act 2020) Access, correct, complain to Privacy Commissioner. United Kingdom / EU (GDPR) Access, rectification, erasure (“right to be forgotten”), restriction, data portability, object to processing, withdraw consent, complain to ICO or local supervisory authority. China (PIPL) Access, copy, correct, delete, withdraw consent, request explanation of rules. Russia (Federal Law 152-FZ) Access, correct, block, delete; additional rights related to data localisation. Japan (APPI) Access, correct, cease use, complain to OAIC. California (USA) (CCPA/CPRA) Know what data we collect/use/disclose, delete (subject to exceptions), opt out of “sale” (we do not sell), non‑discrimination. Canada (PIPEDA) Access, correct, challenge compliance. New Zealand (Privacy Act 2020) Access, correct, complain to Privacy Commissioner. United Kingdom / EU (GDPR) Access, rectification, erasure (“right to be forgotten”), restriction, data portability, object to processing, withdraw consent, complain to ICO or local supervisory authority. China (PIPL) Access, copy, correct, delete, withdraw consent, request explanation of rules. Russia (Federal Law 152-FZ) Access, correct, block, delete; additional rights related to data localisation. Japan (APPI) Access, correct, cease use, to PPC.

Note: If you are a user from China or Russia, certain Personal Information may be stored on servers within your country as required by local law. Please contact us for details.

6. Data Retention

We retain your Personal Information for as long as your account is active or as needed to provide the App. After you delete your account, we will:

Delete or anonymise your Personal Information within 90 days, except where we must retain it for legal, tax, fraud prevention, or safety ride‑share trip logs for 1 year, message logs as necessary to investigate complaints.
Messages sent via number plate may be retained in anonymised form for analytical purposes. You may delete your account at any time via the App settings. Please note that content you have shared publicly (e.g., car listings, social feed posts) may remain visible even after account deletion unless you remove it beforehand.

7. Security of Your Information

We implement reasonable technical, administrative, and physical safeguards to protect your Personal Information, including encryption in transit (TLS 1.3 ) and at rest (AES-256). Access to Personal Information is restricted to employees and contractors who need it to operate the App.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If we become aware of a data breach affecting your Personal Information, we will notify you and the relevant regulatory authorities as required by law (e.g., OAIC in Australia, ICO in the UK, relevant agencies in China, Russia, Japan).

8. Children’s Privacy

The App is not intended for children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect Personal Information from anyone under 18. If we learn that we have collected such information, we will delete it promptly. If you believe a child has provided us with Personal Information, please contact us.

9. Third‑Party Links and Services

The App contains links to or integrations with third‑party services (e.g., mapping service, YouTube, tow companies, payment processors, councils). This Privacy Policy does not apply to those third parties. We recommend you read their privacy policies. Carmunicate is not responsible for the privacy practices of any third party.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top will change. If we make material changes, we will notify you via:

A push notification or in‑app alert. · An email (if you have provided one).

1Your continued use of the App after the changes become effective constitutes your acceptance of the revised Privacy Policy. If you do not agree, you must stop using the App.

11. How to Contact Us

For questions, to exercise your privacy rights, or to report a privacy concern:

Carmunicate Pty Ltd – Privacy Officer Attn: Director Email: privacy@carmunicate.app (for privacy matters) Or legal@carmunicate.app (general legal)

Complaints by Region

Australia: Office of the Australian Information Commissioner (OAIC) – www.oaic.gov.au

United Kingdom: Information Commissioner’s Office (ICO) – www.ico.org.uk

California: California Attorney General – oag.ca.gov/privacy

Canada: Office of the Privacy Commissioner (OPC) – www.priv.gc.ca

New Zealand: Office of the Privacy Commissioner – www.privacy.org.nz

China: Cyberspace Administration of China (CAC) – www.cac.gov.cn

Russia: Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor) – rkn.gov.ru

Japan: Personal Information Protection Commission (PPC) – www.ppc.go.jp