Privacy Policy

Last updated June 3, 2026.

Effective Date: 3 June 2026 · Last Updated: 3 June 2026 · Jurisdiction: Australia

1. Introduction

This Privacy Policy explains how JCFM Developments Pty Ltd (ABN 40 650 541 736) (“JCFM Developments”, “we”, “our”, or “us”) collects, uses, discloses, and protects your personal information when you access or use our mobile and web applications, websites, and related services (collectively, “the App” or “the Services”).

By creating an account, accessing the Services, or enabling any feature that involves the collection of information (including but not limited to location services, camera access, photo or media uploads, and content sharing), you acknowledge that you have read and understood this Policy and consent to the practices described in it. If you do not agree, you must not use the Services.

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Notifiable Data Breaches scheme. This Policy is accessible at all times via the App's settings menu and our website.

This Policy should be read together with our Terms of Service and Cookie Policy.

2. Information We Collect

We collect personal information that is reasonably necessary for our functions and activities. The categories include:

Account & Identity Information — name, email address, username, password (stored in hashed form), phone number, and profile details you provide.
Usage & Technical Data — interactions with the App, feature usage, device type and identifiers, operating system, browser type, app version, language settings, IP address, crash reports, diagnostic data, and server log data.
Location Data — where you enable location-based features, we may collect precise (GPS) and/or approximate location data, including in the background where you have granted the relevant operating-system permission and where required to deliver a feature you have requested (for example, live route tracking, location-tagged pins, or proximity-based content). You can disable location access at any time through your device settings; doing so may limit or prevent certain features from functioning.
User-Generated Content— pins, routes, timelines, tracks, photos, videos, captions, messages, comments, and any other materials you create, upload, share, or transmit through the Services (“Content”).
Communications — correspondence with us, including support requests and feedback.
Payment Information — where you purchase subscriptions or paid features, payment details are collected and processed by our third-party payment providers. We do not store full card details on our systems.
Information from Third Parties — where you link a third-party account (e.g., social login) or where we receive information from analytics, advertising, or service providers, in each case consistent with this Policy and applicable law.
Device Permissions — depending on the features you use, the App may request access to device capabilities and data through operating-system permissions, which may include: precise and approximate location (including background location where granted), camera, photo library and media, microphone, motion and fitness/activity sensors, Bluetooth, push notifications, files and storage, and contacts. We request each permission only for the feature that needs it, and we ask at or near the time of use. You may grant or revoke permissions at any time through your device settings; revoking a permission may disable the related feature but will not otherwise prevent you from using the rest of the App. We do not request permissions that are not used by an active feature.
Advertising & Tracking Identifiers — where applicable, advertising identifiers (such as the iOS Identifier for Advertisers (IDFA) and the Android Advertising ID) and similar identifiers used for measurement or advertising. On iOS, we will request your permission through Apple's App Tracking Transparency framework before tracking you across apps and websites owned by other companies, and we will only track you if you grant that permission. On Android, you can reset or delete your advertising ID through your device settings.

We collect information directly from you, automatically through your use of the Services, and from third parties as described above. If you provide us with personal information about another person, you warrant that you are authorised to do so and that you have made that person aware of this Policy.

3. How We Use Your Information

We use collected information to:

Provide, operate, maintain, secure, and improve the Services;
Create and manage your account and authenticate access;
Enable location-based, collaboration, sharing, and social features you choose to use;
Personalise your experience and present relevant content and features;
Process transactions, subscriptions, and payments;
Communicate with you regarding your account, updates, security alerts, and support;
Send marketing and promotional communications where permitted by law (you may opt out at any time);
Conduct research, analytics, and product development, including by aggregating or de-identifying data;
Detect, investigate, prevent, and address fraud, abuse, security incidents, and violations of our Terms;
Establish, exercise, or defend legal claims; and
Comply with our legal and regulatory obligations.

Where we rely on your consent (for example, for certain location collection or sensitive information), you may withdraw that consent at any time, though this may affect your ability to use certain features.

4. Disclosure of Information

We do not sell your personal information. We may disclose information in the following circumstances:

Service providers and contractors — hosting, cloud storage, mapping and geolocation, analytics, crash reporting, push notification delivery, advertising and attribution, payment processing, and customer support providers who process information on our behalf under contractual obligations of confidentiality and security. These providers may include third-party software development kits (SDKs) integrated into the App. A current list of the categories of providers and SDKs we use is available on request and, where required, in our in-App disclosures;
Other users — where you choose to share Content, pins, routes, plans, or profile information, that information will be visible to the users or groups you share it with, and in the case of public sharing, potentially to anyone. You are solely responsible for what you choose to share;
Legal and safety reasons — where we believe disclosure is reasonably necessary to comply with a law, regulation, legal process, or enforceable governmental request; to enforce our Terms; or to protect the rights, property, or safety of JCFM Developments, our users, or the public;
Business transfers — in connection with, or during negotiations of, any merger, acquisition, financing, reorganisation, or sale of assets, in which case information may be transferred as a business asset; and
With your consent — for any other purpose disclosed to you at the time.

We require any third party to whom we disclose user data — including analytics tools, advertising networks, third-party SDKs, and related entities — to provide the same or equivalent protection of user data as stated in this Policy and as required by the Apple App Store Review Guidelines and Google Play Developer Program Policies.

Third-party AI services. We do not share your personal data with any third-party artificial intelligence model or service except where it is necessary to provide a feature you have requested, and only after disclosing that sharing to you and obtaining your consent where required. We will not share personal data with third parties for the purpose of training their AI models without your explicit consent.

5. Data Storage & Security

We store information using reputable third-party infrastructure providers and apply technical and organisational safeguards designed to protect personal information from loss, misuse, interference, and unauthorised access, modification, or disclosure. These measures include, where appropriate, encryption in transit, access controls, and monitoring.

However, no method of transmission or storage is completely secure. While we take reasonable steps to protect your information, we cannot and do not guarantee absolute security. To the maximum extent permitted by law, you acknowledge that you provide information and use the Services at your own risk, and we are not liable for unauthorised access to or use of your information arising from causes beyond our reasonable control.

You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account.

6. International Data Transfers

We use cloud and service providers that may store or process information outside Australia, including in jurisdictions that may not provide the same level of data protection as Australian law. Where we transfer personal information overseas, we take reasonable steps to ensure that recipients handle it consistently with the APPs, or we rely on an applicable exception under the Privacy Act 1988 (Cth). By using the Services, you consent to such transfers.

7. Your Rights

Subject to applicable law, you may:

Access the personal information we hold about you;
Correct information that is inaccurate, out of date, incomplete, or misleading;
Request deletion of your account and associated personal information, subject to our legal and operational retention requirements (note that Content you have shared with others or that has been re-shared may persist);
Withdraw consent to optional collection or processing; and
Opt out of marketing communications at any time via the unsubscribe mechanism or your settings.

To exercise these rights, contact us at hello@jcfmdevelopments.com. We may need to verify your identity before responding. We will respond within the timeframes required by law. If we decline a request, we will explain why where we are permitted to do so.

8. Retention of Data

We retain personal information only for as long as is reasonably necessary to fulfil the purposes set out in this Policy, to provide the Services, to comply with our legal, accounting, or reporting obligations, and to resolve disputes and enforce our agreements. When information is no longer required, we will take reasonable steps to securely delete or de-identify it. De-identified and aggregated data may be retained and used indefinitely.

9. Children's Privacy

The Services are not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or a higher age where required by local law). If you are a parent or guardian and believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

10. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The “Last Updated” date indicates when the Policy was last revised. Where changes are material, we will provide notice through the App or by email. Your continued use of the Services after the effective date of an updated Policy constitutes your acceptance of the changes.

11. Cookies and Tracking Technologies

We and our partners use cookies, SDKs, pixels, and similar technologies to operate the Services, remember your preferences, analyse usage, measure performance, and deliver relevant content. You can manage cookie preferences through your browser or device settings and, where available, through our in-App controls. Disabling certain technologies may affect functionality. See our Cookie Policy for further detail.

12. Third-Party Links and Services

The Services may contain links to, or integrate with, third-party websites, applications, or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party before providing your information.

13. Data Breach Notification

We maintain procedures to detect and respond to data breaches. Where a data breach is likely to result in serious harm to affected individuals, we will notify those individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

14. Sensitive Information

We do not generally collect sensitive information (such as health, biometric, or genetic data, or information about racial or ethnic origin, religious beliefs, or sexual orientation). Where a specific feature requires sensitive information, we will collect it only with your express consent and use it solely for the purpose for which it was provided.

15. Complaints Process

If you have concerns about how we handle your personal information, please contact us at hello@jcfmdevelopments.com. We will acknowledge and investigate your complaint and respond within a reasonable period. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

16. International Users

The Services are operated from Australia and this Policy is designed to comply with Australian law. If you access the Services from outside Australia, you do so on your own initiative and are responsible for compliance with local laws. We endeavour to protect the privacy of all users in accordance with applicable laws.

17. Limitation

Nothing in this Policy excludes, restricts, or modifies any right or remedy, or any guarantee, warranty, or other term or condition implied or imposed by law (including the Australian Consumer Law) that cannot lawfully be excluded or limited. To the maximum extent permitted by law, our liability for any failure to comply with such non-excludable rights is limited, at our option, to supplying the Services again or paying the cost of having them supplied again.

Contact Us

For questions about this Privacy Policy or our handling of your personal information, contact JCFM Developments Pty Ltd at hello@jcfmdevelopments.com or via the contact page.