Privacy Policy

Effective date: 18 May 2026
Last updated: 18 May 2026

Who we are

BattleReady ("we", "us", "our") is operated by Red Beech Software (ABN 29 271 992 140), a sole trader business based in Australia. We provide a hobby tracking service for miniature and model painters, available via our website at https://www.getbattleready.app and our mobile apps (collectively, the "Service").

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights. It applies to everyone who uses the Service.

Our position under Australian privacy law

We are currently a small business under the Privacy Act 1988 (Cth) and may not be strictly required to comply with the Australian Privacy Principles (APPs). However, we have chosen to handle your personal information in accordance with the APPs and the Notifiable Data Breaches scheme, and we will continue to do so regardless of changes to our exemption status.

Information we collect

Information you give us

• Account details: your email address, a password (stored hashed — we never see it in plain text), and a display name. You can optionally add other profile details.
• Your content: your paint inventory, project records, techniques, notes, tags, and any other data you enter into the Service.
• Photos: images you upload — for example, progress photos of your projects — together with any captions or notes you add. Uploaded image files may also contain technical metadata (EXIF data) such as device type or, occasionally, GPS location. We don't strip this automatically. If you don't want location data stored, disable location metadata on your device before uploading, or strip it from the file first.
• Communications: records of any messages you send us (e.g. support emails).

Information collected automatically

• Technical data: IP address, browser type and version, operating system, and — on mobile — device type and OS version.
• Usage data: which pages and features you use, time spent, referring URLs, and any errors you encounter.
• Cookies and similar technologies: see "Cookies" below.

We do not collect date of birth, phone numbers, postal addresses, government identifiers, or biometric data. We don't store payment card details — payments are handled by Stripe (for web purchases) and by Apple or Google (for in-app purchases on iOS and Android, when those apps launch). These providers receive your payment details directly; we never see or store them.

How we use your information

• Operating the Service — letting you sign in, store and retrieve your data, and use features
• Communicating with you about your account, support issues, or important Service updates (these are transactional and can't be opted out of while you have an account)
• Improving the Service through aggregated, de-identified analytics
• Diagnosing bugs and security issues
• Sending marketing communications only if you opt in — you can unsubscribe at any time via the link in any email
• Complying with legal obligations (e.g. tax recordkeeping)

What we explicitly will not do

• We will not sell your personal information to anyone.
• We will not use your photos, content, or activity to train AI or machine learning models, whether ours or anyone else's.
• We will not share your private content publicly without an explicit action from you. Specifically, you control whether individual items (such as paint recipes, projects, or photos) are private or shared. Sharing is opt-in per item — by default everything you add stays private to your account. If you mark something as public or share it via a link, that specific item becomes visible to others; the rest of your content remains private.
• We will not disclose your personal information to advertisers or use it for ad targeting.

Photos and user content — specifics

Your uploaded photos and content are stored on Google Firebase Storage (operated by Google LLC) in a United States region. See "International transfers" below.

Your content is private by default and visible only to you. Some features of the Service let you choose to share specific items — for example, publishing a paint recipe so other users can see it. Sharing is always opt-in and per-item: marking one recipe as public does not make any of your other content public. You can make a shared item private again at any time, though copies that others have already saved or referenced may persist.

You can delete individual photos, projects, recipes, or any other content at any time. Deleted content is removed from your account immediately and purged from our backups within 30 days.

Cookies and similar technologies

We use:

• Essential cookies and local storage — required for sign-in (via Firebase Authentication) and basic Service functionality. These can't be disabled if you want to use the Service.
• Firebase Analytics (a Google product) — to understand how the Service is used in aggregate. This collects information such as approximate location (derived from IP), device type, app/page interactions, and a randomly generated installation identifier. Data is sent to Google in the United States. You can opt out of analytics collection in your account settings, and you can configure your device to limit ad tracking at the operating system level.

We don't use advertising cookies, retargeting pixels, or cross-site tracking.

Third parties we share information with

We share information only with service providers who help us run the Service:

• Web hosting: Vercel Inc. (United States) — serves our website and handles request routing.
• Backend, storage, authentication, and analytics: Google Firebase / Google LLC (United States) — stores your account, content, and photos; manages sign-in; and provides usage analytics.
• Error and performance monitoring: Sentry / Functional Software, Inc. (United States) — receives technical error reports which may include your IP address, browser/device information, and (when an error occurs) a limited snapshot of the application state. We make reasonable efforts to avoid sending personal content (e.g. your photos or paint data) to Sentry.
• Payment processing: Stripe, Inc. (United States) for web purchases; Apple Inc. (United States) and Google LLC (United States) for in-app purchases. These providers receive payment information directly; we never see or store card details.

We may also disclose information if required by law, court order, or to enforce our Terms of Service or protect rights and safety.

We do not share your information with any other third parties.

International transfers

The Service is built on cloud infrastructure operated primarily from the United States. Specifically:

• Vercel hosts our web application on its global edge network, with primary infrastructure in the United States.
• Firebase (Google) stores your account data, content, and photos in a United States region.
• Sentry processes error reports in the United States.
• Stripe processes payments in the United States.

By using the Service, you acknowledge that your personal information will be transferred to and stored in the United States and other jurisdictions where our service providers operate. Before disclosing your personal information to overseas recipients, we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles, including by relying on the contractual protections in their standard data processing terms.

The data protection laws of the United States may differ from those of Australia.

How long we keep your information

• Account and content: for as long as your account is active. When you delete your account, we keep the data for up to 30 days (in case you change your mind), after which it is permanently deleted.
• Server and security logs: up to 90 days.
• Backups: rolling backups are typically retained for 30 days, then overwritten.
• Records we're legally required to keep (e.g. tax records for invoiced customers): retained for the period required by law (typically 5–7 years in Australia).

You can request deletion of your account at any time through your in-app account settings or by emailing us at the address below.

Security

We protect your information using commercially reasonable measures, including:

• HTTPS/TLS encryption for all data in transit
• Encryption at rest for stored data
• Passwords hashed with industry-standard algorithms
• Access controls limiting who can access production systems
• Regular security review

No system is perfectly secure, and you're responsible for keeping your account password confidential and using a strong, unique password.

If we become aware of a data breach likely to result in serious harm to affected individuals, we will notify those individuals and the Office of the Australian Information Commissioner (OAIC) consistent with the Notifiable Data Breaches scheme.

Your rights

You have the right to:

• Access the personal information we hold about you
• Correct information that's inaccurate, out of date, or incomplete
• Export your data in a portable, machine-readable format
• Delete your account and associated data
• Withdraw consent for marketing or any other consent-based processing
• Complain about how we handle your personal information

Most of these you can do directly in your account settings. Otherwise, contact us at privacy@getbattleready.app and we'll respond within 30 days.

If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner: oaic.gov.au or 1300 363 992.

Minimum age

The Service is intended for users aged 13 and over. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete the account and associated data.

If you are between 13 and 18 (or the age of majority in your jurisdiction), you should review this policy with a parent or guardian before using the Service.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email and/or through a prominent notice in the Service before the change takes effect. The "Last updated" date at the top reflects the most recent change.

Contact us

Red Beech Software, ABN 29 271 992 140
Email: privacy@getbattleready.app