Privacy Policy
Last updated: 21 March 2026
1. Who We Are
DailyTick is a product of The Lost Co, an Australian company. In this policy, “we”, “us”, and “our” refer to The Lost Co. We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information We Collect
We collect the following information when you use DailyTick:
- Account information: Email address and password (encrypted) when you create an account.
- Habit data: Habits you create, completion records, goals, badges, streaks, and daily reflections.
- Profile information: Display name and avatar selection (optional).
- Payment information: Processed securely by Stripe. We do not store your card details — only a Stripe customer ID for managing subscriptions.
- Usage data: Basic analytics such as app version and feature usage to improve the product.
3. How We Use Your Information
- To provide and maintain the DailyTick service, including syncing your data across devices.
- To process payments and manage your subscription via Stripe.
- To send transactional emails (account confirmation, password resets).
- To improve and develop the product based on aggregated, anonymised usage patterns.
We do not sell your personal information. We do not serve advertisements. We do not share your data with third parties for marketing purposes.
4. Data Storage & Security
Your data is stored securely on Supabase infrastructure with encryption at rest and in transit. Payment processing is handled by Stripe, a PCI DSS Level 1 certified provider. We implement industry-standard security measures to protect your information from unauthorised access, alteration, or destruction.
5. Third-Party Services
We use the following third-party services:
- Supabase — authentication and database hosting.
- Stripe — payment processing.
- Vercel — application hosting.
Each of these services has their own privacy policy governing their handling of data.
6. Your Rights
Under the Australian Privacy Act, you have the right to:
- Access the personal information we hold about you.
- Correct any inaccurate or out-of-date information.
- Delete your account and all associated data at any time from the Settings page.
- Export your data in JSON format from the Settings page.
- Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy.
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Anonymised, aggregated data may be retained for product analytics.
8. Cookies
DailyTick uses only essential cookies and local storage required for authentication and app functionality. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
9. Children's Privacy
DailyTick is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised “Last updated” date.
11. Contact Us
If you have questions about this Privacy Policy or wish to make a privacy-related request, please contact us at agent@thelost.com.au.