Privacy Policy

This Privacy Policy describes how Bonita Lienkie van der Westhuizen (ABN 66 389 018 686), trading as MusterMate("we", "us", "our"), collects, holds, uses, and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using MusterMate you consent to the practices described in this policy. If you do not agree, do not use the service.

Account information

• Email address and password (managed by Supabase Auth).
• Farm name, Property Identification Code (PIC), owner name, address, phone, and email that you enter in Settings → Farm Profile.

Farm records

• Animal records including names, ear tags, NLIS tags, breeds, dates of birth, photos, treatment records, breeding records, weights, and health events.
• Paddock, mob, and feeding records.
• Audit checklists and reminders.
• Owner and agistee contact information you choose to record.

Billing information

• We do not store credit card numbers. Payment is handled entirely by Stripe (see section 5). We receive a customer ID and subscription status from Stripe.

Device and usage information

• Browser type, device type, and IP address for security logging.
• Push notification subscription tokens (stored in our database to deliver reminders to your device).

We collect and use your information to:

• Create and manage your MusterMate account.
• Provide the farm record-keeping service.
• Send you reminders and push notifications that you have opted into.
• Process subscription payments via Stripe.
• Respond to your support enquiries.
• Meet legal obligations including fraud prevention and tax record-keeping.

We collect only the minimum information necessary for these purposes. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Under Australian privacy law, we may collect and use personal information where:

• Contract performance — to provide the service you have subscribed to.
• Consent — for push and email notifications (you can withdraw consent at any time in Settings → Notifications).
• Legitimate interests — for security logging and fraud prevention, where those interests are not overridden by your rights.
• Legal obligation — for tax and payment record-keeping.

We use the following third-party service providers ("sub-processors") to operate MusterMate. Each sub-processor is bound by contractual obligations to handle personal data securely and in accordance with applicable privacy law.

We do not use advertising networks, analytics platforms, or any other tracking technologies that share your data with third parties.

Your farm records and account data are stored in Supabase's Australian data centre (AWS ap-southeast-2, Sydney). Payment data is processed by Stripe and reminder emails are sent via Resend, both of which operate internationally. Before transferring your personal information overseas, we take reasonable steps to ensure those overseas recipients handle it in accordance with Australian privacy law (APP 8).

• We retain your data for as long as you have an active account.
• When you request account deletion, your data is soft-deleted immediately and permanently purged after 30 days. You may cancel the deletion within that 30-day window by signing back in.
• Billing records and invoices are retained for 7 years as required by Australian tax law.
• Backup copies are retained for up to 30 days in Supabase's automated backup system before being overwritten.

We take reasonable steps to protect your personal information, including:

• AES-256 encryption at rest and TLS 1.2+ in transit (managed by Supabase).
• Row-Level Security (RLS) policies that ensure each user can only access their own farm's data.
• Authentication managed by Supabase Auth (bcrypt password hashing, token rotation).
• No plaintext passwords stored anywhere in the system.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@mustermate.app.

Under Australian privacy law you have the right to:

• Access your personal information — export a full copy at any time from Settings → Your data → Download NLIS Report or Download CSV bundle.
• Correct inaccurate information — edit any record directly in the app.
• Delete your account and all associated data — use Settings → Danger zone → Delete my account.
• Opt out of notifications — adjust at any time in Settings → Notifications.
• Complain — see section 11 below.

To exercise a right that isn't available in-app (for example, to request information about how your data has been used or shared), contact us at privacy@mustermate.app. We will respond within 30 days.

MusterMate uses browser local storage and IndexedDB to store your farm records on-device for offline access. These are not cookies and are not accessible to other websites. We use a small number of strictly necessary cookies for authentication (Supabase session tokens). We do not use advertising cookies, analytics cookies, or third-party tracking pixels.

If you believe we have handled your personal information in a way that does not comply with this policy or the APPs, please contact us first:

• Email: privacy@mustermate.app
• We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

We may update this Privacy Policy from time to time. Material changes will be notified via email and/or an in-app banner at least 30 days before they take effect. The current version is always available at mustermate.app/privacy.

Privacy enquiries: privacy@mustermate.app

General enquiries: hello@mustermate.app

Bonita Lienkie van der Westhuizen · ABN 66 389 018 686 · Queensland, Australia