Privacy Policy

1. Who is responsible

Footing (ABN 79 101 664 732) runs Footing and is responsible for your personal information. You can contact us at [email protected].

2. What we collect

We collect the following personal information.

Account details

Your email address and your password. Your password is stored by our login provider as a one-way hash, which means we cannot read it.

Pay and work details you enter

Your pay dates and pay before tax, how often you are paid, your employment type, ordinary hours, the number of jobs and each job's type, hours and tax-free threshold setting, whether you have a study loan, and your leave and ADO hours.

Budget details you enter

Your savings categories, goals (amounts and finish dates) and percentages, your bills (names, amounts, due days and icons), your everyday spending percentage, and any carry over entries.

Spending you log or send

The amount, a note or shop name, the date and time, and how it was added (by hand, Triple Tap or Apple Pay). If a shortcut sends a payment without an amount, we keep the shop name and time until you add the amount.

Shortcut tokens

A label you choose and when it was last used. The token itself is stored only as a one-way hash, so we cannot recover it after it is shown to you once.

Household details

Your display name, the household you belong to and the invite codes you create. Members of your household can see the information described in the Terms (section 7).

Settings

Your currency, preferences and whether you have finished first-time setup.

Support messages

If you email us, we keep your message, your email address and our replies so we can help you.

Technical information

Our hosting provider records technical information when you use Footing, such as your IP address, device and browser type, and the pages or addresses requested. We also keep short error logs, which can include the start of a request that failed.

We do not ask for your tax file number, bank account or card numbers, or your location, and we do not read your contacts, photos or Apple Wallet.

3. How we collect it

We collect information directly from you when you create an account, enter details, set up a shortcut or contact us, and automatically through the technical information described above. We do not buy personal information about you from anyone else.

4. Why we use it

• to provide Footing: logging you in, calculating your estimates, showing your numbers and sharing your household view;
• to send you emails you need, such as account confirmation, login links and password resets;
• to answer your questions and give you support;
• to keep Footing secure, fix problems and prevent misuse; and
• to meet our legal obligations.

We do not use your information for advertising, we do not sell it, we do not share it with data brokers, and we do not use it to train artificial intelligence models.

5. Cookies, local storage and tracking

Footing stores a login session and your preferences in your browser or app (using local storage, which works like a cookie) so that you stay logged in. These are needed for Footing to work. We do not use advertising or analytics cookies and we do not track you across other websites or apps.

On your device, the Footing app also keeps a copy of your last saved numbers so you can read them without a connection, and its home screen widgets keep a small summary (what is left to spend, goal names and progress, and upcoming bill names and amounts). These stay on your device and are cleared when you log out or delete your account.

6. Who else handles your information

We use these service providers to run Footing. They handle personal information on our behalf, only to provide their service to us.

Supabase

Our database and login provider. It stores your account and everything you enter. Our database is located in Sydney, Australia (Amazon Web Services).

Cloudflare

Hosts the Footing website, provides security, and forwards emails sent to our support address. It operates a global network, so your requests may be handled in other countries.

Resend

Sends the emails Footing sends you, such as login links and password resets. It sees your email address and the content of those emails. It is a United States company and sends our emails from its servers in Tokyo, Japan.

Google (Gmail)

Holds the support mailbox, so it handles your emails to us and our replies. Google operates data centres in several countries.

Apple

Provides the App Store and the Shortcuts and Wallet features on your iPhone. Apple handles its own information under its own privacy policy. Footing does not receive anything from Apple Wallet except the purchase details that a shortcut you set up sends.

We may also disclose personal information if the law requires it, to protect our rights or safety or those of others, or with your consent. If the business were ever sold or transferred, your information could be transferred to the new owner, who would have to handle it under this policy.

7. Sending information overseas

Your Footing data is stored in Australia. However, some of the providers above may process limited information outside Australia: Cloudflare (globally), Resend (United States and Japan, for your email address and our emails to you) and Google (support emails). We take reasonable steps to make sure these providers protect your information, but by using Footing you accept that overseas providers may not be subject to Australian privacy law.

8. How we keep it safe

Information is sent between you and Footing over encrypted connections (HTTPS) and is encrypted at rest by our database provider. The database uses row-level security, which means the database itself only lets your own account read your own data. Shortcut tokens and passwords are stored as one-way hashes. Access to our systems is limited to us.

No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as the law requires.

9. How long we keep it

We keep your information for as long as you have an account. When you delete your account from the Profile page, all of your data is permanently deleted from our database straight away. At the time of writing we do not keep separate backups. We keep support emails for as long as we reasonably need them to help you, and technical logs for a short time.

10. Your rights

You can ask us for access to the personal information we hold about you, and ask us to correct it. Most of it you can see and edit yourself inside Footing. For anything else, email [email protected]. We will respond within a reasonable time, usually within 30 days, and may need to confirm who you are first.

You can delete your account and all your data yourself at any time from the Profile page, and you can delete a shortcut token at any time. You can also opt out of emails that are not needed to run your account.

11. Complaints

If you are concerned about how we have handled your personal information, email [email protected] and we will look into it and reply. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

12. Children

Footing is for people aged 16 and over. We do not knowingly collect personal information from anyone under 16. If you think a child has given us information, email us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last updated. If a change is significant, we will tell you in Footing or by email.

14. Contact us

Questions about your privacy? Email [email protected].