privacy policy
Last updated: 27 June 2026
1. Who we are
matchaed is an Australian matcha cafe discovery and review platform. We are bound by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). This policy explains how we handle your personal information when you use our app.
2. What personal information we collect
We collect your email address (used for passwordless sign-in via a one-time code), your display name, your matcha taste preferences, the cafe reviews and ratings you submit, and technical data such as your device, browser, IP address and how you use the app. We use Supabase for authentication and data storage.
3. How we collect it
We collect personal information directly from you when you sign in and use the app, for example when you enter your email, set your display name and taste profile, or post a review.
4. Why we collect and use it
We collect and use your information to authenticate you, to save your taste profile and reviews, and to operate, maintain and improve the service. We only use your information for these purposes or for related purposes you would reasonably expect.
5. Disclosure
We disclose personal information to our service providers who help us run matchaed, including Supabase for hosting and authentication and email delivery providers for sending your sign-in code. These providers may store or process your data outside Australia, so some of your information may be held overseas (see section 11 on APP 8). We do not sell your personal information.
6. Data security
We take reasonable steps to protect your personal information from misuse, loss and unauthorised access, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Access and correction
Under APP 12 and APP 13 you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date or incomplete. To make a request, email us at privacy@matchaed.com and we will respond within a reasonable period.
8. Cookies and local storage
We use a small amount of local storage to remember returning sign-ins and authentication session cookies to keep you signed in. These are necessary for the app to function and are not used for advertising.
9. Direct marketing
We do not send marketing communications without your consent. If we ever do, every message will include a simple way to opt out, and you can also opt out at any time by emailing us at privacy@matchaed.com.
10. Complaints
If you have a concern about how we handle your personal information, please contact us at privacy@matchaed.com and we will work to resolve it. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Overseas disclosure (APP 8)
As noted above, our service providers such as Supabase and our email delivery provider may store or process your personal information outside Australia. We take reasonable steps to ensure overseas recipients handle your information consistently with the APPs.
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the date at the top of this page. Significant changes will be communicated through the app where appropriate.
13. Contact us
For any privacy questions, requests or complaints, contact us at privacy@matchaed.com.