Privacy Policy
Effective date: 16 May 2026 Version: 1.0 Operator: Genvro
1. About This Policy
Genvro ("we", "our", "us") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how we collect, use, disclose, and manage your personal information when you use the Genvro platform, including our mobile application and website (genvro.app).
By using our services, you consent to the practices described in this Policy. If you do not agree, please discontinue use of our services.
2. Who We Are
Genvro is a mobile-first platform that enables individuals and businesses to receive instant financial support from their community via QR code and public payment pages.
Contact us at privacy@genvro.app with any privacy-related enquiries.
3. Information We Collect
We collect the following categories of personal information:
Account information: Name, email address, and password (hashed) when you create an account. If you sign in via Apple or Google, we receive a unique identifier and your name from those services.
Profile information: Display name, profile photo, custom message, category, suburb, and public page slug.
Payment and financial information: We do not store full payment card details. Payment processing is handled by Stripe. We store payment records including amount, currency, fee breakdown, and transaction identifiers.
Device and notification information: Device token for push notifications (Apple Push Notification service), platform type, and registration date.
Location and network information: Approximate city and country derived from your IP address at the time of payment, using Vercel's edge network headers. No precise GPS location is collected without your explicit consent.
Usage information: Session data, access token metadata, and account activity logs for security and fraud prevention purposes.
4. How We Collect Your Information
We collect information directly from you when you register, update your profile, or contact us; automatically when you use our services (device tokens, session data); from third-party services when you authenticate via Apple Sign-In or Google Sign-In; from Stripe when payment events occur via webhook; and from Vercel's edge network headers when supporters access your payment page.
5. Why We Collect Your Information
We use your personal information to provide and operate the Genvro platform, process and record financial transactions, send push notifications and email communications relevant to your account, verify your identity and maintain account security, comply with our legal and regulatory obligations, prevent fraud and abuse, and improve our services.
We will not use your personal information for purposes incompatible with those described above without your consent.
6. Disclosure to Third Parties
We disclose personal information to the following service providers, solely as necessary to deliver our services: Stripe for payment processing (United States); Resend for transactional email delivery (United States); Apple APNs for push notification delivery (United States); Sentry for error monitoring and performance tracking (United States); Vercel for platform hosting and edge network (United States and European Union); Neon for database hosting (United States); Google Cloud Vision API for image content moderation (United States); Cloudflare for media storage and content delivery (United States); and Redis for session and queue management (United States).
We do not sell your personal information to third parties.
7. International Transfers
Some of our service providers are located outside Australia. By using our services, you acknowledge that your personal information may be transferred to and processed in countries outside Australia, including the United States.
We take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the APPs (APP 8.1) or are subject to a law that provides substantially similar protection.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services.
Upon account deletion, your email address and profile information are anonymised immediately, payment records are retained for financial compliance and audit purposes in an anonymised form, and device tokens and sessions are deactivated immediately. You may request deletion of your account at any time via Settings > Delete Account in the Genvro app.
9. Security
We implement appropriate technical and organisational measures to protect your personal information, including TLS encryption for all data in transit, hashed password storage, Keychain storage for authentication tokens on iOS, and access controls limiting staff access to personal data.
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but we review and update our security practices regularly.
10. Your Rights
Under the Privacy Act 1988 and the APPs, you have the right to access the personal information we hold about you (APP 12), correct inaccurate or incomplete information (APP 13), delete your account and associated data via the app, and lodge a complaint if you believe your privacy rights have been breached.
To exercise any of these rights, contact us at privacy@genvro.app.
11. Cookies and Tracking
Our website uses minimal session cookies for authentication purposes. We do not use third-party advertising or tracking cookies.
Stripe may set cookies on payment-related pages for fraud prevention purposes. Please refer to Stripe's Privacy Policy at stripe.com/au/privacy for details.
12. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at privacy@genvro.app and we will take steps to delete that information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date and version number at the top of this document. Where changes are material, we will notify you via email or push notification.
Continued use of our services after any changes constitutes acceptance of the updated Policy.
14. Contact and Complaints
For privacy enquiries, contact us at privacy@genvro.app.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5218, Sydney NSW 2001.