Privacy Policy

This Privacy Policy explains how Qualia Systems Pty Ltd ("Avessia", "we", "us" or "our") collects, uses, discloses and protects personal information when you use the Avessia mobile application, website and related services (together, the "Services").

Avessia is designed to help users understand cosmetic and personal care ingredients by reading ingredient lists, generating product assessments, and allowing users to save products and preferences.

1. Who we are and how to contact us

Entity: Qualia Systems Pty Ltd ABN 59 6793 81974
Business address: 13/260 Wickham Rd, HIGHETT VIC 3190 AUSTRALIA
Email: contact@avessia.app
Support: support@avessia.app

If you have a privacy question, want to access or correct your information, or want to request deletion of your account data, please contact us using the details above.

2. What information we collect

We collect only the information reasonably necessary to provide and improve the Services.

A. Account and sign-in information

When you sign in using Google or Apple, we may receive:

• your name
• your email address
• your provider account identifier (or another authentication identifier made available to us)
• sign-in metadata needed to authenticate your account and maintain your session

We do not collect your Google or Apple password.

B. App usage and technical information

When you use the Services, we may collect:

• app session and authentication data
• device or installation identifiers generated by the app
• IP address
• app version and basic diagnostic information
• subscription / entitlement status
• logs necessary for security, fraud prevention, troubleshooting and service operation

C. Scan and Shelf information

When you use the scan and Shelf features, we may collect and store:

• images you submit for ingredient scanning
• extracted ingredient text
• scan results and ingredient match results
• product names, categories and notes you choose to save
• Shelf thumbnails or other product photos you choose to save

D. Preferences and profile information

We may collect:

• your selected ingredient concern preferences
• account settings you choose in the app

E. Support communications

If you contact us, we may collect:

• your name and contact details
• the contents of your message
• records of our correspondence with you

3. What we do not intentionally collect

Avessia is not intended to collect health information, biometric information, government identifiers, or other categories of sensitive information unless you choose to provide such information in a support request or other free-text communication.

Please do not send us medical information or other sensitive personal information unless it is necessary and you are comfortable doing so.

4. Why we collect and use personal information

We use personal information to:

• create and manage your account
• authenticate you and keep you signed in
• provide the scan, ingredient, Shelf and subscription features
• personalise product assessments based on your selected concerns
• process payments, restore subscriptions and manage entitlements
• maintain app security and prevent abuse or fraud
• troubleshoot errors and improve service quality
• respond to support requests and user enquiries
• comply with legal obligations and enforce our Terms of Use

We do not sell personal information to advertisers.

5. How we collect personal information

We collect personal information:

• directly from you when you sign in, scan a product, save an item to Shelf, update settings or contact support
• from Google or Apple when you use their sign-in services
• automatically through your use of the Services, such as when the app creates logs, sessions or technical records needed to operate securely

6. Sign in with Google and Apple

If you choose to sign in with Google or Apple, those providers authenticate you and then provide us with limited account information necessary to create and maintain your Avessia account.

Your use of Google or Apple sign-in is also subject to the privacy policies and terms of those providers.

7. Disclosure of personal information

We may disclose personal information to trusted service providers where reasonably necessary to operate the Services, including providers that assist us with:

• cloud hosting and infrastructure
• authentication
• app store billing and subscription management
• secure storage and delivery of app content
• customer support and operational communications

We may also disclose personal information:

• where required or authorised by law
• to respond to lawful requests from courts, regulators or law enforcement
• in connection with a corporate transaction such as a merger, sale or restructure
• to protect our rights, users, systems or the public from fraud, abuse or security threats

We do not disclose personal information to third parties for their own direct marketing.

8. Overseas disclosure and cross-border services

Some of our service providers may store or process personal information outside Australia.

Where this happens, we will take reasonable steps to ensure personal information is handled in a manner consistent with applicable privacy requirements.

Depending on the providers we use from time to time, personal information may be processed in countries including, for example, Australia, the United States, and other countries where our service providers or infrastructure are located.

Because our providers may change over time, this list is not exhaustive.

9. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide the Services
• maintain your account and saved content
• resolve disputes and provide support
• detect and prevent fraud or abuse
• comply with legal, tax, accounting and record-keeping obligations

When personal information is no longer required, we will take reasonable steps to destroy it or de-identify it, unless we are required or permitted to keep it by law.

10. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.

These steps may include:

• access controls
• authentication and session controls
• encrypted network transmission
• secure hosting practices
• logging and monitoring for abuse or suspicious activity
• limiting access to those who need it for legitimate business purposes

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Access and correction

You may request access to the personal information we hold about you, and you may ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, contact us using the details in section 1.

We may need to verify your identity before acting on your request.

12. Account deletion and deletion requests

You can delete your account associated and personal data by using the in-app feature provided under the Profile screen, or by following the instructions here.

When we receive a valid deletion request, we will:

• delete or de-identify personal information that we no longer need for the purposes set out in this Privacy Policy, and
• retain only information we are required or reasonably permitted to keep, such as information needed for legal compliance, fraud prevention, dispute resolution, security, financial records, or the establishment, exercise or defence of legal claims.

Deleting your account may remove access to:

• saved Shelf items
• saved scan history
• saved preferences
• other account-linked content

Please note that deleting the app from your device does not by itself delete your account data or cancel any app store subscription.

13. Cookies, similar technologies and app analytics

Our website and online services may use cookies or similar technologies for security, performance and basic service functionality.

If we introduce analytics or similar measurement tools, we will update this Privacy Policy accordingly.

14. Privacy complaints

If you believe we have mishandled your personal information, please contact us first using the details in section 1.

Please provide enough detail for us to investigate your concern. We will review your complaint and respond within a reasonable time.

If you are not satisfied with our response and Australian privacy law applies, you may be able to complain to the Office of the Australian Information Commissioner (OAIC).

15. International users

Avessia is operated from Australia.

If you access the Services from outside Australia, your personal information may be transferred to and processed in Australia and in other countries where our service providers operate.

If we actively offer the Services to individuals in jurisdictions such as the European Union or the United Kingdom, additional privacy laws may apply. Where required, we may provide additional disclosures, rights information or local contact details.

If we are not prepared to support those additional regulatory requirements in a particular jurisdiction, we may choose not to offer the Services there.

16. Children

Avessia is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16 without appropriate authority.

If you believe a child has provided us with personal information without appropriate consent or authority, please contact us and we will take reasonable steps to investigate and, where appropriate, delete the information.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will update the effective date above and may provide additional notice through the app, website, or other appropriate channels.

The latest version of this Privacy Policy will always be available through the Services or our website.

18. Contact us

For privacy requests, complaints, access, correction or deletion requests, contact: