Sole Trader Tax Toolkit · Effective date: 30 March 2026
The short version: Your financial data stays on your device and in your personal iCloud account. We don't have servers, we don't collect your personal information, and we don't sell or share your data with anyone. The only data we receive is anonymous app usage analytics.
This Privacy Policy describes how Outpost Labs Pty Ltd (“we”, “us”, or “our”) collects, uses, and protects information in connection with the Sole Trader Tax Toolkit mobile application (“the App”). We are committed to protecting your privacy and handling your information responsibly.
By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.
We want to be upfront about what we don't do. We do not collect, store, receive, or have access to:
We do not operate servers that store your data. All financial data you enter into the App is stored locally on your device and, if you have iCloud enabled, in your personal iCloud account managed by Apple.
The App stores all of your data — mileage logs, expense records, income entries, receipt photos, BAS deadline settings, and preferences — locally on your device using Apple’s SwiftData framework.
If you have iCloud enabled on your device, this data will also sync to your personal iCloud account via Apple’s CloudKit service. This allows your data to sync across your iPhone and iPad. iCloud sync is managed entirely by Apple under Apple’s Privacy Policy and your Apple ID account settings. We do not have access to your iCloud data.
Receipt photos are stored as compressed image files within the App’s data. They remain on your device and in your iCloud account. They are never transmitted to us or any third party.
You can delete your data at any time by deleting individual records within the App or by deleting the App itself, which removes all locally stored data. To remove data from iCloud, you can manage your iCloud storage through your device’s Settings.
We use TelemetryDeck, a privacy-friendly analytics service, to understand how the App is used in aggregate. TelemetryDeck collects anonymous, non-identifiable usage data such as:
TelemetryDeck does not collect your IP address, device identifier, advertising ID, or any information that could identify you personally. TelemetryDeck’s analytics are designed to comply with GDPR, the Australian Privacy Act, and Apple’s App Tracking Transparency requirements without requiring user consent for analytics. You can review TelemetryDeck’s privacy policy for further details.
This anonymous data helps us understand which features are valuable, identify technical issues, and improve the App. It cannot be used to identify you or reconstruct your financial data.
The App offers subscription plans and a lifetime purchase, all processed through Apple’s App Store. We do not collect, process, or store any payment information. All transactions are handled by Apple under Apple’s Media Services Terms and Conditions.
We receive anonymised transaction data from Apple (such as the number of subscriptions sold and aggregate revenue figures) but this data is not linked to individual users.
The App integrates with the following third-party services:
We do not use any advertising networks, tracking SDKs, social media SDKs, or other third-party services that collect personal information. We do not use third-party AI services in the App.
We do not sell, rent, trade, or otherwise share your personal information with any third party. This is straightforward: we don’t have your personal information, so there is nothing to share.
The only data shared with a third party is the anonymous analytics data sent to TelemetryDeck, as described in Section 3.
Your financial data is stored on your device and in your iCloud account for as long as you choose to keep it. The App retains data indefinitely to support multi-year tax records (sole traders may need to access prior financial year data at tax time).
You can delete individual records (trips, expenses, income entries) within the App at any time. Deleting the App from your device removes all locally stored data. To remove data from iCloud, manage your iCloud storage in your device Settings under your Apple ID.
Anonymous analytics data collected by TelemetryDeck is retained in accordance with TelemetryDeck’s data retention policies and cannot be used to identify you.
Your data is protected by the security measures built into iOS and iCloud:
Because we do not operate servers or collect your data, there is no centralised database that could be subject to a data breach.
The App is not directed at children under the age of 16. We do not knowingly collect any information from children. The App is designed for use by Australian sole traders and business operators, who are by definition adults or young adults engaged in business activity.
The App does not use artificial intelligence, machine learning, or automated decision-making systems. All calculations in the App (GST components, mileage deductions, BAS estimates) are simple arithmetic based on ATO rates and the data you enter. No decisions are made about you by automated processes.
This is relevant under the Privacy and Other Legislation Amendment Act 2024 (Cth), which introduced transparency requirements for automated decision-making effective December 2026. The App does not engage in any form of automated decision-making covered by these provisions.
The App includes a feature to export your data as CSV files. When you use this feature, the exported files are generated locally on your device and shared via the iOS share sheet (AirDrop, email, Files, etc.). We do not receive, intercept, or have access to your exported data. You are responsible for the security of exported files once they leave your device.
We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth).
As an entity with annual turnover below $3 million, Outpost Labs Pty Ltd is currently exempt from most obligations under the Privacy Act by virtue of the small business exemption. However, we have chosen to adopt privacy practices that meet or exceed the standards required of larger organisations, because we believe it is the right thing to do and because the small business exemption may be removed in future legislative reforms.
In particular:
Because we do not collect personal information, there is no personal data for us to provide access to, correct, or delete. However, you have full control over your data:
We may update this Privacy Policy from time to time to reflect changes in our practices, the App’s features, or applicable laws. When we make changes, we will update the “Effective date” at the top of this page. We encourage you to review this Privacy Policy periodically. If we make material changes that affect how we handle your information, we will notify you through the App or via an app update.
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Outpost Labs Pty Ltd
Email: privacy@outpostlabs.com.au
Melbourne, Victoria, Australia
If you are not satisfied with our response to a privacy inquiry, you may contact the Office of the Australian Information Commissioner (OAIC).