Privacy Policy

1. Introduction

After Digital Pty Ltd (ABN 86 700 205 429) ("After Digital", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal information we collect through the AfterPit mobile application (the "Service"), how we use it, who we share it with, and the choices you have.

This Policy is designed to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

By using AfterPit, you agree to the collection and use of information as described in this Policy.

2. Information We Collect

2.1 Account Information

• Email address — used for login and account communication
• Name — used to personalise your account
• Profile photo (optional) — if you choose to add one
• Account type — whether you are a standard user, dealer, or mechanic
• Email verification status
• Account creation date
• Push notification device token — used to send you reminders and alerts
• Sign-in method — email, Google, or Apple

2.2 Vehicle Information

When you register a vehicle, we collect information about the vehicle itself, including:

• Vehicle Identification Number (VIN)
• Registration plate and state
• Make, model, year, variant, and badge
• Body type, colour, and transmission
• Odometer readings
• Registration and insurance expiry dates
• Vehicle photos
• Modifications and specifications you add

Vehicle information is, by the nature of the Service, tied to the vehicle (via its VIN) rather than exclusively to your account — see our Terms and Conditions for more detail on how this works.

2.3 Service History and Documents

• Service, repair, and maintenance entries you create
• Photos and PDF documents you upload (such as invoices or logbook pages) for AI-assisted extraction
• Workshop names and details associated with your entries
• Reminders you set for future services

2.4 Technical Information

• Device type and operating system
• App usage analytics (via Firebase Analytics)
• Crash and performance data

3. How We Use Your Information

• To create and manage your account
• To provide the core functionality of the Service — tracking vehicles, logging service history, and setting reminders
• To process documents you upload using AI-assisted extraction, so we can pre-fill service log entries for your review
• To look up vehicle details from a registration plate, where you choose to use this feature
• To send you push notifications and reminders you have configured
• To send you transactional emails, such as account verification and password reset
• To respond to support requests
• To improve and maintain the Service, including diagnosing technical issues
• To detect and prevent fraud, such as fraudulent vehicle claims

4. Who We Share Information With

We do not sell your personal information to anyone. We share information only with the following categories of third parties, solely for the purposes of operating the Service:

4.1 AI Document Processing

When you use the document scanning feature, uploaded images or PDFs are sent to Anthropic (Claude API) and/or Google (Gemini API) for the sole purpose of extracting vehicle service information. We use these providers' commercial API tiers, under which neither provider uses your submitted content to train their models. Data may be processed on servers located outside Australia.

4.2 Vehicle Lookup Service

If you choose to look up a vehicle using its registration plate, the plate number and state are sent to a third-party vehicle data provider (via RapidAPI) to retrieve vehicle details such as make, model, and year. Your account information (name, email) is not shared with this provider — only the registration details necessary to perform the lookup.

4.3 Infrastructure and Hosting

• Amazon Web Services (AWS) — for hosting our servers and database, and for sending transactional emails
• Firebase (Google) — for push notifications and app analytics

4.5 Legal Requirements

We may disclose your information if required to do so by law, or in good faith belief that such action is necessary to comply with a legal obligation, protect our rights or property, or protect the safety of our users or the public.

5. International Data Transfers

Some of the third-party service providers we use (including AI processing providers and cloud infrastructure providers) may store or process data on servers located outside Australia, including in the United States. Where this occurs, we take reasonable steps to ensure your information continues to be protected in accordance with the Australian Privacy Principles, including relying on our service providers' own security and privacy commitments.

6. Data Retention

We retain your personal information for as long as your account remains active.

If you delete your account, we will deactivate it immediately and remove it from active use. We retain your data in a deactivated state for 30 days, in case you wish to recover your account, after which it is permanently deleted from our systems, except where we are required to retain certain information for legal, accounting, or fraud-prevention purposes.

Vehicle records that have been claimed or transferred to another user's account are retained as part of that vehicle's ongoing history, in line with the vehicle-centric design of the Service described in our Terms and Conditions.

7. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure, including encryption of data in transit and restricted access to production systems. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Marketing Communications

We will only send you marketing or promotional communications if you have opted in to receive them. You can opt out at any time by adjusting your notification preferences in the app or by contacting us at support@afterpit.com.au.

Transactional communications — such as account verification, password reset, and service reminders you have configured — are not marketing communications and will continue regardless of your marketing preferences, as they are necessary for the Service to function.

9. Cookies and Tracking

AfterPit does not currently use advertising cookies or third-party ad tracking. We use Firebase Analytics to understand how the app is used, which may involve the collection of device identifiers and usage data for the purpose of improving the Service.

10. Children's Privacy

AfterPit is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are aged 13 to 17, you may only use the Service with the consent of a parent or legal guardian, as described in our Terms and Conditions.

11. Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data (subject to the retention terms in Section 6)
• Opt out of marketing communications
• Lodge a complaint with us, or with the Office of the Australian Information Commissioner (OAIC), if you believe your privacy rights have been breached

You can access and manage most of your information directly within the app, including deleting your account via account settings. For any other request, contact us at support@afterpit.com.au.

12. Third-Party Sign-In

If you sign in using Google or Apple, those providers may share limited profile information with us (such as your name and email address) in accordance with your privacy settings with that provider. Your use of Google or Apple Sign-In is also subject to their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

You can also lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au if you believe we have not adequately addressed your concern.