Privacy
Privacy Policy
KangaRoute helps people preparing for or living in Australia on a Working Holiday visa organise visa information, regional work days and practical guides.
KangaRoute does not replace legal, tax or migration advice. Information in the app is practical support and should be checked against official sources or qualified professionals where appropriate.
Privacy contact
For privacy, personal data or account requests, email privacy@kangaroute.app.
Data processed by the current version
When you use KangaRoute, the app may process:
- email address or account identifier for access and sync;
- the optional nickname you choose;
- visa dates entered by you;
- regional work periods added to the tracker;
- your selected second- or third-visa goal;
- the selected Working Holiday visa subclass, 417 or 462, when specified;
- essential synced preferences such as appearance.
Data stored only on your device
The Account section can store practical references only on your device, including an Australian phone number, super fund, super member number, super USI, emergency contact and temporary address. Your language choice is also stored locally. These details are not synced to Supabase or collected by KangaRoute unless a future version clearly changes this policy.
Data not collected by the current version
KangaRoute does not ask for or sync TFN, Medicare, ABN, passport details, visa grant numbers, bank details, payment data, GPS location or advertising tracking data.
Why we use data
Data is used to create and manage accounts, sync visa dates and regional work information, display useful progress summaries, handle support and deletion requests, and keep the service secure and reliable.
Where data is stored
Synced account data is stored using Supabase for authentication, database and backend functions. Data identified as local remains on the device and is not sent to the database.
Account and sync
Cloud sync is used only for essential app functions, such as restoring visa dates, preferences and regional work periods after signing in or changing devices. Some content can be explored without an account, but durable journey data requires an account.
Service emails
KangaRoute may send emails required for account operation, including signup confirmation, password recovery and support messages. These emails are not used for unsolicited marketing.
Service providers
We do not sell personal data. Necessary technical providers may process data: Supabase for authentication and storage, Resend for service emails, and Cloudflare Turnstile for anti-bot protection.
Anti-bot protection
During signup, sign-in, password recovery or other sensitive actions, KangaRoute may load Cloudflare Turnstile in a protected web view. It returns a temporary token used only to complete the authentication request, not for advertising or commercial profiling. See the Cloudflare Privacy Policy.
Retention and deletion
Account data is kept while the account is active or while required to provide the service. You can start permanent account deletion inside the app. For data access, export or deletion questions, contact privacy@kangaroute.app or support@kangaroute.app.
Security
We use HTTPS and database access controls designed to restrict data access to its owner. No digital system can guarantee absolute security, but the service is kept proportionate to the data it handles.
Children and policy changes
KangaRoute is not intended for children. This policy may be updated when features, processed data or providers change; the date above identifies the latest version.