Paxy privacy policy
Paxy is a mobile app for drivers with a novated lease or salary packaging arrangement. It is made by Catch-e Pty Ltd (ABN 90 102 354 156), "we" in this policy. This policy explains what personal information the Paxy app collects, why, and what we do with it. It sits alongside our general Privacy Policy, and we handle your information under the Privacy Act 1988 and the Australian Privacy Principles.
Who we work for
You use Paxy through your packaging provider, the company that manages your lease or salary packaging. We provide the app and the platform on their behalf. Your provider holds your lease and packaging records, and you can ask them about how they handle those records.
What we collect
| Information | When it is collected | Required or optional |
|---|---|---|
| Email address | When you sign in | Required |
| Your name | From Apple, Google or Microsoft when you sign in with them, and as the account name on bank details you enter | Optional |
| Mobile number, residential address, date of birth | When you update your personal details | Optional |
| Salary | When you set up or update your salary packaging | Required for packaging |
| Bank account details | When you add or change where reimbursements are paid | Optional |
| Claim amounts, GST, notes and receipt photos | When you submit a claim | Optional |
| Odometer readings | When you record a reading or submit a claim that asks for one | Optional |
| Account and device identifiers | When you use the app, and when you allow notifications | Required |
| How the app is used, crash reports and performance data | While you use the app | Required |
| Approximate location, worked out from your internet address | While you use the app, for usage statistics only | Required |
The app uses your camera and photo library only when you choose to photograph or attach a receipt. It does not track your precise location.
Why we collect it
- To run your lease and salary packaging through the app: show your balances and transactions, process claims, keep your details up to date and pay reimbursements.
- To send you notifications you have allowed.
- To fix faults and improve the app, using crash reports and usage statistics that contain no personal information.
We do not use your information for advertising, we do not sell it, and the app does not track you across other apps or websites.
Who we share it with
- Your packaging provider, to deliver the service you signed up for.
- Service providers that help us run the app: Bugsnag for crash reports and Google (Firebase) for usage statistics and notification delivery. What we send them contains no personal information, such as your name, email or financial details.
Where it is stored
Your personal information, including receipt photos, is processed and stored in Australia. Crash reports and usage statistics are processed by Bugsnag and Google, which hold them in Australia and the United States. These contain no personal information.
How we protect it
- All traffic between the app and our systems is encrypted.
- Your sign-in is kept in your phone's secure storage (the iOS Keychain or Android Keystore).
- Catch-e is certified to ISO/IEC 27001:2022, the international standard for managing information security.
How long we keep it
Your Paxy account data is kept for 7 years. Your lease, salary packaging, claim and payment records are also kept for your packaging provider for 7 years for tax record-keeping. Crash reports and usage statistics contain no personal information and are kept for 7 years.
Your choices
- You can see and update most of your details in the app, under Profile.
- You can turn notifications off in your phone's settings.
- You can ask us for a copy of your information, or ask us to correct it, by contacting us.
- You can delete your Paxy account in the app, or by following the steps on Delete your Paxy account.
Collection notice
- Who is collecting: Catch-e Pty Ltd, on behalf of your packaging provider.
- What and why: the information and purposes listed above.
- If you do not provide it: you cannot sign in without an email address, and your provider cannot run your salary packaging without your salary. Other details are optional, but some features need them, for example bank details for reimbursements.
- Who we disclose it to: your packaging provider and the service providers named above.
- Overseas: only crash reports and usage statistics, which contain no personal information, go overseas.
- Access, correction and complaints: see the sections above and below.
Questions and complaints
Contact our Privacy Officer at iso@catch-e.com.au or by post to 6/99 Green Street, Cremorne VIC 3121. We will reply within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.