Privacy Policy

This policy explains how CGT Property Tracker handles information in the current beta. The app is operated by Matt Heron. For privacy questions, access or correction requests, deletion requests or complaints, contact diggersapps@gmail.com.

Consultation preparation

If you request a consultation, you may optionally state whether you qualify as a sophisticated investor under Australian rules. This answer is self-reported, not verified, and is included with your enquiry to the app administrator and SMATS Group under your contact consent. Your Australian tax scope acknowledgement is also recorded. Neither answer automatically grants an investor classification or signs you up for investment marketing.

Spreadsheet imports and exports

CSV imports are processed in your browser. Confirmed entries become property records and follow the same storage and sharing rules as other expenses. Exported CSV files can contain private financial information and document names. Keep downloaded files secure. They do not contain the original attachments.

Information you choose to record

You may enter names, contact details, property addresses, ownership shares, purchase and sale information, expenses, loan details, valuations, residency and citizenship histories, notes, photographs and supporting documents. Record only information you are authorised to provide and avoid unnecessary identifiers such as tax file numbers, passport numbers or bank account details.

Personal records and device storage

Personal property records and attachments are stored in the app or browser on your device. Local preferences include accepted policy versions, acknowledgement dates, dismissed notices, appearance settings (colour scheme, text size, contrast, control size and reduced motion) and whether the welcome message has been shown. The web edition stores each account’s local workspace separately on that browser. Session tokens are held in session storage unless you choose Keep me signed in, which uses persistent browser storage. Signing out retains local property records and account profile photos. Browser property records are not encrypted by this app. These local records are not automatically sent to the operator as a personal cloud backup. Device access, exported copies, browser data removal and uninstalling can affect the availability or confidentiality of local information.

Connected property records and document storage

A workspace administrator may connect Google Drive or OneDrive. Property documents selected for upload are sent to that connected location through the app service. Property-folder links, file identifiers, file versions, review details, supported property-record snapshots and workspace permissions are stored by the app service. One workspace uses one administrator-selected Google Drive or OneDrive location. Connected credentials are held encrypted on the server and are not included in a downloaded app ZIP or ordinary workspace backup. Users may create folders, rename them or delete empty folders where their permissions allow; later updates preserve those choices. Connecting a folder does not automatically upload existing local documents. Selecting Sync property documents can upload existing and pending documents for that property. Bulk uploads initiated in the app are also sent when online. Uploaded originals are retained locally until a verified cloud copy is available. Document-folder synchronisation is manual; new uploads initiated in the app are sent when online and otherwise remain pending on the device. Missing cloud files do not automatically delete local copies.

AI document reading and spoken-entry features are not available in this web release. The app does not send documents to an AI extraction service through those features. Enter and review document details manually. Management statements are reference documents and do not automatically become capital expenses.

Where hosted property sharing is available and you choose to enable it, the selected property's details, expenses, valuations, attachments and related records are uploaded to the hosted sharing service. Sign-in identifiers, email addresses, member roles, invitations, approval requests and activity records are used to control access and record changes. Accepted members can see the shared property's records. Personal residency and citizenship profiles are kept separate from the shared property data. A licence or ownership link alone does not automatically share all personal properties.

The web app uses Firebase Authentication for account sign-in and a Google Cloud server connection for online features. Each browser keeps its own local workspace. Signing in does not automatically back up or merge local records. When moving from a legacy sign-in to a verified Firebase account, the service can reconnect an existing access permission with the same email. It preserves the recorded role and logs the reconnection. It does not create access permission for a stranger or restore revoked access.

Owner profiles and confirmed duplicate links

Shared-property Members have read-only access. Property Administrators can add, edit and remove records and manage invitations and access roles. At least one administrator must remain. Existing pending approval requests can still be reviewed by a property administrator.

Sharing may import an owner name and property ownership identifiers into another member’s local workspace. Private residency and citizenship histories are not imported with the shared property. If you confirm that two profiles represent the same person or entity, the app links their local property references to the selected profile and removes the duplicate from the owners list. Conflicting non-empty profile details block linking until reviewed. Local alias links and a recovery copy of the removed profile are retained in the workspace and its JSON backups. Linking does not change legal ownership, shared access permission roles or another member’s private profile.

Account names and profile photos

Your full name entered at sign-up is stored with your account and can be corrected in My Account. Your saved name and email identify you to authorised members of shared properties. A selected profile photo is resized locally. Saving your profile stores the thumbnail with the account service to sync across devices. The photo is shown to property members only when you select photo sharing. Existing browser-only photos are not uploaded automatically. Remove a photo and save the profile to remove the hosted thumbnail. Previously exported copies may remain. Passwords and authentication tokens are never part of a shared profile. Appearance preferences remain on the device.

Purposes and disclosures

Information is used to store and display records, prepare reports, provide optional sharing, process feedback and support the app. It may be handled by hosting, storage, authentication and communication providers as necessary to deliver those services. Hosting and service providers may handle technical connection information and operational logs when you access their services. Information may also be disclosed where required or permitted by law. The app does not include advertising or analytics trackers and the operator does not sell your property records.

Camera, files and feedback

The camera and file picker are used when you choose to take a photograph or attach a file. Selected images and documents become part of the record you save. When you press Send feedback, the feedback text, type, reference, submitted time and account email are logged in managed storage. Authorised app administrators can read the feedback inbox and the app attempts an email notification to diggersapps@gmail.com. You can view your own submitted feedback history. Feedback may be used to investigate issues and improve the app. The feedback form does not automatically include property records, documents or screenshots. Older device drafts remain on the device unless you submit their text. Avoid including unnecessary personal or financial information.

Accounts and beta invitations

On an authenticated app visit, your verified account email and first recorded visit date are stored in the member register. Authorised app administrators can see this register and beta invitations. Invitations record the recipient name and email, preparing administrator, dates and email sending status. Hosting access is managed separately. Only primary administrators can grant or remove administrator roles. Role changes are recorded. No billing or historical registration records are connected. These administrative records do not include private property data.

Consultation requests

When you submit a consultation request, the contact details, selected topics, description and contact consent you enter are sent to the app’s managed storage. They are available to the primary administrators at mjheron@gmail.com and diggersapps@gmail.com and any additional app administrators they authorise for arranging a consultation with Matt Heron in his SMATS Group role. Property records and attachments are not included automatically. If you choose Include a property report and explicitly confirm sharing, a PDF report for the properties and report type you select is stored with the enquiry and emailed to the administrator. The report may contain ownership, financial and residency information. Original receipts and documents are not included. Authorised administrators can retrieve the included report and it may be forwarded to SMATS Group for the consultation. When email alerts are configured, the email provider processes the contact details, selected topics, description, consent, any report you explicitly include and request reference to send the full enquiry to diggersapps@gmail.com. The administrator may forward your enquiry to SMATS Group to arrange and respond to your consultation request. An enquiry is not a confirmed appointment. Contact diggersapps@gmail.com to request access, correction or deletion of an enquiry.

Announcements and property-location summaries

Authorised app administrators can send in-app announcements to all registered members, selected members or members matching any selected state, territory or overseas location. Recipient lists are fixed at preview time. The service records the sender, content, audience, recipients and sending time. Opening a notification records its read time for your account. Members cannot see other recipients or other members’ inboxes.

When signed in and online, the app automatically sends a minimal summary of state and country categories from personal property records, an unknown-location flag and a random device-summary reference linked to your account email. It does not send addresses, property identifiers, values, documents, owner names or financial records for notification targeting. Summaries from signed-in devices are combined. Updates on a device replace that device’s previous summary; another device’s summary remains until updated there. These are recorded locations, not independent verification of legal ownership. Access to a shared property alone is treated as unknown rather than proof of ownership.

Relevant announcements remain in the in-app inbox regardless of optional alert preferences. Unknown or incomplete locations receive all location announcements to avoid omissions. Optional location alerts default to on for every location; you can turn them off without hiding relevant inbox announcements. A single preference list covers Australian states and territories plus Overseas. Checked locations also add announcements to the inbox. There is no separate following list or country-entry field. Saving the simplified preferences replaces the previous extra-following selections. Preferences affect future announcement targeting and optional alerts, not copies already received. Phone push alerts are not enabled by this feature. Contact the operator to request deletion or correction of account-linked summaries.

Reports, exports and backups

Reports and backups can contain personal and financial information. You decide when to export or share them and who receives them. Your email provider, accountant, cloud drive or other chosen recipient handles copies under its own arrangements. Protect exported copies and check their contents before sharing. Deleting a record in the app does not delete copies already exported or held by another person.

External services and overseas processing

The hosted app uses OpenAI Sites hosting and Cloudflare infrastructure for managed records and optional shared storage. The Netlify web edition uses Netlify to serve app files and proxy authenticated requests. The web app uses Google Firebase Authentication for sign-in and Google Cloud Functions for their server connection. Google Drive or Microsoft OneDrive processes files you choose to store there. Configured Gmail or another configured email provider processes submitted enquiries and feedback notifications; a saved request does not prove email delivery. Visitors do not need to connect Gmail to submit a consultation. Google and the hosting providers process account identifiers and technical information needed to deliver those services. Google Fonts may receive connection information when fonts load. Property addresses are entered manually without an external address search. Explicitly requested street-view images use Google Maps and may send the entered address and technical connection information to Google. These providers have their own privacy terms and may process information outside Australia, including the United States and other locations listed in their current service documentation. Relevant provider information is available from Netlify, Google, Microsoft, Cloudflare and OpenAI hosting. Australia-only storage is not guaranteed and the app does not verify every provider's processing location.

Retention, security and deletion

Local records remain until you remove them or app/browser data is cleared. Shared records and change histories may remain while required for the shared service, approvals, security or legal purposes. Deleting shared content may preserve earlier content in the audit history so other members can review changes or request restoration. Revoking access does not remove copies another member has already exported. Contact us to request removal of hosted data or feedback; we may need to verify your identity and authority and explain any records that must be retained.

We use access controls and take reasonable steps to protect information but no storage or transmission method is completely secure. You are responsible for device security and the people you authorise to access shared records. Do not send sensitive documents by ordinary email solely to verify your identity.

Access, correction and complaints

You can view, correct and export local records in the app. Shared changes may require another contributor's approval. Contact diggersapps@gmail.com about information held by the operator or a privacy complaint. We will consider your request and respond. If unresolved, you may contact the Office of the Australian Information Commissioner where it has jurisdiction.

Changes to this policy

The current Privacy Policy and Terms of Use are available as separate options under My Account and from the sign-in page. Device sync preferences control once-daily automatic opening and best-effort leaving checks plus permitted connections. All start enabled. Pending transfers remain local if interrupted. This revision describes the web app, document sync with device connection preferences, confirmed owner-profile links and simplified notifications. Material changes to data handling will be described in an updated policy. Policy acknowledgement is separate from permission to use the camera, send feedback or enable property sharing.

Back to sign in