Suzi Privacy Policy
Effective date: 5 October 2026 Last updated: 5 October 2026 Version: 3.1
The short version
First things first, we deliberately built Suzi so you are in control of how much or how little you share with her.
We built her to hold the mental load of family life. That means you'll tell us things about your children, their classes, their sport, the note that's due Friday.
We take that seriously, and we'd rather tell you exactly how it works than make comfortable claims we can't stand behind.
We don't sell your information. Not to anyone, not in aggregate, not "anonymised."
We don't advertise in Suzi, and we don't build advertising profiles of you or your children. We don't use your information to train AI models. Ours or anyone else's.
Your children don't have accounts. We never collect information directly from a child, and we never contact a child.
We don't keep your photos. Images and documents are processed and discarded- they're never saved to our servers.
Voice recordings are never uploaded to Suzi. Only the text is.
Notifications are written on your phone, so your children's names never pass through Apple's or Google's notification servers.
Your data is stored in Australia. AI processing happens in the United States - section 6 explains exactly what's sent.
You can delete everything, permanently, from inside the app.
One thing we want to be straight about upfront: Suzi is not end-to-end encrypted, and we don't claim to be.
Section 10 explains why that's a deliberate choice rather than a shortcut. 1. Who we are
Suzi is operated by Suziverse Pty Ltd (ABN 34 701 303 577) ("Suzi", "we", "us", "our"), a company registered in Victoria, Australia.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Privacy contact: privacy@suziverse.com.au Postal address: 147 Herald Street, Cheltenham VIC 3192, Australia 2. How we think about privacy
Suzi handles information about children. Not directly from them - through you, the subject of most of what Suzi holds is a child: where they'll be, what they need, who they're with. That information is sensitive in aggregate even when each item looks trivial. A single note reading "Ella, Room 4B, swimming Thursday" is unremarkable. A year of them is a detailed map of a child's life.
Four commitments follow from that:
1. Collect the least we can. If a feature works without a piece of information, we don't
collect it. This is why we don't keep your photos. 2. Keep it close. Information stays on your device wherever the feature allows. 3. Treat children's information as if the child were our own customer. We apply the standards in the OAIC's Children's Online Privacy Code - in its draft form until it commences, and as registered thereafter — including its best-interests-of-the-child test, to how we handle information about children, including where we may not strictly be required to. 4. Never monetise the data. Suzi is funded by subscriptions. That's deliberate: it means we never have a commercial reason to want more of your information than the product needs. 3. What we collect
3.1 Account information
Your name or preferred name
Your email address
Your state or territory (used for school term dates)
A profile picture, if you add one - optional, and removable at any time
An authentication credential (a password hash, or a token if you sign in with Apple or Google - we never see your Apple or Google password) 3.2 Information you enter about your family
Children: a name or nickname, year level, the name of their school, kinder or daycare, and a colour you choose Recurring activities: activity name, day, times, and which child Tasks, events and notes: title, date, time, location, notes, which child it relates to, and any items to pack Packing rules and tick-offs.We do not ask for, and there are no fields for: your child's date of birth, home address, Medicare number, student ID, health conditions, medications, or any government identifier. If you type sensitive information (such as a health detail) into a free-text note anyway, we'll hold it under this policy and treat your entering it as consent to our holding it for the purpose of running Suzi for you but we'd rather you didn't. 3.3 School communications you capture
When you photograph a notice, upload a PDF, share a screenshot, paste text or dictate a note, we process it to extract dates, tasks and items.
Section 6 explains exactly what happens to it.
We don't keep what you capture. Files pass through for processing and are discarded. Nothing is written to our storage or database.
What we do keep is a small record for your Processing History screen, so you can see what Suzi has done: the type of input (photo, PDF, text or voice) the date and time how many items were extracted for typed and voice input only, the first 200 characters of the text.
For photos and PDFs we store only a label such as "Photo." No part of the image or document content is retained. These records are deleted after 90 days, or when you delete your account. One trade-off worth knowing: because we don't keep the original, you can't go back and re- read a newsletter you photographed. You'll see the items Suzi extracted, not the source. If a document matters, keep your own copy. 3.4 Voice input
Audio is captured only while you're actively recording. Suzi does not listen in the background, has no wake word, and does not access your microphone at any other time.
Speech is converted to text by your phone's built-in speech recognition service (Apple on iOS, Google on Android). Depending on your device and settings, that service may process the audio on Apple's or Google's servers under their privacy policies — that's a function of your operating system, not of Suzi.
The audio is never uploaded to Suzi. We receive only the resulting text, which we then treat like text you typed.
3.5 Photos, screenshots and PDFs
Suzi accesses your camera or photo library only when you actively initiate a capture or select a file. We don't scan your camera roll.
Images are re-encoded on your device before upload, which removes embedded metadata such as location coordinates. [CONFIRM: verify GPS/EXIF removal by inspecting an uploaded file before publishing this sentence.]
The file is sent in full to our AI provider for processing (section 6). We don't crop, redact or filter the content. If you photograph a notice that happens to include a photograph of a child, that image is sent as it is. The file is then discarded. It is not stored by us at any point.
We don't perform facial recognition on any image, at any point, for any purpose. Because the whole image is transmitted, please capture only what you need. 3.6 Device and app information
Device type, operating system version, app version Crash reports and error logs
A push notification token - an anonymous device identifier that lets our server wake your app. It contains no names, no child information, and nothing that identifies you personally.
We do not use third-party advertising SDKs, behavioural analytics, cross-app tracking, or any data broker or audience network. Suzi doesn't request App Tracking Transparency permission because there's nothing to track. 3.7 Subscription information
Subscriptions are processed by Apple or Google. We never see or store your payment card details. We receive a subscription status and a transaction identifier so we know what to unlock. 3.8 What stays on your device only
Notification preferences and quiet hours
The text of every notification you receive (section 6.4)
4. Information about children
Children are not our users. You must be 18 or over to hold an account. Children can't create accounts, and Suzi isn't designed, marketed or intended for use by a child. We never send messages to children.
We don't collect information directly from children. Everything about a child in Suzi was entered, spoken or captured by you.
We minimise what we hold. Suzi asks for a name or nickname, year level and school. There's no field for a surname, date of birth, address, health information or student ID.
We don't profile children. We don't build behavioural profiles, infer characteristics, or use information about children for anything other than showing you what you asked Suzi to remember.
We don't disclose children's information to schools. Information flows to you, not back to a school.
Best interests. Before building any feature involving children's information, we assess whether it's in the best interests of the children concerned - not merely whether it's convenient for the parent or good for our business. Where those conflict, the child's interests take priority. Deletion. You can delete a child profile and everything attached to it at any time. Deletion removes the records rather than archiving or de-identifying them. 5. Information about other people
Family life isn't lived alone, so information about other people ends up in Suzi: the teacher who wrote the newsletter, the parent organising the carpool, the classmate whose party is on Saturday, other children pictured on a noticeboard.
Be aware that when you photograph or upload a document, the entire file is sent to our AI provider — including any parts relating to other people. We don't filter it, and we're not going to claim we do. What we do:
The file is discarded immediately after processing. We keep no copy.
We store only what's needed to build your reminder — a date, a time, a place, a short description.
We don't perform facial recognition or identify anyone in an image.
We don't build records, profiles or contact entries for people who aren't your family.
We don't cross-reference information between accounts. Two parents in the same class group have no visibility of each other.
What we ask of you: capture only what you need, and please don't use Suzi to collect information about other people's children beyond what's genuinely necessary for organising your own family.
If you're not a Suzi user and think your information is in Suzi, contact us at privacy@suziverse.com.au. We can't search private accounts on request, but we can explain what we hold, act on complaints, and remove anything we shouldn't be holding. 6. How we use artificial intelligence
Suzi uses AI to turn what you capture into events, reminders and prep items. Our AI provider is Anthropic, located in the United States. Two features send information there. 6.1 Processing school communications
When you add something by photo, PDF, screenshot, paste or voice, we send:
the file or text itself, in full — the complete image or document, or the pasted text or voice transcript; and your children's names, year levels, schools and activities, so the AI can work out which child an item relates to.
We don't send your email address, your account identifier, your device identifiers, your payment information, your location, or your other stored items. 6.2 The daily greeting
Suzi's home screen greeting is generated each day. This sends your first name, your children's names, year levels and activities, and the titles of that day's items. No images are sent. 6.3 What happens at our AI provider
Each request is stateless. Everything needed is sent fresh each time and nothing is remembered between requests. There is no accumulated profile of your family sitting with our AI provider, and no model that learns from your use of Suzi.
We have arranged zero data retention. Under our configuration with Anthropic, the content of requests is not retained after processing. [CONFIRM: only publish this sentence once zero-data-retention is contractually in place.]
We do not use your information to train AI models — not ours, not anyone else's. Not your notes, not your voice, not your photos, not your children's details. This is a commitment, not
a setting you have to find and switch off. 6.4 Notifications are written on your phone
When Suzi reminds you about something, our server sends a silent, empty signal no names, no content. Your phone then writes the visible message from information already stored on it. - no text,
This means your children's names and activities never pass through Apple's or Google's push notification servers. It's more work to build this way, and we think it's worth it. 6.5 Suzi doesn't make decisions about you
Suzi's AI produces suggestions. It reads a newsletter and proposes "Book Week costume - Wednesday 12 March." Everything can be edited, corrected or deleted by you.
Suzi doesn't assess, score, rank or evaluate you or your children. It doesn't determine eligibility for anything, and produces no output affecting your legal rights, finances, employment or access to services. We say this because Australian privacy law now requires organisations to disclose automated decision-making that could significantly affect a person's rights or interests. We don't believe Suzi meets that threshold — we're describing our automated processing in full anyway. AI gets things wrong. It misreads dates, misattributes items to the wrong child, and occasionally invents details. Suzi is a memory aid, not a replacement for checking the original. See our Terms of Use. 7. Partner access
You can invite one partner per family to view your family's information. How it works:
You send an invitation to an email address. The partner joins only after accepting it.
Partner access is read-only, enforced at the database level. A partner cannot add, edit or delete anything — not through the app, and not by any other means.
You can revoke access instantly, on your own, from inside the app. You don't need the partner's agreement, you don't need to contact us, and the partner is not notified.
What a partner can see: your name, email and state; your children's profiles; recurring activities; packing rules; and structured tasks and events.
What a partner cannot see: your notes and brain dumps, your voice transcripts, your Processing History, your packing tick-offs, or your profile photo. These are restricted at the database level, not just hidden in the app.
If you ever feel unsafe about someone having access to your family's information, revoke it immediately in the app. If you need help, contact us at privacy@suziverse.com.au. 8. How we use your information
Purpose Run the app Interpret what you capture Send reminders Partner access Support Keep Suzi working Billing Legal obligations What it involves Storing, syncing and displaying your events, tasks and notes Turning photos, documents, text and voice into structured items Waking your app so it can display a notification you've set Showing structured events and tasks to a partner you've invited Answering your questions when you contact us Diagnosing crashes, fixing bugs, monitoring performance Managing your subscription status Where required by Australian law. We won't use your information for a materially different purpose without telling you and, where required, asking you first. 9. Who we share information with
Provider
Supabase
What they do
Information involved Location Database, Account details, family data, profile authentication, storage picture Australia (Sydney) Anthropic AI processing Uploaded files in full (transiently); children's names, year levels, schools, activities; daily item titles United States Apple / Google App distribution, push delivery, subscriptions Push token, subscription status United States Apple / Google (speech) Speech-to-text via your device's built-in service Voice audio, under their own policies Varies by device and settings RevenueCat Subscription management Subscription status, anonymous user ID United States Google (Firebase Crashlytics) Crash reporting Device type, OS version, error logs United States [EMAIL PROVIDER] Transactional email Email address [COUNTRY] [DEVELOPMENT PARTNER] Building and maintaining Suzi [SCOPE OF PRODUCTION [COUNTRY] ACCESS remove this row if none] Each provider is bound by contract to protect the information, use it only for the purposes we specify, and not use it for their own. Overseas disclosure. Where a provider is outside Australia, we take reasonable steps to ensure it handles your information consistently with the Australian Privacy Principles, and we remain accountable to you under APP 8 for how it does so. We don't ask you to waive that accountability.
We also disclose information where the law requires it a valid court order, or a lawful request from a regulator or law enforcement agency. We'll tell you unless we're prohibited from doing so.
If we're acquired, personal information may transfer as part of that transaction. Any acquirer would be bound by this policy for information collected under it, and we'd notify you before anything changed. We do not sell personal information, disclose it for advertising, or share it with data brokers. 10. Security
What protects your information:
In transit: all traffic encrypted with TLS
On our servers: database encrypted at rest, hosted in Sydney On your phone: the offline database is AES-256 encrypted, with the key held in your device's secure keychain Between families: row-level security on every table. One family cannot read another's data - this is enforced by the database itself, so even a bug in our app code can't bypass it
Partner access: read-only and scope-limited at the database level, revocable by you instantly and silently
Sessions: one active device per account, using short-lived tokens
Our access: staff access production data only when necessary to resolve a specific issue, and such access is logged Why we don't use end-to-end encryption. True end-to-end encryption would mean we couldn't read your data at all. Two things make that impossible for Suzi as it works today. First, the AI needs to read your children's names and schools in order to match items to the right child — that's the entire feature. Second, end-to-end encryption requires keys held only on your phone, which means changing or losing your phone would destroy your data permanently, with no recovery. We'd rather tell you this than describe ourselves as end-to-end encrypted when we aren't. No system is perfectly secure, and we won't claim otherwise. What we can tell you is that Suzi is designed to hold as little as possible - no photos, no documents, no voice recordings - so that a breach exposes as little as possible. 11. Data breaches
We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).
If a breach occurs that's likely to result in serious harm to you, we'll notify you and the Office of the Australian Information Commissioner as soon as practicable, and tell you what happened, what was involved, and what you should do. 12. How long we keep information
Information Voice audio Photos, PDFs and screenshots Processing History records Your events, tasks and notes Account details Push token Crash and error logs Billing records Backups Retention Never uploaded to Suzi Never stored - discarded after processing 90 days Until you delete them Until you delete your account Until you disable notifications or delete your account 90 days 7 years (required by Australian tax law) 7 days, encrypted, Sydney region yours, your children's, and When you delete your account, we remove all family data anything visible to your partner — immediately from our live systems. It clears from backups within 7 days. The only exception is billing records we're legally required to keep. Deletion means deletion. We don't retain a de-identified copy for analysis. 13. Your rights
Access. You can see everything Suzi holds in the app. You can also request a full export at privacy@suziverse.com.au and we'll provide it in a machine-readable format within 30 days, free of charge. Correction. Edit or correct anything directly in the app. Deletion. Delete individual items, a child profile, or your entire account from the app's settings. No email, no form, no waiting period. If you no longer have the app installed, you can request account deletion at suziverse.com.au/delete-account or by emailing privacy@suziverse.com.au. Anonymity. You can use nicknames for yourself and your children. Suzi doesn't verify identities and doesn't need real names to work. If we ever refuse a request for access or correction, we'll tell you why in writing and explain how to complain. 14. Marketing and communications
Service messages (password resets, billing notices, policy changes) — necessary, and you can't opt out while you hold an account Reminders - you control these in the app and in your device settings Product updates by email — only if you opt in, with an unsubscribe link on every one We don't send marketing based on what you store. We don't share your email address with any marketing platform beyond our transactional email provider. We don't run advertising, retargeting or lookalike audiences. 15. Complaints
If you think we've mishandled your personal information, tell us first - we'd rather fix it. Email: privacy@suziverse.com.au · Post: 147 Herald Street, Cheltenham VIC 3192, Australia
We'll acknowledge within 5 business days and respond substantively within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner: Web: oaic.gov.au Phone: 1300 363 992 · Post: GPO Box 5288, Sydney NSW 2001 16. Changes to this policy
For material changes — particularly any that expand how we use your information — we'll notify you in the app and by email at least 14 days before they take effect, and explain what's changing in plain language. Previous versions are archived at suziverse.com.au/privacy/archive. 17. Contact
Suziverse Pty Ltd ABN 34 701 303 577 · 147 Herald Street, Cheltenham VIC 3192, Australia · privacy@suziverse.com.au Suzi is currently available in Australia only. If you're accessing Suzi from outside Australia, additional rights may apply under your local law — contact us and we'll assist.