Privacy Policy

Last updated: 22 February 2026

UPD8 Group Pty Ltd ("UPD8", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites, platforms, and services, including but not limited to Listing Lens, APSJobs.app, Not Yet Dude, Oh Crap I Forgot, Polite Reminder, blox.show, and any other products operated under the UPD8 Group.

We are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

1. Information We Collect

We may collect and process the following types of information:

• Personal identification information: name, email address, phone number
• Account credentials: username, encrypted password
• Payment information: processed securely through Stripe — we do not store your card details
• Usage data: pages visited, features used, interaction patterns
• Device information: browser type, operating system, IP address
• Content you provide: uploaded images, text, ideas, or other materials submitted through our platforms
• Google Calendar data: only if you explicitly connect your calendar (Oh Crap, I Forgot! service)

2. How We Collect Information

We collect information in the following ways:

• Directly from you when you register, subscribe, submit forms, or contact us
• Automatically through cookies, analytics tools, and server logs when you use our services
• From third-party services you connect, such as Google Calendar or Roblox (username only)
• From payment processors (Stripe) for transaction records

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platforms and services
• Process transactions and send related information including purchase confirmations
• Send you reminders, notifications, and alerts you have opted into
• Communicate with you about updates, support, and service-related notices
• Improve and personalise your experience across our platforms
• Monitor and analyse usage and trends to improve our services
• Detect, prevent, and address technical issues or security breaches
• Comply with legal obligations

4. Disclosure of Your Information

We may share your information with:

• Service providers: Stripe (payments), Twilio (voice calls and SMS), Google (calendar integration), Netlify (hosting), ElevenLabs (voice generation for reminder services)
• Analytics providers: to help us understand how our services are used
• Legal authorities: if required by law, regulation, or legal process
• Business transfers: in connection with any merger, sale, or acquisition of all or part of our business

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication and access controls
• Regular security reviews of our infrastructure
• Payment processing handled entirely by Stripe, a PCI DSS Level 1 certified provider

While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

Our websites may use cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings. We may use:

• Essential cookies: required for our platforms to function
• Analytics cookies: to understand usage patterns and improve our services

7. Third-Party Services

Our platforms may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

8. Children's Privacy

blox.show is designed for use by children with parental oversight. All child accounts require a linked parent email address. We collect minimal information from children (Roblox username and uploaded screenshots only). Parents can view, manage, and delete their child's data at any time by contacting us.

For all other UPD8 platforms, our services are not directed to individuals under 16 years of age.

9. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Withdraw consent for data processing where consent was the basis
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at hello@upd8.group.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

11. International Data Transfers

Some of our service providers (Stripe, Twilio, Netlify) may process data outside of Australia. Where this occurs, we ensure appropriate safeguards are in place to protect your information in accordance with the Australian Privacy Principles.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

UPD8 Group Pty Ltd
1/457-459 Elizabeth Street, Surry Hills, NSW 2010
Email: hello@upd8.group