Privacy Policy

Who we are

Deal Fairy is the business name of Sati8 Pty Ltd (ABN 31 635 245 224, ACN 635 245 224), a company based in New South Wales, Australia. This policy covers the Deal Fairy mobile app and the websites at dealfairy.com.au and sati8.com.au. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What personal information means

Personal information is anything that identifies you, or could reasonably identify you. That includes your name, and also things like a device id or a location hash tied to your home.

What Deal Fairy does

Deal Fairy is an app for Australian households. You can capture or import electricity and gas bills, compare plans, and — if you choose — switch to a partner retailer. We use your information to run the app, compare plans, complete a switch you asked for, and keep the service secure. We do not use it to send you marketing emails.

Information kept on your device

The on-device vault keeps:

• Your name, date of birth, email, and phone number
• Your service address, and if you are moving, a new address
• Your electricity meter identifier (NMI) and gas meter identifier (MIRN or DPI)
• Account numbers from your bills
• Bill images, PDFs, and text read from those bills

Bills can include sensitive details such as a concession or hardship note. That stays in the vault. We do not use it for marketing.

The vault is unlocked with a device passcode and, where you enable it, Face ID or another biometric. The app locks the vault when it goes to the background. We cannot read this vault from our side. If you lose your phone and do not have a backup, we cannot restore your bills.

Permissions the app may ask for

Depending on what you do, the app may ask for camera or photo access to add a bill, Face ID or a similar lock to open the vault, and — if you choose — access to Gmail to import a bill PDF.

Information we receive

On our servers we keep:

• a first name
• an age derived from your date of birth (not the date itself)
• a coarse location hash from your address
• the service address you confirm, and if you are moving, the new service address
• your electricity meter identifier (NMI) and gas meter identifier (MIRN or DPI), when we read them from a bill
• usage and plan metadata, without energy account numbers or bill files
• an app-generated install credential (a random ID stored on the phone, not a hardware serial) so the app can sign in without a password and limit abuse if the same install keeps deleting and recreating accounts

These websites do not ask you to create an account or upload a bill. If you only visit dealfairy.com.au or sati8.com.au, we may receive standard server logs such as IP address, browser type, and the pages you open. We do not use advertising cookies. We keep website logs only as long as needed to run and secure the site, then delete them.

When a file may leave your phone

Most bill reading happens on your device. A file can leave the phone only if you use an optional feature:

• Gmail import — if you connect Gmail, we fetch the bill PDF you choose so the app can read it
• Cloud layout reading — if on-device reading is not enough, a bill image or PDF may be sent to a document-reading service to extract usage, then discarded when that job is done

If you use Consumer Data Right (CDR) energy in the app, that path has its own consent screen. Energy data received that way is used only to compare plans for you.

Information from others

To compare plans we also use published market data, including AER Energy Made Easy plan information, and details from energy retailers. If you type an address, we may use Google Places to confirm it. Those sources have their own privacy policies.

When we share information

We do not sell your personal information. If you start a switch in the app, we share the details needed to complete that signup with the retailer you chose — and only after you give consent in the app. That typically includes your name, service address, electricity or gas meter identifier, and contact details. After that, the retailer’s privacy policy applies to what they hold. Deal Fairy is not your retailer.

We use these companies to run the service:

• Google (Firebase hosting and app backend; Places for addresses)
• Apple and Google, if you download the app from their stores
• the energy retailer you choose to switch to

We may also disclose information if the law requires it.

Overseas processing

Google and Apple systems may store or process some of this operational data outside Australia. We take steps to keep that data protected. Bills, date of birth, and full contact details stay in the vault on your phone.

How we protect information

Vault data is encrypted on your device. The vault locks when the app is in the background. Data that does travel to our servers goes over an encrypted connection (TLS).

How long we keep information

Vault data stays on your device until you delete it or delete your Deal Fairy account in the app. Deleting your account wipes the local vault and retires that user identity. A random install credential stays on the phone so we can limit repeated delete-and-restart abuse; it is not a hardware identifier, is not shared with advertisers, and is not used to track you across other companies’ apps. Server records — including first name, meter identifiers, confirmed service address, and usage metadata — are removed when the account is deleted, unless we must keep a limited record to meet the law. Website logs are kept only for a short period for security, then deleted.

What the App Store privacy labels show

Apple asks us to list data that leaves your phone and is kept long enough for us or a partner to use. That includes your confirmed service address and your electricity and gas meter identifiers, which we store on our servers. Date of birth, energy account numbers, and bill files stay off the label because they stay on your phone — unless you use an optional feature that sends a file away for that job only.

The App Store page for Deal Fairy should say we do not track you, and that this data is linked to you and used only for App Functionality and, for the install credential, Fraud Prevention:

• Name — first name on our servers; full name if you switch
• Email Address — only if you switch to a retailer
• Phone Number — only if you switch to a retailer
• Physical Address — the service address you confirm, and a new address if you are moving, stored on our servers; also used to complete a switch
• Coarse Location — a location hash and postcode (this label is not the street)
• User ID — the account identity the app creates on your device
• Device ID — a random install credential created by the app, stored on the phone, used to sign you in and to prevent abuse. It is not taken from the phone’s hardware identifier
• Other Financial Info — energy usage and plan metadata used to compare
• Other User Content — your electricity meter identifier (NMI) and gas meter identifier (MIRN or DPI), stored on our servers when we read them from a bill, and shared with a retailer if you switch
• Other Data — your age (not your date of birth)

Not on the App Store label, because they stay on your phone: date of birth, energy account numbers, and bill photos or PDFs — unless you use an optional feature that sends a file away for that job only.

Your rights

You can ask us to:

• tell you what personal information we hold
• correct it if it is wrong
• delete it, unless the law says we must keep it

Start with the in-app vault and account controls, or email privacy@dealfairy.com.au. We aim to reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

Deal Fairy is for people 18 and over who manage a household energy account. We do not knowingly collect personal information from children.

Changes

We may update this policy as the app changes. The date at the top of this page will change when we do.

Contact

Sati8 Pty Ltd trading as Deal Fairy
New South Wales, Australia
Privacy: privacy@dealfairy.com.au