Done Life Pty Ltd – Privacy Policy (Australia)

Last updated: 3 March 2026

Entity: Done Life Pty Ltd (ABN 22 679 807 820), trading as Done

1. Purpose

This Privacy Policy explains how Done Life Pty Ltd (ABN 22 679 807 820), trading as Done (“Done”, “we”, “us”, or “our”), collects, uses, stores, and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Done provides the Done Life Management app and related services (the “Platform”).

2. Scope

This Policy applies to all personal information processed through our Done Life Management app, our website, and related services (collectively, the “Platform”). By creating an account or using the Platform, you acknowledge that your personal information will be handled as described in this Policy.

3. Information We Collect

We collect personal information directly from you and, where relevant, from third-party services you use with the Platform. The information we collect may include:

Account details: Name (display name), email address, and password. If you sign in with Apple, we receive an identifier from Apple and, only on first sign-in and if Apple provides it, your name and email for account setup.
User content: Information you create or send through the Platform, including tasks, notes, action items, and any titles, details, or checklists you add. If you use our inbound-email feature, we also process emails you forward to Done (e.g. to a Done email address) and attachments (such as PDFs or images) to create tasks or notes in your account.
Registered email addresses: If you use email ingestion, we store the list of email addresses you register in the app so we can associate incoming emails with your account.
Subscription and purchase information: We do not collect or store your payment card number. In-app subscriptions are processed by Apple (App Store) when you use the app on iOS, and by Google (Google Play) when you use the app on Android. We use RevenueCat to manage subscription status and entitlements on both platforms. We receive information such as whether you have an active subscription so we can provide access to paid features.
We collect only personal information that is reasonably necessary to provide the Platform and its features, or as otherwise required or permitted by law.
Technical and usage data: Device type, IP address, device identifiers (for example, for push notifications and to operate the service), and logs necessary to run, secure, and troubleshoot the Platform.

We do not require you to provide personal information about other household or family members. However, if you choose to include such information in User Content, we will process it in accordance with this Policy. If we introduce features that specifically collect household or family member information, we will update this Policy accordingly.

4. How We Use Your Information

We use the information we collect only to operate, maintain, and improve the Done Platform and to deliver the features you use. This includes:

Account management: Creating and securing your account, sign-in (including Sign in with Apple), and email verification or password reset.
Syncing and storing your content: Saving your tasks, notes, and related data so they are available across your devices.
Inbound email and AI processing: When you use email ingestion, processing the emails and attachments you send to Done (including with AI) to create structured tasks or notes in your account.
Push notifications: Sending you notifications you have agreed to receive (for example, reminders or updates).
Subscription and access control: Checking your subscription status so we can grant or restrict access to paid features.
Support and operations: Providing technical support, preventing fraud, enforcing our terms, and complying with law.

We do not use your information for third-party advertising, and we do not sell or rent your personal information.

5. User Content

When you create, upload, or send information through Done Life Management (“User Content”), we collect and store that information to provide the features you use. User Content includes tasks, notes, action items, details and checklists you add, and (if you use email ingestion) the content of emails and attachments you forward to Done Life Management.

We process User Content only to operate and improve the Done Platform (including AI-powered extraction, search, and workflow features).
We do not use User Content for marketing, advertising, or resale. We do not share User Content with third parties except as needed to provide the Done service (for example, with our AI or infrastructure providers under strict agreements) or where required by law.
User Content remains under your control. You can access, edit, or delete it within your account, subject to technical and legal limits.
If you delete your account, we will permanently delete your User Content and other personal data from our active systems within a reasonable period (typically in line with our account-deletion process), except where we must retain data by law or for legitimate business purposes (for example, anonymised statistics or backup retention for a limited time).

6. AI-Powered Data Processing

Done uses artificial intelligence (AI) as part of its service, including to interpret emails and attachments you send for ingestion.

When you use inbound email, our system may send the subject, body, and attachments (such as images) of those emails to an AI provider to extract details (for example, dates, actions, or events) and create structured tasks or notes in your account.
This processing is automatic and necessary for the feature to work. We use trusted third-party AI providers (currently including OpenAI) under agreements that prohibit using your information to train or improve their general-purpose models.
Some AI processing may take place on servers outside Australia. We take reasonable steps to ensure overseas recipients comply with privacy standards consistent with the APPs (including APP 8 on cross-border disclosure).
Data sent for AI processing is used only to provide Done Life Management’s features. Our AI providers process data only to provide the requested output and are contractually restricted from using it to train or improve their general-purpose models.
AI-generated outputs can be wrong or incomplete. You are responsible for reviewing and confirming any AI-generated content before relying on it.

7. Data Storage and Retention

We keep your personal information only for as long as necessary to provide the Done Life Management service, comply with legal obligations, resolve disputes, and enforce our agreements. Data used only for a single AI request is not retained by our AI provider after processing. When you delete your account, we delete your data from our active systems as described in section 5 and in line with our account-deletion process, typically within 30 days, subject to backup retention cycles and legal requirements.

8. Security

We use reasonable administrative, technical, and physical measures to protect personal information against loss, misuse, and unauthorised access. These measures include industry-standard encryption in transit and access controls designed to limit internal access to authorised personnel. No online service is completely secure, and we cannot guarantee absolute security.

9. Sharing and Disclosure

We do not sell or rent personal information. We may share information only with trusted service providers who help us operate the Platform, including:

Firebase / Google: Authentication, database, hosting, and push notifications.
RevenueCat: Subscription and entitlement management (we do not receive your payment card details; Apple processes payment on iOS and Google processes payment on Android).
OpenAI: AI processing of inbound email content (under strict data and use restrictions).

These providers may process data outside Australia (including in the United States). They are authorised to use the information only to perform their contracted services for Done. We do not allow them to use your data for their own marketing or advertising.

We may also disclose information where required or permitted by law (for example, to regulators or in response to lawful process).

10. Cross-Border Data Transfers

Personal information may be transferred outside Australia for AI processing and subscription management. We take reasonable steps to ensure that recipients are bound by privacy obligations consistent with the APPs and this Policy. Where required by the Privacy Act, Done remains accountable for personal information disclosed overseas in accordance with APP 8.

11. Access, Correction, and Deletion

Access and correction: You may request access to or correction of your personal information at any time by contacting us at info@donelife.com. We may need to verify your identity. Where the Privacy Act applies, we will respond within a reasonable period (often within 30 days).
Account deletion: You can delete your account at any time from within the app (for example, in account or profile settings). You may also ask us to delete your account by emailing info@donelife.com. When you delete your account, we will delete your personal information and User Content from our active systems as described in this Policy, except where we must retain it by law or for legitimate business purposes.

12. Complaints

If you have a complaint about how we have handled your personal information, please contact us at info@donelife.com. We will respond and try to resolve the issue. If you are not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992

13. Children

The Platform is not directed at children under 16. We do not knowingly collect personal information from children under 16. Parents or guardians are responsible for supervising minors’ use of the Platform. If you believe we have collected information from a child under 16, please contact us and we will take steps to delete it.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the Platform. The current version will be available via the app and on our website, with the last updated date shown at the top. We encourage you to review it periodically. If we make material changes, we will notify you by posting a notice in the app or by other reasonable means.

15. Contact Us

For questions, concerns, or requests about this Privacy Policy or your personal information:

Done Life Pty Ltd
Email: info@donelife.com