NekoJar Privacy Policy

Last updated: 2 October 2026

NekoJar is a savings and trip-planning application published by Property Stack Pty Ltd (ABN 43 612 526 888). This policy describes what the application collects, why, where it is stored and how to remove it. It applies to the NekoJar application and website at pulse-holidays.vercel.app and to the Android application distributed through Google Play. We comply with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

In short

• There is no advertising, no analytics and no tracking of any kind.
• Nothing is sold, rented or shared for marketing.
• Information is stored in Australia, in the Sydney region.
• You may delete your account, and everything in it, from inside the application.

What is collected

Your account. An email address and a password. The password is stored only as a one-way cryptographic hash and cannot be read by us or by anyone else.

What you enter about a trip. The trip name, destination and dates; amounts of money saved and any note attached to them; what has been booked and what it cost; reminders, wish lists and packing lists.

Travellers, including children. A first name and a date of birth for each traveller, entered by the adult who set up the trip. The date of birth exists for one reason: ticket prices are banded by age, and the band is worked out at the date of travel rather than today, so a budget is correct. These details are visible only to the people invited to that trip. No traveller is required to have an account, and a date of birth may be left out, which only means that age-based prices cannot be calculated.

Documents you upload. Booking confirmations and similar files, which may contain your name, contact details and booking references. They are stored privately and are retrieved through links that expire after one hour. They are never made public.

Notification registration. If you turn on alerts, your device issues an anonymous address that notifications can be sent to, and that address is stored. It identifies a browser or device, not a person. Turning alerts off removes it.

Technical records. Our hosting providers record standard information such as IP address, browser type and the pages requested, for security and reliability.

We do not collect location data, contacts, photos, advertising identifiers or any payment details. The application does not take payments.

How it is used

Solely to provide the application: to sign you in, to show the people invited to a trip the same information, to calculate totals and age-based prices, to send notifications you have asked for, and to send email about your own account, such as confirming your address or resetting your password. Information is not used for marketing, profiling or automated decision-making.

Who can see your information

Only the people you invite to a trip, by sharing its code. Security rules enforced by the database, rather than by the application, prevent one trip's information from being visible to anyone outside it.

Our staff do not browse customer information. Access to the underlying database is limited to what is necessary to operate, support and repair the service.

Service providers

• Supabase — database, sign-in, file storage and account email. Hosted in the Sydney region of Amazon Web Services, in Australia.
• Vercel — delivers the application itself. Served from a global network; pages contain no personal information.
• Google or Mozilla push services — deliver notifications to your device, if you have turned alerts on. Notification contents are encrypted before they leave our server and cannot be read by the delivery service.
• Open-Meteo — supplies the weather forecast for a destination. It receives a latitude and longitude only, and nothing identifying you.

Children

NekoJar is designed for a family to use together, and children's first names and birthdays may be entered by a parent or guardian so that ticket prices are calculated correctly. A child may be given their own sign-in by the adult who set up the trip. We do not advertise to anyone, do not use third-party advertising or analytics software, and do not build profiles. If you believe a child's information has been entered without the consent of a parent or guardian, contact us and we will remove it.

How long it is kept

Your information is kept while your account exists. When you delete your account it is removed as described below. Routine technical logs held by our providers are kept for a short period and then discarded.

Deleting your account and your information

Open NekoJar, go to Settings, and under Your account choose Delete my account. Your sign-in is removed, and so is every trip that only you are on, including its savings history, bookings, plans, traveller details and uploaded documents. A trip that other people are also on is not deleted, because it is not only yours — you are removed from it, and it stays with them.

You do not need to ask anybody, and nobody has to approve it. If you have forgotten your password, use Forgotten your password? on the sign-in screen first. Full instructions, including the rare case where neither works, are at propertystack.com.au/luckycat/delete-account.

Access, correction and complaints

Most information can be viewed and corrected directly in the application. You may also request access to, or correction of, the personal information we hold about you by contacting us at the address below, and we will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If this policy changes, the date at the top of this page changes with it. Material changes will be notified within the application.

Contact

Property Stack Pty Ltd
PO Box 181, Magill SA 5072
hello@propertystack.com.au