Privacy Policy

Capture ("we", "our", or "us") is operated by Capture Family Hub Pty Ltd, an Australian company.

We are committed to protecting your privacy in accordance with privacy and data protection laws including the Privacy Act 1988 (Cth), General Data Protection Regulation (GDPR) and other international privacy laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (the "Service").

By using the Service, you acknowledge that your information may be processed in accordance with this Privacy Policy.

Information You Provide:

• Account Information: Name, email address, and password when you create an account.
• Phone Number: Your mobile phone number, collected when you choose to use SMS-based sign-in via Twilio.
• Family Information: Names and details of family members you add to your family group.
• Task Data: Tasks, events, activities, descriptions, due dates, and assignments.
• Images: Photos you upload for task extraction (e.g., school newsletters, permission slips).
• Communications: Emails forwarded to your Capture email address for task extraction, including the email subject, sender name, sender email address, and body content.
• Voice Input: Audio recordings you provide for task and event extraction, which are processed and then discarded.
• Child Account Information: Information relating to child users created and managed by a parent or guardian account, including child names, login credentials, assigned tasks, activity information and calendar information.
• Device Permissions: Information collected when you grant permissions to access your device camera, microphone, contacts, notifications, calendar or photo library.
• Support Communications: Information you provide when contacting customer support or communicating with us.
• Subscription Information: Subscription status, purchase records and billing information provided through Apple App Store, Google Play or other payment providers.
• Technical Information: Crash reports, diagnostic information, analytics data and performance information relating to use of the Service.

Information from Third-Party Services:

• Google Calendar: If you choose to connect your Google Calendar, we access your calendar list (names and identifiers) so you can select which calendar to sync events to. We write events to your selected calendar on your behalf. See the "Google Calendar Integration" section below for full details.

Information Collected Automatically:

• Device type, operating system, and unique device identifiers
• Usage data including features used and actions taken
• Log data including IP address and access times

• Provide, maintain, and improve our Service
• Process and extract tasks from images, emails, and voice input using AI technology
• Sync events to your connected calendars (Google Calendar or Apple Calendar) based on your explicit approval
• Enable family sharing and collaboration features
• Send notifications about tasks, reminders, and updates
• Send SMS verification codes for account sign-in
• Respond to inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Verify parent or guardian authority in relation to child accounts
• Authenticate users and maintain account security
• Monitor usage trends and improve functionality
• Comply with legal obligations and enforce our Terms of Use
• Prevent fraud, misuse, unlawful conduct and security incidents
• Maintain backup, disaster recovery and business continuity systems.

If you are located in the Europe and the United Kingdom, we process your personal information under one or more of the following legal basis:

• Performance of a contract: where processing is necessary to provide the Service to you;
• Consent: where you provide consent for specific processing activities, including optional integrations and permissions;
• Legitimate interests: where processing is reasonably necessary for our legitimate business interests, including improving the Service, fraud prevention and security;
• Legal obligations: where processing is required to comply with applicable laws.

Capture uses artificial intelligence and machine learning technologies to assist with extracting tasks, reminders, events and related information from images, emails, voice recordings and text inputs submitted by users:

• We use third-party AI providers including Anthropic (Claude) to process submitted content.
• Information processed by AI systems may include:
  • Uploaded images and screenshots
  • Forwarded email content
  • Voice recordings and transcriptions.
• AI-generated outputs are automated suggestions only and may contain inaccuracies, omissions or errors. Users are solely responsible for reviewing, verifying and approving all extracted tasks, reminders and calendar events before relying on them.
• We require our third-party AI providers to process data in accordance with applicable privacy and security obligations. However, AI processing may involve temporary transmission and processing of information outside Australia.
• Voice recordings are processed solely for transcription and task extraction purposes. We do not use voice recordings for biometric identification, voice profiling or voiceprint analysis.

We do not use your personal information to train our own AI models.

When you choose to connect your Google Calendar to Capture, we request access to the following Google API scopes:

• calendar.readonly: Used to list your Google Calendars so you can choose which calendar to sync events to. We read only the calendar name and identifier for display in the calendar picker, and no event data is read from your Google Calendar.
• calendar.events: Used to create and update calendar events in your selected Google Calendar. Events are only written based on your explicit review and approval within the Capture app.

How Google Calendar data is used:

• Calendar list data (names and IDs) is used solely to let you select your preferred calendar within the app.
• We write events to your chosen calendar only after you have reviewed and approved each event.
• We store your Google OAuth tokens (access token and refresh token) securely on your device using encrypted storage and in our database to maintain your calendar connection.
• We do not read, store, or analyse any existing events from your Google Calendar.
• We do not use your Google Calendar data for advertising, analytics, or any purpose unrelated to the calendar sync feature.
• We do not share your Google Calendar data with any third parties.
• We do not access, read, analyse or monitor the content of events already stored in your connected Google Calendar except where strictly necessary to facilitate the calendar sync functionality requested by you.
• Calendar integrations are provided through third-party services. We are not responsible for outages, delays, inaccuracies or failures caused by Google, Apple or other calendar providers.

Disconnecting Google Calendar:

You can disconnect your Google Calendar at any time from the Capture app settings. Disconnecting will revoke the stored tokens and stop all calendar syncing. You can also revoke Capture's access from your Google Account permissions page.

Google API Services User Data Policy:

Capture's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell your personal information. We may share information with:

• Family Members: Task and activity information within your family group
• Service Providers: Supabase (data storage), Anthropic (AI processing), Resend (email delivery and inbound email processing), Twilio (SMS verification), RevenueCat (subscription management), Google (calendar sync, only when you connect Google Calendar)
• Legal Requirements: When required by law or valid legal requests
• Professional advisers: lawyers, accountants, auditors and insurers
• Corporate transactions: in connection with a merger, acquisition, restructuring or sale of assets
• Regulatory authorities and law enforcement agencies: where required or authorised by law

We do not transfer, sell, or use your data for serving advertisements, including retargeting, personalised or interest-based advertising. We do not transfer, sell, or use your data to determine credit-worthiness or for lending purposes.

We require third-party service providers to process personal information only for authorised purposes and in accordance with applicable confidentiality and security obligations.

Your data is stored securely using Supabase with servers in Sydney, Australia. We implement encryption, row-level security policies, and regular security audits to protect your information. Outbound and inbound emails are processed via Resend, with infrastructure in the United States.

Google OAuth tokens are stored securely on your device using encrypted device storage (Secure Store) and in our encrypted database to maintain your calendar connection.

All communication with third-party services, including Google APIs, occurs over HTTPS/TLS.

If you are located outside Australia, please be aware that your information may be transferred to and processed in Australia and by our service providers (including Anthropic, Resend, and Twilio) in the United States. By using Capture, you consent to this transfer.

Your personal information may be transferred to, processed or stored in countries outside your country of residence, including Australia and the United States.

Where required by applicable law, we implement reasonable safeguards designed to protect personal information transferred internationally, including contractual protections with service providers.

By using the Service, you acknowledge that international data transfers may occur.

We retain your information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements and maintain security and backup systems.

Different categories of information may be retained for different periods depending on operational, legal and security requirements.

Deleted information may persist temporarily in backup or archival systems before permanent deletion.

Where possible, voice recordings are deleted after processing and extraction.

You can request deletion of your account and all associated data at any time through the app settings. Upon verified account deletion requests, we will take reasonable steps to permanently remove or de-identify personal information within a reasonable period, including email content, images, tasks, family information, and calendar connection tokens, subject to legal retention obligations.

You may have the right to access, correct, delete, or export your personal information. To exercise these rights, contact us at support@capturefamilyhub.com.

You can disconnect third-party services (such as Google Calendar and Apple Calendar) at any time from the app settings, which will revoke access and delete stored credentials.

If you are located in the European Economic Area, you may also have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

Depending on your location, you may have rights to:

• Access your personal information;
• Request correction of inaccurate information;
• Request deletion of personal information;
• Object to certain processing activities;
• Restrict processing;
• Request portability of personal information;
• Withdraw consent; and
• Lodge complaints with a supervisory authority.

Capture is intended for use by families. Child accounts may only be created by a parent or legal guardian with authority to provide the child's information for children aged 13 and over.

Parents and guardians are responsible for supervising their children's use of the Service and ensuring that any information submitted in connection with child accounts complies with applicable laws.

We do not knowingly permit children under the age of 13 to independently register for the Service. If local laws in your jurisdiction require a higher minimum age for digital consent, the applicable higher age requirement will apply.

Parents or guardians may create and manage child accounts and control:

• Login access;
• Permissions;
• Assigned tasks;
• Visibility settings; and
• Deletion of child information.

The parent or guardian provides the child's first name, last name, and email address or mobile phone number to enable the child to log in.

When a child logs in, they can view and manage their assigned tasks, mark tasks complete, view family calendar events, and create new tasks. Children have limited functionality and do not have access to billing settings, other family members' personal information or administrative account controls.

If you believe a child under 13 has been given access to Capture, please contact us at support@capturefamilyhub.com

Parents and guardians may request access to or deletion of any information relating to their children at any time by deleting the child account through the app settings or by contacting us at support@capturefamilyhub.com.

If we become aware that we have collected personal information from a child in a manner inconsistent with applicable law, we will take reasonable steps to delete the information.

We implement reasonable technical, administrative and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration and destruction.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and devices.

The Service may integrate with or rely upon third-party services, platforms and infrastructure providers including Google, Apple and Anthropic.

We are not responsible for the privacy, security or practices of third-party services.

Your use of third-party integrations may also be governed by the terms and privacy policies of those third parties.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the app or on our website, and by updating the "Last updated" date at the top of this page. Your continued use of Capture after any changes indicates your acceptance of the updated Privacy Policy.

For questions about this Privacy Policy, contact us at:

Email: support@capturefamilyhub.com

Company: Capture Family Hub Pty Ltd