Legal
Privacy Policy
Last updated: 2 July 2026
This page is maintained by Tube Media and describes how we handle personal information on our website and in the iOS and Android apps we build and publish on behalf of clients. It is written to meet the Australian Privacy Act 1988 (Cth) and the Apple App Store and Google Play privacy requirements.
Who we are
Tube Media is a web and app studio based in New South Wales, Australia. In this policy, "we", "us" and "our" refer to Tube Media. Our contact address for privacy matters is hello@tubemedia.com.au.
Scope
This policy applies to:
- The Tube Media website at tubemedia.com.au, including our contact form and any marketing pages.
- The iOS and Android apps we build and publish under the Tube Media developer account on behalf of clients, unless a specific app links to its own separate policy.
Where an app is published under a client's own developer account, that client is the data controller and their own privacy policy applies.
Information we collect
We only collect what we need to run the service:
- Contact information you provide directly — name, email address, phone number and any message content you submit via a contact or enquiry form.
- Account and authentication data for apps that require sign-in — email address, hashed password or OAuth identifier, display name, and account preferences.
- User-generated content you create inside an app (for example support tickets, saved items or messages) that is necessary to provide the feature.
- Basic technical data automatically generated when you use our services — IP address, browser or device type, operating system, referring page, and timestamps — used for security, diagnostics and aggregated analytics.
We do not knowingly collect precise location, contacts, photos, microphone or health data unless a specific app feature requires it and you have granted permission through the operating system.
How we use it
- To respond to enquiries and provide quotes.
- To create, secure and operate your account and the app features you use.
- To send transactional messages (receipts, password resets, important service notices).
- To detect abuse, prevent fraud, and keep our services secure.
- To understand aggregate usage so we can improve performance and design.
- To meet our legal and tax obligations.
We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.
Legal basis & consent
Under Australian privacy law we rely on your consent (given when you submit a form or create an account), the performance of a contract with you, and our legitimate interests in running a secure and reliable service. Where you are in the EEA or UK, we rely on the equivalent lawful bases under the GDPR / UK GDPR.
Third parties & subprocessors
We use a small number of trusted providers to run our services. Each processes data only on our instructions and under its own privacy terms:
- Lovable Cloud — hosting, database and authentication for our website and client apps.
- Google Analytics — aggregated website and app usage statistics. IP addresses are truncated and no advertising identifiers are enabled.
- Superapp — supporting infrastructure for selected client apps.
- Stripe — payment processing where a client app takes payments. Card details are sent directly to Stripe and are never stored on our servers.
Where an individual client app uses additional providers, its in-app privacy screen will list them.
Apple App Privacy details (nutrition labels)
For apps published under Tube Media on the Apple App Store, the following categories from Apple's App Privacy framework apply by default. Individual apps may collect less than this; they will not collect more without updating their App Store listing and this policy.
- Data linked to you: Contact Info (name, email, phone), User Content (support messages, saved items), Identifiers (user ID), Usage Data (product interaction), Diagnostics (crash and performance data).
- Data not linked to you: aggregated Diagnostics and Usage Data used to improve the app.
- Data used to track you: none. We do not use data from our apps to track you across other companies' apps and websites.
Children
Our website and apps are not directed at children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
Tracking & App Tracking Transparency
We do not track you across apps or websites owned by other companies, and we do not share device identifiers with data brokers or advertising networks. Because of this, our iOS apps do not present the App Tracking Transparency prompt.
On our website we use only first-party and privacy-friendly analytics cookies. You can block or clear cookies through your browser settings at any time.
Data retention & deletion
We keep personal information only as long as we need it for the purposes above, or as required by law:
- Contact-form enquiries: up to 24 months, then deleted or anonymised.
- Account data: for the life of your account plus up to 90 days after deletion to satisfy backup rotation.
- Financial records (invoices, tax records): 7 years, as required by Australian tax law.
You can ask us to delete your account and associated data at any time — see "Your rights" below.
Security
Data is transmitted over HTTPS, passwords are hashed, and access to production systems is limited to authorised staff using strong authentication. No online service is perfectly secure — we work to industry-standard practices and will notify affected users and the Office of the Australian Information Commissioner (OAIC) if a notifiable data breach occurs.
Your rights
You can ask us to:
- Access a copy of the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Delete your account and personal information.
- Stop sending you marketing messages at any time.
- Complain to the OAIC (oaic.gov.au) if you are unhappy with how we've handled your information.
To make a request, email hello@tubemedia.com.au. We will respond within 30 days.
International transfers
Some of our providers store or process data outside Australia (for example in the United States or the European Union). Where we transfer personal information overseas we take reasonable steps to ensure it is handled in line with Australian Privacy Principle 8 and, where applicable, standard contractual clauses under the GDPR.
Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes we will notify account holders by email or via a prominent notice in the app or on our website before the change takes effect.
Contact us
Questions, requests or complaints about this policy or your personal information:
Tube Media
New South Wales, Australia
hello@tubemedia.com.au
Prefer a form? Get in touch here.
