Privacy Policy

1. Introduction

SideStall is operated by Koviq Group Pty Ltd (ACN 696 153 821) ("SideStall", "we", "us", or "our"). SideStall is a mobile application and website that connects customers with local roadside stall owners and home-based producers across Australia.

We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect the following types of information:

Account Information

• Name, email address, and phone number
• Profile photo (optional)
• Google or Apple sign-in identifiers (if using social login)

Location Data

• GPS coordinates when using the map feature (foreground access)
• Background location (only if you enable location sharing for your stall)

Stall and Product Information

• Stall name, address, description, and photos
• Product listings including names, descriptions, prices, and images

Communication Data

• Messages exchanged between users through the app

Safety and Moderation Data

• Block records (when you block another user)
• Reports you submit, including the type of content reported, the reason for reporting, and any optional description you provide

Device Information

• Device tokens for push notifications
• Device type and operating system version

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display stalls and products on the map
• Enable messaging between customers and stall owners
• Send push notifications about messages and updates
• Improve our services and user experience
• Ensure safety and security of our platform
• Moderate content and enforce community safety through blocking and reporting tools
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information with the following parties:

• Other users: Your stall information, product listings, and profile name are visible to other app users.
• Service providers: We use Amazon Web Services (AWS) for cloud infrastructure, including data storage (S3), authentication (Cognito), and computing services (Lambda).
• Push notification services: We use Expo Push Notification service to deliver notifications to your device.
• Legal requirements: We may disclose information if required by law, regulation, or legal process.

5. Data Storage and Security

Your data is stored securely on AWS infrastructure located in the Asia Pacific (Sydney) region. We use industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication via AWS Cognito
• Access controls and regular security reviews
• Database backups and disaster recovery procedures

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymise your personal information within 30 days, unless we are required to retain it for legal or legitimate business purposes.

7. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

8. Cookies and Analytics

Our website may use Google Analytics to understand how visitors interact with our site. This collects anonymised usage data. Our mobile app does not use cookies. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: