Privacy Policy

Effective date: 2026-05-13 (13 May 2026)  ·  Brisbane, Australia

1. Introduction

Smeet (“we”, “us”, “our”) operates the Smeet mobile application and related services (together, the “Services”) for sports social discovery in Brisbane, Queensland, Australia and nearby communities. We are committed to protecting your privacy in line with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (“APPs”), and other applicable Australian privacy laws.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how we protect it, and the choices and rights available to you. By using the Services, you acknowledge that you have read this Privacy Policy. Questions: support@smeet.com.au.

2. Information we collect

2.1 Account and authentication

We collect email and password when you register with email/password, processed through Supabase authentication. Passwords are handled using industry-standard practices on Supabase’s side (for example, hashing; we do not store reversible plaintext passwords). If you use Google Sign-In or Apple Sign-In, we receive identifiers and tokens needed to create or link your account.

2.2 Profile and preferences

We collect display name, profile photo, city or locality, sports you are interested in, skill level or similar ability indicators, optional bio, age-related or eligibility information where collected, and other profile fields you choose to provide.

2.3 Location

We collect approximate or precise location (depending on device permissions and in-app settings) to support matching, nearby games, venues, and Brisbane-area discovery. You can usually disable location in device settings; some features may not function without it.

2.4 Activity and user-generated content

We collect swipes, likes, matches, and similar interactions. We collect user-generated content (UGC) such as posts, comments, messages, media, and battle reports or competitive/social summaries you submit, plus associated metadata (for example timestamps).

2.5 Push notifications

We collect Firebase Cloud Messaging (FCM) device tokens to deliver push notifications you opt into.

2.6 Diagnostics

We use Sentry for error and performance monitoring. We aim to configure Sentry to avoid unnecessary personally identifiable information (PII); incidental technical or contextual data may still appear in crash reports. Avoid entering highly sensitive data in free-text fields if you are concerned about diagnostic logging.

2.7 Technical data

Our infrastructure (including Supabase, Vercel for web delivery, and related providers) may process IP address, user agent, app version, and similar technical data needed to operate and secure the Services.

3. How we use your information

We use personal information to: provide and improve the Services; authenticate users; personalise sports and social discovery; send service messages and (where permitted) push notifications; maintain safety and enforce our Terms of Service; monitor reliability; and comply with law. We do not sell your personal information to advertisers or data brokers for their independent marketing.

4. How we share information

4.1 Other users

Your profile and UGC you make visible (including profile fields, posts, and messages as applicable) may be seen by other users as required for the Services. We do not sell your personal information to data brokers or unrelated third parties for their own commercial purposes.

4.2 Subprocessors

We use service providers who process data on our behalf, including:

We use contractual safeguards including, where applicable, Standard Contractual Clauses or equivalent mechanisms for international transfers.

4.3 Legal

We may disclose information to comply with law or protect rights, safety, and integrity of users and the public.

5. Data storage and security

We use HTTPS/TLS for data in transit. We use Row Level Security (RLS) via Supabase to help restrict data access. Authentication uses industry practices including password hashing via Supabase (for example bcrypt or equivalent, depending on provider configuration). No system is perfectly secure; protect your credentials and devices.

6. Your rights (Australia)

Under the Privacy Act 1988 (Cth), you may have rights to access and correct personal information, request deletion (subject to exceptions), withdraw consent for consent-based processing, and complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992. Contact support@smeet.com.au for privacy requests.

7. Data retention

We retain data needed to operate the Services while your account is active. After account deletion, we aim to delete or de-identify personal information within 30 days, except where law requires longer retention (for example legal, tax, fraud prevention, or rolling backups).

8. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users aged 14–17 may only use the Services where permitted with parental or guardian consent as required by our Terms. Parents may contact support@smeet.com.au.

9. International transfers

Some providers process data in Australia, the United States, and other countries. Where information leaves Australia, we take reasonable steps to ensure appropriate safeguards, including SCCs where applicable.

10. Cookies (web)

Our web properties on Vercel may use cookies, local storage, or similar technologies for security and performance. You can control cookies through your browser.

11. Changes

We may update this Policy and will post a revised version with a new effective date. Material changes may include additional notice as required by law.

12. Contact

Smeet — Brisbane, Queensland, Australia
Email: support@smeet.com.au

This page is for transparency and is not legal advice.