top of page

Privacy Policy

​

Reputation Continuum Pty Ltd, trading as Sweet Spot Apps  ·  ABN 43 644 749 968

Effective date: September 19, 2026   ·   Version 1
 

1. Who we are

Sweet Spot Apps is a business of Reputation Continuum Pty Ltd (ABN 43 644 749 968) (“we”, “us”, “our”). In this policy, “you” means a visitor to our website, a person who contacts us, and a client or session participant.

  • Privacy contact: info@sweetspotapps.com.au
    We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
     

2. What this policy covers

This policy covers the whole of your engagement with us, not only our website:

  • our website, including the booking form, the enquiry email address and any analytics or cookies

  • your App Navigation Brief™, completed in our app before a session

  • your App Navigation Decision Session™, including anything discussed and any notes we take

  • your App Navigation Decision Session Report™ and any follow-up correspondence

  • booking, invoicing and payment records, and email or phone contact with us

If we go on to work together beyond that first engagement, this policy continues to apply alongside any separate agreement.
 

3. What we collect

  • Identity and contact: Name, business or organisation, role, email address, phone number, and the LinkedIn or website address you choose to share.

  • Booking information: Your starting point (idea, existing product or thinking partner), your preferred session date, who else will attend, and anything you tell us in the form.

  • Brief content: What you tell us in your App Navigation Brief™: your idea, the problem you are solving, who you think will use it, your market observations, your progress to date, your intended pathway, your confidence rating and your comments.

  • Session and report: Notes taken during your session, the decision reached, our reasoning, and the content of your report.

  • Financial records: Invoices, payment records and credit or rescheduling history. We do not collect or store your card details.

  • Technical information: Where our website or app collects it: IP address, browser and device type, pages visited and referring site. See section 10.
     

We do not ask for sensitive information (such as health, racial or ethnic origin, political or religious beliefs, or membership of a union or association). Please do not include it in your Brief or send it to us.
 

4. How we collect it

We collect information directly from you: through our website form, our app, email, phone and in the session itself. Where several people complete one Brief together, we collect the information each of them contributes to that combined response. If you give us someone else’s details, please make sure they are aware of this policy.
 

5. Why we use it

  • To arrange, prepare for and deliver your session, including reviewing your Brief beforehand

  • To prepare and deliver your App Navigation Decision Session Report™

  • To invoice you, take payment and keep the records the law requires

  • To respond to your questions and provide support

  • To keep records of the decisions made and advice given, so we can act consistently if we work together again

  • To improve our own products, frameworks and service quality

  • With your consent, to send you insights, guides or other marketing, which we send using Klaviyo

We do not sell your personal information.


Our use of AI tools

We use AI tools to help us prepare, analyse and produce our work, including but not limited to Claude, ChatGPT, Figma and the AI assistants built into other software and apps we use. We share only what a task requires, a person reviews everything before it reaches you, and we take reasonable steps to set these tools up so that your information is not used to train publicly available models.
 

6. Your ideas and confidentiality

We treat the contents of your Brief, your session and your report as confidential business information. We do not disclose them to anyone outside our business except as described in section 7, and we do not use your idea for our own commercial benefit.
 

We may describe what we have learned from client work in general, anonymised terms, for example to improve our frameworks or in educational content. We will not identify you, your organisation or your idea without your written consent.
 

7. Who we share it with

We share personal information only where we need to:

  • Supabase Inc. Database, authentication and infrastructure for our app, including your App Navigation Brief™. United States. Supabase stores data on Amazon Web Services (AWS) infrastructure in the United States. supabase.com/privacy

  • Wix.com Ltd. Website hosting, and our booking and enquiry forms. Wix is based in Israel and stores data in its data centres in the United States and Ireland. It also uses group companies and third-party processors worldwide, so information may be processed in other countries. wix.com/about/privacy

  • Google LLC. Google Workspace for our email and calendar, and Google Analytics for website usage data. United States. policies.google.com/privacy

  • Klaviyo Inc. Sends our marketing emails and holds your email address, marketing preferences and email engagement data. United States. klaviyo.com/legal/privacy

  • FreshBooks. Invoicing and accounting records. FreshBooks is based in Canada and states that personal information may be transferred to, processed and stored on servers, partners or vendors in the United States and other countries outside the jurisdiction where it was collected. freshbooks.com/policies/privacy

  • AI tools. Claude (Anthropic), ChatGPT (OpenAI), Figma and the AI assistants built into other software we use, as described in section 5. United States.

  • Professional advisers. Our accountant or lawyer, where they need the information to advise us. Australia.
     

We also share information with anyone you ask us to, and with a regulator, court or other body where the law requires or permits it. Our service providers are bound by their own terms and privacy obligations, and we only give them the information they need.
 

Sub-processors: some of our service providers use their own sub-processors. In particular, Supabase stores data on Amazon Web Services (AWS) infrastructure based in the United States. All sub-processors are required to provide equivalent data protection standards.
 

8. Overseas storage and international transfers

We are based in Australia, but some of our service providers are based in the United States and other countries. This means your information may be transferred to and stored in countries outside your own.

We only transfer your information to countries or companies that provide an adequate level of protection. For Australian users, we apply Australian Privacy Principle 8, which requires us to take reasonable steps to ensure overseas recipients handle your information in a manner consistent with the Australian Privacy Principles. Where required by law — for example, for users in the European Economic Area or the United Kingdom under GDPR — we rely on Standard Contractual Clauses approved by the European Commission, or other approved transfer mechanisms.
 

Supabase, Google, Klaviyo and the AI tools named in section 5 are US-based. Wix is based in Israel and stores data in the United States and Ireland. FreshBooks is based in Canada and stores data in the United States and other countries. Each is subject to Standard Contractual Clauses or equivalent safeguards for EU and UK transfers.


9. Security and retention

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including access controls on our systems, reputable providers and limiting who can see client material. No system is completely secure, and we cannot guarantee the security of information sent to us over the internet.

​

We keep financial records for seven years, as Australian tax law requires. We keep Briefs, session notes and reports for 3 years so we can support you if you return to a decision later. You can ask us to delete your Brief and session material at any time and we will do so unless we are required to keep it.
 

10. Cookies and analytics

Our website uses cookies and similar technology to make the site work and to understand how it is used. We use Google Analytics, which sets cookies and collects information such as the pages you visit, how long you stay and the site that referred you. You can block or delete cookies in your browser settings, though parts of the site may not work as well.
 

11. Marketing and unsubscribing

We will only send you marketing emails if you have asked for them or consented on one of our forms. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing unsubscribe@sweetspotapps.com.au. Emails about your booking, invoice, session or report are service messages and are not marketing.
 

12. Access, correction and complaints

You can ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing privacy@sweetspotapps.com.au. We will respond within 30 days. If we cannot give you access, we will explain why.

If you think we have mishandled your personal information, please tell us first so we can put it right. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au
 

13. Other websites and changes to this policy

Our website may link to other sites. We are not responsible for their privacy practices.

We may update this policy as our services change. The current version is always on our website, with its effective date at the top.

bottom of page