Privacy Policy

Last updated: June 2026

Hakea Labs ("we", "us", "our") is an Australian sole trader business that develops software products — including TeamLens, LifeLens, Magpie, OldMate, SnackRadar and Tilly — and related services.

We respect your privacy and aim to handle personal information responsibly, transparently and with restraint. This Privacy Policy explains how we collect, use, disclose and protect information when you use our apps, website and related services.

Where applicable, we seek to align our practices with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Our Privacy Approach

We design products with the following principles in mind:

  • collect only what is reasonably needed
  • keep functionality simple and user-controlled
  • prioritise on-device and user-account storage where practical
  • use trusted service providers where required
  • be clear about how data is handled
  • continuously improve privacy and security practices

2. Scope of This Policy

This Privacy Policy applies to all Hakea Labs apps and services, including:

  • our mobile applications — including TeamLens, LifeLens, Magpie, OldMate, SnackRadar and Tilly
  • our website
  • support enquiries and communications with us
  • related services we provide

Different apps collect different information depending on what they do — for example, our product-discovery apps (SnackRadar and Tilly) work without an account and are described in section 3.5. This single policy covers them all; where an app does something notably different, we say so.

This policy does not apply to third-party services that you choose to use separately, such as Apple services or app marketplace services, which operate under their own policies.

3. Information We May Collect

Depending on how you use our products, we may collect or process the following categories of information.

3.1 Account and Contact Information

If you contact us, create an account, join a waitlist, request support or subscribe to updates, we may collect:

  • name
  • email address
  • account identifier
  • communication history with us

3.2 User Content

Our apps may allow you to create, store or manage content such as:

  • notes
  • reminders
  • tasks
  • goals
  • team or relationship information
  • contact details you choose to enter
  • family information you choose to manage
  • dates such as birthdays or anniversaries
  • dictated or voice-transcribed content
  • other user-entered content

Where possible, this content is stored locally on your device and/or within services you personally enable, such as your Apple iCloud account.

3.3 Device and Technical Information

We may collect limited technical data such as:

  • device type
  • operating system version
  • app version
  • language or region settings
  • crash logs
  • diagnostic events
  • performance information

3.4 Purchase and Subscription Information

If you purchase subscriptions or paid features through the Apple App Store, Apple manages the transaction. We may receive limited information necessary to validate entitlements, such as subscription status or transaction identifiers.

We do not receive your full payment card details.

3.5 Guest Use and Product-Discovery Apps (SnackRadar, Tilly)

Some of our apps — our product-discovery apps SnackRadar and Tilly — work without an account. You do not give us a name, email address or password to use them. For these apps we may collect or process:

  • A pseudonymous device identifier — a random ID generated on your device on first launch and stored on your device. It is not your name, email or Apple ID. Because it persists, we describe data linked to it as pseudonymous, not anonymous. It exists so your saved items and preferences work, and so engagement can be counted per device.
  • An optional region — if you choose to enter it, your Australian postcode, which we use only to work out your state or territory so we can show what's available there. Entering it is optional and you can skip it. We do not collect your street address or GPS / precise location, and these apps never access your device's location.
  • On-device preferences — the categories, brands and tastes you pick, plus a preference model calculated on your device to personalise what you see. This is not artificial intelligence and is not transmitted for personalisation.
  • Product-engagement events — which products you view, save, rate, the fixed tag-chips you tap, and which creator or retailer links you tap, together with category/flavour/brand engagement and whether you opened a notification. We use this to operate the app and, in aggregate, to understand product and market trends (see section 7).
  • A push notification token — if you turn on alerts, so we can deliver them. You can turn alerts off at any time.

For both apps, we do not use advertising identifiers (no IDFA), we do not track you across other apps or websites, and we do not share your data with advertising networks or data brokers. The engagement data above is sent only to our own backend.

Tilly only: Tilly links the pseudonymous in-app activity described above (the products you view, save, rate and tap, your searches, and your optional region) to its on-device identifier so we can understand what is genuinely trending across Australia. Apple classifies this as "tracking", so Tilly asks your permission through Apple's App Tracking Transparency prompt, and its App Store privacy label reflects this. You can decline, and Tilly works exactly the same. SnackRadar does not do this and shows no tracking prompt.

4. How We Use Information

We may use information to:

  • provide and maintain our apps and services
  • sync or restore data where enabled by you
  • respond to support requests or enquiries
  • improve usability, reliability and performance
  • develop new features
  • deliver AI-assisted features you choose to use
  • detect misuse, fraud or security issues
  • comply with legal obligations

5. AI-Assisted Features

Some features may use artificial intelligence to help generate summaries, suggestions, structure notes, or improve productivity.

When you use these features:

  • only content reasonably required to perform the requested task may be processed
  • relevant content may be transmitted to trusted third-party AI providers
  • outputs are generated automatically and may contain inaccuracies
  • outputs are provided for convenience only and are not professional advice
  • you may choose not to use AI-assisted features where alternatives are available

We do not intentionally use your private content to train public AI models where such controls are available through our providers.

6. Storage and Data Location

We aim to minimise centralised storage where practical.

Depending on the product and features you use, data may be stored:

  • on your device
  • in your personal Apple iCloud account (if enabled by you)
  • in secure third-party infrastructure used to deliver specific features (for example, our backend provider Supabase, hosted in Sydney, Australia)
  • in support systems if you contact us

Where data is stored by third-party providers, their infrastructure may be located in Australia or overseas.

7. Analytics and Diagnostics

We may use privacy-conscious analytics or diagnostics tools to understand product performance and improve reliability.

This may include:

  • feature usage trends
  • crash events
  • load times
  • device class information
  • general region information

We aim to avoid collecting more data than needed for product improvement.

We do not sell personal information or individual behavioural profiles, and we do not sell data to advertisers.

7.1 Aggregate Trend Insights (SnackRadar, Tilly)

Our product-discovery apps exist partly to understand what products people are interested in. For these apps, we combine pseudonymous engagement (section 3.5) across many users into aggregate, de-identified insights — for example, "interest in a product category rose in a region this month". We may share or sell these aggregate insights to retailers, brands or other partners.

To be clear about what this is and is not:

  • We share or sell aggregate, de-identified trend information only — counts, rankings and trends across groups of users.
  • We do not sell your personal information, your individual profile, or anything that identifies you.
  • We do not sell to advertisers or use this to target ads at you.
  • Aggregate insights, once produced, are not linked to your device identifier and cannot be traced back to you.

8. Disclosure to Third Parties

We may disclose information to third parties only where reasonably necessary, including:

  • Apple (app distribution, subscriptions, platform services)
  • cloud or hosting providers
  • analytics or diagnostics providers
  • AI processing providers
  • retailers, brands or commercial partners — aggregate, de-identified trend insights only (section 7.1), never your personal information
  • professional advisers
  • regulators or authorities where legally required

We seek to use reputable providers with appropriate safeguards.

9. Children's and Family Information

Our apps are intended for adult users.

We do not knowingly create independent child accounts or market directly to children.

Some users may choose to store information relating to family members, dependants or household contacts, such as birthdays, reminders or notes, for personal organisation purposes.

Where you choose to enter such information:

  • you are responsible for ensuring you have authority or consent where appropriate
  • the information remains under your control within the app ecosystem
  • we encourage users to store only what is reasonably necessary

If you believe information has been provided inappropriately, please contact us.

10. Security

We take reasonable steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure.

Measures may include:

  • encryption in transit
  • platform-level security provided by Apple
  • restricted administrative access
  • software updates
  • review of providers and practices

No system can guarantee absolute security.

11. Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required by law.

Examples:

  • support emails may be retained for service history
  • technical logs may be retained for diagnostics
  • user-created content stored locally or in your iCloud remains under your control until you delete it

12. Your Choices and Rights

Depending on your circumstances, you may have rights to:

  • request access to personal information we hold about you
  • request correction of inaccurate information
  • request deletion of certain records we control
  • opt out of marketing communications
  • disable optional analytics where available
  • stop using AI-assisted features

You may also delete app data directly from your device, or through Apple account settings where relevant.

For apps that support accounts (such as Magpie), you can permanently delete your account and any cascade-linked data on our backend from inside the app via Settings → Account → Delete account. This action signs you out, removes your server-side account, and cannot be undone.

For our guest, account-free apps (such as SnackRadar and Tilly), you can delete the app's data on your device — and reset or regenerate the pseudonymous device identifier — from within the app's settings (or by removing the app). Because that identifier is the only link to your activity, doing so disconnects you from it. Note that engagement you have already contributed to aggregate trend insights (section 7.1) cannot be traced back to you and therefore cannot be individually removed from those aggregates.

13. Overseas Disclosure

Some service providers may store or process data outside Australia.

Where we use overseas providers, we take reasonable steps to work with reputable providers and suitable safeguards.

14. Cookies and Website Technologies

Our website may use limited cookies or similar technologies for essential operation, security, analytics or performance.

You can usually manage cookies through your browser settings.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in products, technology, law or business operations.

When material changes are made, we may:

  • update the date above
  • publish the revised version on our website
  • provide notice within apps where appropriate

16. Contact Us

For privacy enquiries, requests or complaints:

Hakea Labs
Email: hello@hakealabs.com
Website: hakealabs.com/contact

We aim to respond within a reasonable timeframe.

17. Complaints

If you believe we have mishandled your personal information, please contact us first so we can investigate.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).