Privacy Policy

VanLife Connect Pty Ltd
ACN: 689 008 802 | ABN: 72 689 008 802
Effective date: August 2026

This Privacy Policy describes how VanLife Connect Pty Ltd (“VanLife Connect“, “we“, “us“, or “our“) collects, uses, stores, shares, and protects your personal information when you use our mobile application (the “App“), website, and related services (collectively, the “Services“).

We handle personal information in accordance with applicable privacy laws. Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to us, we handle information consistently with those requirements. This policy also describes the privacy standards we aim to follow across the Services.

This policy explains how VanLife Connect handles personal information. Where consent is required for a particular collection or feature, we will request that consent separately. If you do not wish to provide information required for an account or particular feature, you may be unable to use that account or feature.

You must create an account before accessing or browsing content within the VanLife Connect App. Account creation requires a valid email address, which must be verified before you can use the App. Mobile phone verification is also required before you can use features involving direct interaction with other users, including in-app messaging, Community discussions and Travel Mates. Additional payment, payout, tax or compliance information may be required if you offer services, make bookings, receive payments or use other features that require this information.

The Platform is intended only for individuals aged 18 years or older. We do not knowingly collect personal information from persons under 18. If we become aware that we have collected personal information from a person under 18, we will take reasonable steps to delete it

For our standards against child sexual abuse and exploitation (CSAE) and child sexual abuse material (CSAM), please see our Child Safety Standards Policy

Definitions
Personal Information We Collect
How We Collect Personal Information
Purpose of Collection and Use
Legal Basis for Processing
Disclosure of Personal Information
Sharing-Economy Tax Reporting
Data Retention Schedule
Peer-to-Peer Marketplace Privacy
Smart Arrival Technology
Travel Mates Location Handling
Data Breach Notification
Your Rights and Choices
Third-Party Service Providers
Changes to This Policy
Contact Us
Governing Law and Jurisdiction

1. Definitions

“Booking” means a confirmed contract between Traveller and Provider facilitated through the VLC Platform

“Community Noticeboard” means the centralized hub for local events, meetups, assistance requests, and community announcements

“Convoy” means a group of travelers who choose to coordinate their journeys through the Travel Mates feature

“Personal Information” has the meaning given under the Privacy Act 1988 (Cth)

“Provider” means a user who lists and supplies services through the VLC Platform

“Smart Arrival” means our intelligent location technology that automatically surfaces relevant services, community updates, and Travel Mates information when you check into new locations

“Traveller” means a user who books services through the VLC Platform

“Travel Mates” means the optional feature that lets you connect and communicate with people you have met and chosen to connect with. Connected Mates may coordinate trips (circles) and share location using features available in the App.

“VLC Platform” means our mobile applications, websites, APIs and related services

2. Personal Information We Collect

We collect the following categories of personal information:

Account Information:

Account and contact details, which may include your name, email address and mobile phone number. The App will identify which details are mandatory and which are optional.
Date of birth or confirmation that you are at least 18, where requested for age eligibility or by a payment or identity-verification provider.
Postal address, where required for a provider, payment, tax or support purpose; and location information where you enable a location-based feature.
Travel Mates profile information including visibility preferences, interests, convoy participation settings, and status indicators
Optional profile information you choose to provide, such as a profile photograph, gender, interests and biographical content.

Financial Information:

Payment details processed through secure third-party payment processors (Stripe)
Bank account details for Provider payouts (Stripe)
Transaction history and booking records
Refund and dispute information
Tax-related information including ABN for Providers

Platform Content:

User-generated content including service listings, photographs, reviews and ratings
Communications between users through in-app messaging
Travel Mates interactions, connection requests, convoy participation data, and communications between Users within Travel Mates
Community Noticeboard posts, comments, and interactions
Support communications and enquiries

Technical Information:

Device information, IP address, browser type and version
Usage data and analytics (including cookies and similar technologies). Cookies and similar technologies are used on our website to support functionality, analytics and security. You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.
Login timestamps and session information
Push notification tokens and preferences, only where you have granted notification permission through your device settings
Location information, including approximate location, check-in points and proximity indicators, is collected only when you enable location services for the VanLife Connect app and grant permission through your device settings. We do not access, collect or track location data unless you have provided permission at the device level. You may withdraw location access at any time through your device settings.
App performance data and error logs
VanLife Connect does not track users across third-party applications or websites. We do not use the Apple Advertising Identifier (IDFA), Google (GAID), or any similar cross-app advertising identifier. Any analytics data collected is used solely to operate and improve our Services and is not shared for advertising or cross-platform tracking purposes.

Where we ask for sensitive information, we will obtain consent where required by law and explain why it is needed. Identity verification is not a requirement for Vanlife Connect features. Stripe may require identity or business information for Provider payment or payout services.

If you offer services through VanLife Connect, we may collect information reasonably necessary to confirm your eligibility to provide those services, support platform safety, prevent fraud, process payments and meet regulatory or legal requirements. Depending on the services you offer, this may include:

Australian Business Number (ABN), where applicable
Professional or trade qualifications
Licences, registrations or permits
Insurance details and supporting documentation, where applicable

We collect only the information reasonably required for these purposes. Providing particular information may be necessary before you can publish or continue offering certain services through the Platform.

3. How We Collect Personal Information

We collect personal information through:

Direct Collection:

Registration and verification forms (including email or SMS one-time-password verification), booking processes, user profiles, and communications
When you interact with other Users within the Travel Mates feature
Community Noticeboard posts and interactions
Service listings and marketplace activities
Customer support interactions

Automatic Collection:

Cookies, device sensors, usage analytics, and app functionality
When you use Travel Mates, we may use location information to show approximate proximity to people you have connected with, subject to the feature settings and permissions. If you actively start a live location share in a chat, precise location points and timestamps may be shared with members of that chat. Smart Arrival may use location signals to detect arrival or surface local information.
Smart Arrival location detection and check-in processes
App usage patterns and performance metrics

Third-Party Sources:

Payment processors and identity-verification services; email and SMS verification providers; hosting, analytics, mapping and support providers; and government or regulatory sources where collection is authorised or required by law.

Stripe processes payment and identity verification information in accordance with its own privacy policy. Where identity verification is conducted through Stripe Connect or Stripe Identity, Stripe acts as an independent service provider and may retain and process verification information in accordance with its legal and regulatory obligations.

4. Purpose of Collection and Use

Core Platform Operations:

Operating and providing the VLC Platform services
Facilitating service listings, bookings, and secure payments
Enabling communication between Travellers and Providers
Processing transactions and managing refunds
Maintaining user accounts and profiles

Safety and Security:

Verifying account contact details and, only where relevant to a particular feature, identity, provider eligibility, payment or payout requirements.
Assist to prevent fraud, unauthorized access, and misuse of the Platform
Investigating disputes and policy violations
Maintaining Platform security and integrity

Legal and Regulatory Compliance:

Complying with tax reporting obligations that apply to VanLife Connect
Meeting anti-money laundering and counter-terrorism financing requirements that apply to VanLife Connect; a payment or identity provider may separately collect information to meet its own obligations.
Responding to lawful requests from government authorities
Enforcing our Terms & Conditions

Service Improvement:

Personalizing user experience and recommendations
Analyzing usage patterns to improve Platform functionality
Conducting research and development
Providing customer support

Marketing and Communications:

Sending operational notifications and updates needed for account security, bookings, payments or service changes. You may not be able to opt out of messages necessary to provide or secure an active service.
Providing marketing communications including promotional offers and platform news, only where you have provided consent
Conducting user surveys and feedback collection

You may withdraw consent for marketing communications at any time by clicking the ‘unsubscribe’ link included in any marketing email. Withdrawal of marketing consent will not affect the delivery of transactional or service-related communications necessary to operate your account.

Travel Mates Functionality:

We use personal information to operate and improve Travel Mates, including:

Displaying approximate proximity to people you have connected with through Travel Mates, where you and those people have enabled the relevant feature. A live location share in a chat may disclose precise points to that chat’s members as described in Section 11.
Showing connected Mates and check-ins and group (circle) information only where you choose to use it
Supporting messaging and connection requests
Enabling Smart Arrival to surface Travel Mates information at new locations
Supporting safety and trust through verified contact details, user controls, reporting and moderation.
Coordinating convoy activities and group travel

5. Legal Basis for Processing

We collect, use and disclose personal information only where reasonably necessary to provide our Services, comply with legal obligations, protect the integrity and safety of the Platform, or where you have provided consent.

This includes:

Providing and administering your account and bookings
Processing payments and complying with tax and regulatory requirements
Preventing fraud, misuse and security incidents
Improving the functionality and reliability of the Platform
Sending marketing communications or enabling optional features where you have chosen to participate

6. Disclosure of Personal Information

We may disclose your personal information to the following categories of recipients:

Platform Users:

Other users as necessary for booking fulfillment and communication
Public display of usernames, ratings, and review content (as per Platform settings)
Community Noticeboard interactions and posts

Travel Mates Visibility:

If you choose to use Travel Mates:

Your profile, approximate location, check-ins and availability status may be visible to other Users who you have connected with through Travel Mates
You may turn Travel Mates on or off at any time

Service Providers:

Payment processors (including Stripe and other financial institutions)
Cloud hosting and IT infrastructure providers (AWS Sydney region)
Customer support and communication platforms

Government and Legal:

Law enforcement agencies and government authorities (when legally required)
Courts and tribunals (in response to lawful orders)
Regulatory bodies including the Australian Transaction Reports and Analysis Centre (AUSTRAC)
Australian Taxation Office (ATO) for tax reporting compliance

We do not sell personal information.
We do not share personal information for behavioural or targeted advertising.
We do not use precise location data for advertising purposes.
We do not use cross-app or cross-website tracking technologies (including IDFA or GAID) for any purpose
Personal information collected through the Platform is used only for core functionality, safety, compliance, service improvement and permitted communications as described in this Policy.

7. Sharing-Economy Tax Reporting

Payments are facilitated through Stripe Connect. VLC acts solely as limited payment agent for collecting, holding and releasing funds.

In accordance with Australian tax law and our Master Terms & Conditions:

VLC may collect and disclose Provider information including ABN, gross payouts, payment dates, and other required information to the Australian Taxation Office and other relevant authorities as required by the Sharing-Economy Reporting Regime or other applicable laws.
VLC is not obliged to provide additional notice before making compulsory disclosures required by law.

What This Means for You: If VanLife Connect is required by law to report a transaction through a sharing-economy or other tax-reporting regime, we may collect and provide the information required for that report to the ATO or another authority. The information and transactions reported depend on the law that applies to us and to the particular supply.

8. Data Retention Schedule

We keep personal information only for as long as needed to operate VanLife Connect, meet legal obligations and maintain accurate business records. When information is no longer required, we delete it or permanently anonymise it unless the law requires us to keep it longer.

Account and Profile Information
We retain account details while your account is active. After closure, we delete or de-identify personal profile information we no longer need. We retain limited records only for as long as reasonably required for applicable legal, tax, accounting, safety, fraud-prevention or dispute purposes. Inactive accounts may be deleted or anonymised under our retention process.

Bookings and Payments
Records relating to bookings, payments, refunds, payouts and disputes are retained for the period required by applicable tax, accounting, regulatory and legal obligations. The retention period depends on the record and the applicable obligation.

Communications and Content
Messages, support interactions and community posts are kept only for the period needed to operate the platform, manage safety, or meet legal requirements. Some content may be anonymised rather than deleted.

Verification and Compliance Documents
Where identity verification is performed through Stripe Connect or Stripe Identity, Stripe processes verification information as an independent service provider under its own privacy policy and may retain records in accordance with its legal and regulatory obligations.

Technical and Location Data
Device, usage and analytics data is retained under operational and security schedules. Certain logs may be retained longer where needed for safety or compliance. Location information is retained only for the feature and period needed. A live location share should stop being available to chat members when it ends, but some data may remain temporarily in logs, backups or records needed for safety or legal purposes. The deletion timing depends on the feature and the verified retention schedule.

Legal Requirements
Where information relates to legal matters, regulatory reporting or tax obligations, it may be kept for the period required by law.

After retention periods expire, we securely delete or anonymise the information.

9. Peer-to-Peer Marketplace Privacy

VanLife Connect operates as a peer-to-peer platform, which means certain information must be shared between Travellers and Providers to enable bookings, payments and safe interactions.

Provider Verification
Providers may be required to complete Stripe onboarding or identity verification and provide ABN, license, insurance or other eligibility information relevant to the services they offer. The App will identify what is required. A document merely uploaded to VanLife Connect is not independently verified. This information is kept only for compliance and audit requirements.

Payments and payout handling
Payments are processed through Stripe or the payment provider shown at checkout. Payment timing, release, refunds and disputes follow the applicable payment flow and Terms & Conditions. Transaction information may be retained for dispute handling, refunds, payouts and legal reporting.

Reviews and Ratings
Travellers and Providers can review each other after a booking. Reviews are public and may be moderated to remove personal information or inappropriate content. Review history helps maintain trust on the platform.

Booking Communications
Messages between users are routed through the platform. Contact details or precise service locations are only shared when needed to complete a booking. Communication logs may be kept for dispute resolution and safety purposes.

Trust and Safety
Users can report concerns at any time. We may suspend accounts where safety or rule breaches occur. Relevant information may be preserved for investigations or provided to law enforcement where required by law.

10. Smart Arrival Technology

Smart Arrival is a location-based feature designed to surface relevant information when you arrive at a new destination.

How Smart Arrival Works

Smart Arrival uses location signals from your device to detect when you enter a new campsite area. This may occur through:

GPS-based location detection
Manual check-in initiated by you
Detection that you have entered a new location

Smart Arrival only processes limited location signals needed to detect when you arrive in a new area. Detailed travel history or continuous movement records are not stored.

Information Surfaced

When Smart Arrival detects that you have reached a new campsite, it may display:

Available local services from Providers
Connected Travel Mates who have opted into that feature, where available
Community Noticeboard posts relevant to that area
General regional or safety-related information

Privacy Protections

Permission-Based Operation: Smart Arrival operates only when location services are enabled and the relevant permission has been granted to the App. If a Smart Arrival function needs background location, the App will explain this and request the required device permission. You may change permission at any time. Changing from “Always” to “While Using” may stop automatic arrival detection, while unrelated features should remain available.
No Public Location Sharing: Your arrival detection is not publicly shared with other users.
Data Minimisation: Only limited location signals necessary to determine arrival in a new area are processed. Detailed GPS tracks are not stored.

User Controls

You may:

Continue using other features of the Platform without Smart Arrival
Disable location permissions entirely through your device settings
Manually check in to a location instead of relying on automatic detection

11. Travel Mates Location Handling

Travel Mates Privacy

Travel Mates helps you reconnect and communicate with people you have met and chosen to connect with. It is not a feature for discovering random nearby VLC users.

Travel Mates location sharing is strictly opt-in. The feature is disabled by default and only operates when you actively enable it within the app and grant location permission through your device settings. You may disable Travel Mates or withdraw location access at any time.

Location Sharing
Travel Mates may display approximate proximity to Mates who have connected and enabled the relevant feature. Separately, if you actively start live location sharing in a chat, precise location points and timestamps may be visible to active members of that chat for the share period. These points are not publicly displayed, but they are disclosed to chat members. You can stop an active share in the App; it may also end after the selected time limit.

Convoy (Circle) Features
Users travelling together can optionally share plans, routes and live updates. This information is visible only to circle members and is not shared elsewhere on the platform.

Profile Visibility and Controls
You can use the Travel Mates controls available in the App to manage connections and visibility, and block or report users. Turning off a visibility setting or ending a share stops future location visibility through that feature, subject to the retention and deletion information below.

Data Handling and Storage
Travel Mates uses additional controls for proximity signals, with appropriate security measures. Temporary location data is removed when you turn Travel Mates off.

Safety Measures
Safety controls include verified account contact details, user-controlled visibility, blocking and reporting. The ability to disable the feature instantly support safer in-person interactions.

12. Data Breach Notification

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These measures include access controls, secure cloud infrastructure and limiting access to personal information to those who require it to operate the Platform.

We take the security of personal information seriously. If we become aware of a data breach involving personal information, we will take reasonable steps to contain the incident, assess its nature and extent, and determine whether it is likely to result in serious harm.

Where required under the Notifiable Data Breaches scheme contained in the Privacy Act 1988 (Cth), we will notify affected individuals and the Office of the Australian Information Commissioner as soon as practicable.

Any notification will include a description of the breach, the types of information involved, the steps we are taking in response, and recommended actions you may take to protect yourself.

We may also publish a notice through the Platform or by other appropriate means where direct notification is not practicable.

If you believe your personal information has been compromised or you have concerns about a potential data incident, you may contact us at privacy@vanlifeconnect.com.au

13. Your Rights and Choices

Where the Privacy Act 1988 (Cth) applies, you may have rights to access and correct your personal information and request its deletion, subject to legal exceptions. We also accept privacy requests and handle them in accordance with applicable law.

Access and Correction

You may request access to the personal information we hold about you or request correction if you believe it is inaccurate, incomplete or out of date.

Many details can be updated directly within your account settings. For other requests, you may contact us at privacy@vanlifeconnect.com.au.

We may require reasonable verification of your identity before processing certain requests.

Deletion

You may close your account and request deletion of your personal information at any time using one of the following methods:

In-app: Navigate to Settings > Account > Delete Account within the VanLife Connect app
By email: Submit a deletion request to privacy@vanlifeconnect.com.au
Online: Submit a request via https://vanlifeconnect.com.au/contact

We will acknowledge deletion requests within 5 business days. We aim to complete deletion or de-identification within 30 days after we can process the request, unless a booking, payment, payout, refund or dispute remains unresolved or we must retain particular information for legal, regulatory, safety, fraud-prevention or audit purposes. Where we retain information beyond your request, we will explain what is retained and why, subject to law.

Note: Deleting an account removes access to that account, its booking history, reviews and account content, subject to the retention exceptions above. Deletion does not necessarily prevent you from creating a new account later using the same email address or mobile number, but the new account will not restore deleted content or history. We may retain a limited record or irreversible hash of an identifier where reasonably necessary to meet legal obligations, prevent fraud, enforce a suspension or protect Platform security.

Privacy Controls

You can manage the following privacy controls through your account settings or device controls at any time:

Location permissions: Enable or disable location access (including background location) through your device settings
Travel Mates visibility: Turn Travel Mates on or off, set your visibility level, and control who can view your profile
Push notifications: Enable or disable push notifications at any time through your device settings
Marketing communications: Opt out of marketing emails via the unsubscribe link in any marketing email
Data access and deletion: Submit access, correction or deletion requests as described in this Section

Complaints

If you believe we have breached your privacy rights or mishandled your personal information, you may lodge a complaint by contacting privacy@vanlifeconnect.com.au.

We will acknowledge your complaint and take reasonable steps to investigate the matter. We aim to respond within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

14. Third-Party Service Providers

We use trusted service providers to help operate VanLife Connect. These partners only receive the information needed for their services and under contractual confidentiality and security obligations.

Examples include:
• cloud hosting providers, including AWS
• payment and identity-verification providers, including Stripe
• email and SMS verification providers, including Twilio
• mapping and location-service providers, including Mapbox
• analytics and performance tools
• email, notification and customer-support systems

Some providers process information only on our instructions, while others — including payment or identity-verification providers — may handle information as independent organisations under their own privacy policies and legal obligations.

Some of our third-party service providers, including payment processors and identity verification services, may process or store personal information outside Australia. Where personal information is disclosed overseas, we take reasonable steps to ensure that it is handled in accordance with Australian privacy law and the Australian Privacy Principles.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations or operational requirements.

When changes are material and affect how we handle personal information, we will take reasonable steps to inform users, which may include email notification or an in-app notice prior to the changes taking effect.

Minor updates, including clarifications, formatting adjustments or administrative changes, will take effect when the revised Policy is published.

The most current version of this Privacy Policy will always be available within the App and on our website. If a material change affects how we handle personal information, we will take reasonable steps to notify users before it takes effect. Where the law requires consent, we will ask for it; continued use alone does not replace consent where consent is required.

If you do not agree with the updated Policy, you may discontinue use of the Services and request account closure in accordance with this Policy.

16. Contact Us

If you have questions about this Privacy Policy or wish to make a privacy request, you can contact us at:

Email: privacy@vanlifeconnect.com.au

Website: https://vanlifeconnect.com.au/contact

17. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of Western Australia and the Commonwealth of Australia, subject to any mandatory law that applies to you. Our Services are operated from Australia. Your information may be handled in Australia and in other countries described in Section 14. We will handle cross-border disclosures as required by applicable law. This policy does not remove rights that apply to you under mandatory local privacy law.

If any part of this Policy is found to be invalid or unenforceable, the remaining sections will continue to apply.

Policy Version History

Version	Date	Summary of Changes
1.0	March 2026	Initial policy published
1.1	August 2026	Update to align with final app design. Updated signup, ID handling, Stripe verification and Travel Mates access.
1.2	October 2026	Clarifies location sharing, data retention and deletion, and payment handling,