Privacy Notice

1. Who we are

Aid Angel (the “Service”) is operated by Streamline Direct as part of the Love Key HELP Network. Streamline Direct is the data controller for the limited data processed through the Service. You can reach us at support@lovekey.com.au.

2. Our privacy-first approach

Aid Angel helps Australians navigate disaster recovery support. It is designed to be used without an account, and the answers you give while finding help are stored on your own device by default. We do not build advertising profiles of you and we do not sell personal data.

3. What we collect

• Recovery answers (on your device): the situation details and locale you provide while using the guide are saved in your browser’s local storage so the Service can tailor suggestions. You can clear them at any time from within the Service or your browser.
• Matching & suggestions: if you use AI-assisted matching, the recovery details you choose to submit may be sent to our backend and AI provider to generate relevant program and referral suggestions.
• Routing signals: when you move between pages, the Service may send an anonymous Respectful Synchronised Protocol signal (site, help stage, language, and country if set) to coordinate help routing across the Love Key network. These are not tied to your identity.
• Local preferences: language, country/locale, and theme are stored only in your browser.
• Technical data: standard request metadata (such as IP address and request headers) processed by our hosting and content-delivery providers to serve pages and prevent abuse.

We do not use advertising cookies or third-party analytics suites such as Google Analytics.

4. Outbound links to providers

The Service links to independent official providers, support organisations, and sister sites. When you follow a link you leave Aid Angel and any information you provide there is governed by that organisation’s own terms and privacy policy. Eligibility for any program is determined solely by the official provider.

5. Purposes and legal bases

• Operating the Service and tailoring recovery suggestions — legitimate interests / your request.
• Coordinating anonymous help routing across the network — legitimate interests.
• Security, abuse prevention, and reliability — legitimate interests.
• Responding to enquiries you send us — legitimate interests.
• Compliance with legal obligations — legal obligation.

6. Who we share data with

• Service providers / sub-processors: cloud hosting and database (Supabase / AWS), AI inference providers used for matching, and content delivery.
• Love Key HELP Network: anonymous routing signals as described above.
• Authorities: where required by law, court order, or to protect the rights, safety, and property of Streamline Direct, our users, or the public.

7. International transfers

Some providers are located outside your country of residence, including in the United States and the European Economic Area. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses, UK International Data Transfer Addenda, or adequacy decisions where available.

8. Data retention

Recovery answers and preferences remain on your device until you clear them. Data processed by our backend for matching is retained only as long as necessary for that purpose and then deleted or aggregated. We keep data only for as long as needed for the purposes described here or as required by law.

9. Your rights

Depending on where you live, you may have rights to access, rectify, erase, restrict, or port your data, to object to processing, and to lodge a complaint with your local supervisory authority. Because the Service is largely anonymous and local-first, we may be unable to identify data relating specifically to you. To make a request, email support@lovekey.com.au.

10. Security

We use appropriate technical and organisational measures designed to protect data, including TLS encryption in transit, encryption at rest for our database, row-level security on stored records, and secrets managed outside the codebase. No method of transmission or storage is completely secure; we work to continuously improve our safeguards.

11. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from children.

12. Changes & contact

We may update this notice from time to time; material changes will be reflected by updating the date above. Questions? Contact Streamline Direct at support@lovekey.com.au.