DOSHly — Privacy Policy
Last updated: June 2026
Who we are
DOSHly is a personal finance tracking and budgeting app built for everyday Australians. We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). DOSHly does not hold an Australian Financial Services Licence and is not a licensed financial adviser.
What data we collect
- Name and email address (collected at signup)
- Financial data you manually enter: transactions, budgets, bills, income
- App usage data for improving the service
- Conversation data from DOSHly Coach sessions (stored as anonymised summaries only)
How we use your data
- To provide and improve the DOSHly service
- To generate personalised AI insights and DOSHly Coach responses
- To send important account and service notifications
- We never sell your data or use it for advertising
Where your data is stored
Your data is stored securely with Supabase on servers located in Singapore. Singapore's Personal Data Protection Act (PDPA) provides robust data protection standards equivalent to Australian privacy standards.
Overseas disclosure — Anthropic (United States)
DOSHly's AI features are powered by Anthropic's Claude API. When you use AI Insights or DOSHly Coach, relevant summaries of your financial data are transmitted to Anthropic's API for processing. Anthropic is located in the United States. By using DOSHly's AI features you consent to your information being disclosed to and processed by a recipient located overseas.
Under Anthropic's commercial terms, inputs and outputs sent to the API are generally deleted within 30 days, are not used to train AI models, and are not sold. Anthropic processes this data as a service provider and data processor on DOSHly's behalf — not as a data controller. For full details see anthropic.com/privacy.
Overseas disclosure — Stripe (United States)
Subscription payments are processed by Stripe, located in the United States. By subscribing to a paid plan you consent to your payment information being processed by Stripe in accordance with their privacy policy at stripe.com/privacy.
Third party services
- Supabase (database and authentication — Singapore): supabase.com/privacy
- Anthropic Claude API (AI features — United States): anthropic.com/privacy
- Stripe (payments — United States): stripe.com/privacy
Your rights
In accordance with the Australian Privacy Act 1988 you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent at any time by deleting your account
- Make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
Data retention
We retain your data for as long as your account is active. Upon account deletion all personal data is removed within 30 days. Anthropic API data is deleted within 30 days. Stripe retains payment records as required by law.
Data security
We implement industry-standard security measures including encrypted data transmission, row-level security on our database and secure authentication via Supabase Auth. No system is completely secure and we cannot guarantee absolute security.
Children
DOSHly is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from minors.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the App after changes constitutes acceptance.
Contact and complaints
For privacy enquiries or to request access, correction or deletion of your data:
Email: doshly.app@gmail.com
Website: doshly.com.au
If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner:
Website: oaic.gov.au
Phone: 1300 363 992