Privacy policy

Effective 8 August 2026. Version 2026-08-08.

1. Who we are

RyftSpace is provided by Cloudreon Pty Ltd, ABN 52 638 743 352. We are bound by the Australian Privacy Principles in thePrivacy Act 1988 (Cth).

Registered address: U35 210 Newman-Morris Circuit, Oxley, ACT 2903, Australia
Postal address: PO Box 963, Woden, ACT 2606, Australia

2. What we collect

When you create an account: your name and email address, a scrambled version of your password, and the country you tell us you are in. We never store your password itself.

Why we ask for a country: it is your tax jurisdiction, and it also decides whether we can offer you RyftSpace at all. We open one country at a time, and today we are open in Australia only — so the country you declare at sign-up decides your price, your tax, and whether an account can be created. Cloudreon is registered for GST, so every Australian price includes 10% GST. We ask rather than guess, because guessing wrong means charging the wrong amount. Change it whenever you move, on your account page — changing it does not close an account you already hold.

When you use RyftSpace: whatever you choose to put into it — the rows, events, dates, amounts and notes you enter.

When you pay: Stripe handles the payment and stores your card details. We receive a customer reference and whether the payment succeeded.We never see or store your card number.

Automatically: ordinary server logs, including your IP address and the time of a request, kept for security and troubleshooting.

3. Sensitive information, including health and children

Some parts of RyftSpace are for recording health information— nutrition, exercise, medical appointments — and information about your children, such as school planning and medical needs.

Under Australian privacy law this is sensitive information, and it gets stricter treatment. By entering it, you consent to us storing and displaying it so the product can do its job. We do not use it for anything else. We do not sell it. We do not use it for advertising or profiling, and we do not share it with anyone except as set out in section 5.

Only enter information about a child if you are their parent or guardian, or you have that person's permission.

Health information: we ask separately

Ticking the terms at sign-up is not how we take consent for health information. The first time you open a screen that holds it, we ask you separately — plainly, once, and you can say no and still use everything else. We record which wording you agreed to and when.

You can withdraw that consent at any time on your account page. Withdrawing closes those screens and deletes nothing — what you have stored is yours, and removing it to tidy up our position would be the wrong way round. Delete it yourself whenever you choose.

When a child grows up

RyftSpace is a household planner, not a per-person record. What a parent enters about a child stays with that household. We do not ask for children's birth dates and nothing happens automatically on a birthday — collecting a child's date of birth purely to police a rule would mean holding more information about a minor, not less.

A parent can download everything at any time and hand a grown child their own copy. And an adult who believes we hold information about them can ask us to erase it, whoever entered it. Write to us and we will.

4. Why we collect it

We use your information to:

• run the product and show you what you entered;
• take payment and manage your subscription;
• send reminders you have asked for;
• reply to you when you contact us;
• keep the service secure and working.

We do not use it for anything else, and we do not sell it to anyone.

5. Who we share it with

We share only what is needed, only with:

• Stripe — to take payment. Stripe receives your email address and payment details. Stripe is overseas.
• Anyone you share your password with. One account covers a household, and sharing is allowed. Everyone who has the password sees everything on the account. That is by design, so choose who you tell.
• Law enforcement or a court, where we are legally required to.

We do not sell or rent your information to anybody, ever.

6. Where it is stored

RyftSpace runs on servers currently located inAustralia. We do not publish which data centre. Where we host is an operational arrangement and may change without notice, including to servers outside Australia; this page states the countries in use at any time.

Everything you put into RyftSpace is encrypted with a key that only your password unlocks, and we hold no copy of that key. That is true wherever the servers are.

The exception is payment processing: Stripe operates internationally, so payment information is handled overseas.

7. Cookies

We use one cookie, to keep you signed in. That is all. There are no advertising cookies, no analytics, and no third-party trackers anywhere on this site.

8. Your rights: getting it, correcting it, deleting it

Under the Australian Privacy Act and the GDPR you have rights ofaccess, correction, erasure,portability and restriction. Four of those are buttons in the product rather than letters you have to write:

• Access — a full report of everything we hold, on your account page, as a web page or a PDF.
• Portability — download all of it as a plain JSON file, any time. It works even when a subscription has lapsed.
• Correction — change anything in the apps, and your name, email, country and password on your account page.
• Erasure — delete everything and close the account, now or at the end of the period you have paid for.

For restriction, objection, or anything a button does not cover, write to us and we will answer within 30 days.

You can see and change everything you entered, from inside RyftSpace, at any time.

You do not need to ask us for a copy of what we hold. Sign in and open Your information on your account screen. It shows everything we hold about you, and you can download it as a PDF. It is produced from your account at the moment you ask for it, so it is always current, and there is nothing to request and no one to wait for.

You can delete everything yourself. Your account screen has an option to close your account, which deletes all of your information first and then closes the account. It also cancels your subscription. It cannot be undone, so download your information first if you want to keep a copy. Backups are overwritten in the ordinary course, so a copy may persist briefly before it is gone.

9. How long we keep things

While your account is open, what you put in stays until you delete it — it is yours, and that is your decision rather than ours. Beyond that:

• A paused subscription: everything kept, untouched. Still paused after 18 months and the account is closed and the information deleted automatically. We write to you before that happens.
• A lapsed or unpaid account: nothing is deleted. The apps close, and you can still sign in and download everything.
• Undo snapshots: deleting something inside a screen keeps a copy of that screen so you can put it back. The last 20 are kept, and they go when the account goes.
• Sign-in sessions: expire after 30 days, then deleted.
• Backups: encrypted copies, kept no longer than90 days.
• Server logs: kept 30 days.

What remains after you close your account

Closing your account deletes your information. Two small things remain, and we would rather tell you plainly than let you find out:

• Your account ID — the twelve-digit number your account had. We keep it so those digits are never issued to anyone else. An identifier that gets reused would make an old invoice or an old support message point at a stranger.
• A one-way fingerprint of your email address — not the address itself. It is a scrambled value we cannot turn back into an address, and it cannot be matched to you unless someone already knows the address to test. We keep it so that a free trial cannot be claimed twice by closing an account and opening another.

We also keep the dates the account was opened and closed.

We do not keep your email address after you close. While your account is open we hold it, because we need it to sign you in and to send you messages about your account — a receipt, a change to these terms, or a problem with a payment. When you close, the address goes and only the fingerprint stays.

Nothing else survives: not your name, not your plans, not your groups or rows or anything on them, and not your password.

10. If we are compelled by a court

What you store is encrypted with a key only your password unlocks, and we hold no copy of that key. So if a court or an agency orders us to produce what you have put into RyftSpace, we can produce only unreadable data. That is not defiance, it is arithmetic.

What we could be compelled to produce is what we actually hold: your name, email address, country, when the account was created, and your payment history at Stripe. We would tell you unless we were legally prohibited from doing so.

11. If something goes wrong

If personal information is lost, or reached by someone who should not have it, and it is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner — and, where the GDPR applies, the relevant supervisory authority within 72 hours of becoming aware.

12. Keeping it safe

We protect your information with measures appropriate to how sensitive it is, including encrypted connections and stored passwords that cannot be read back.

No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

13. Complaints

If you think we have mishandled your information, write to us at the postal address above and we will investigate.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, at oaic.gov.au.

14. Changes to this policy

If we change this policy, we will update the effective date at the top. If a change materially affects how we handle your information, we will tell you.

15. Contact

Cloudreon Pty Ltd
PO Box 963, Woden, ACT 2606, Australia