Privacy Policy

Last updated: 12 May 2026

Loaded Goblin Innovation Pty Ltd ("Loaded Goblin", "we", "us", or "our") builds and operates AI-powered software products including AI Agents, Flipcards, and Allied Health Software (together, the "Products"), and the website at loadedgoblininnovation.com (the "Site").

This Privacy Policy explains what personal information we collect, why we collect it, how we use and store it, who we share it with, and the rights you have over it. We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

1.1 Information you give us directly

• Account information — name, email address, password (stored as a salted hash), and any optional profile fields you fill in.
• Content you create or upload — chat messages with AI agents, flashcards, notes, files attached to chats, calendar entries, and any other content you submit through the Products.
• Communication with us — emails, support tickets, and feedback you send us.
• Payment information — when paid plans are available, billing details handled by our payment processor (we do not store full card numbers ourselves).

1.2 Information we collect automatically

• Usage data — features you use, pages you view, buttons you tap, time and duration of sessions, error logs, device type, operating system, and approximate location derived from IP address.
• Device identifiers — a unique application install ID used to keep your account in sync across devices.
• Cookies and similar technologies — the Site uses essential cookies to keep you signed in and remember your preferences, and may use analytics cookies to help us improve the Site. You can disable cookies in your browser settings.

1.3 Information from third parties (only with your permission)

When you choose to connect a third-party integration (e.g. Gmail, Google Calendar, Microsoft Outlook, or any MCP server you add), we receive the OAuth tokens and the data those services return when our agents act on your behalf. We only request the minimum scopes needed for the feature you enabled, and you can disconnect any integration at any time from Settings → Integrations.

2. How we use your information

We use your personal information to:

• provide, operate, and improve the Products and the Site;
• let your AI agents act on your behalf across the integrations you have connected;
• maintain a memory of relevant facts and preferences so the agents become more useful to you over time (you can review and delete this memory at any time from Settings → Memory);
• communicate with you about your account, security, and product updates;
• diagnose, prevent, and respond to technical problems and abuse;
• comply with our legal obligations.

3. Who we share information with

We do not sell your personal information. We share it only with the service providers strictly required to operate the Products, and only to the extent necessary for them to perform their function on our behalf:

• Supabase (authentication, database, file storage) — your account record, encrypted credentials, and content you store in the Products.
• Anthropic, OpenAI, Google AI, and other large-language-model providers — the messages, instructions, and context your AI agents need to send to a chosen model in order to respond to you. You choose which model your agents use; you can also bring your own API key.
• Mem0 (long-term agent memory) — facts and conversation summaries your agents have learned about you, so they persist across sessions.
• Microsoft Graph and Google APIs — only the data needed to perform the action you authorised through a connected integration.
• Sentry (crash and error reporting) — diagnostic data when the Products encounter an unexpected error.
• Payment processor — for paid plans, when those become available.
• Authorities — only when we are legally required to disclose information (e.g. a valid court order).

4. Where your information is stored

We host the Products on cloud infrastructure operated by reputable providers in Australia and the United States. Where we transfer information overseas, we take reasonable steps to ensure that the receiving party handles it consistently with the Australian Privacy Principles.

5. How long we keep your information

We keep your personal information for as long as you have an active account, plus a reasonable period afterwards for backups, dispute resolution, and to comply with our legal obligations. You can ask us to delete your data at any time (see Section 7). Some information may be retained in anonymised form for analytics or security purposes.

6. How we secure your information

We use industry-standard safeguards including encryption in transit (TLS) and at rest, role-based access controls, audit logs, and per-user data scoping. No system is perfectly secure, but we work continuously to protect your information from unauthorised access, alteration, disclosure, or destruction.

7. Your rights

Under Australian privacy law you have the right to:

• access the personal information we hold about you;
• correct any information that is inaccurate, out of date, or incomplete;
• request deletion of your personal information (subject to legal retention requirements);
• withdraw your consent for any optional data processing at any time;
• complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have mishandled your information.

To exercise any of these rights, email us at thegoblin@loadedgoblininnovation.com and we will respond within 30 days.

8. Children

The Products are not directed at children under 16. We do not knowingly collect personal information from children under 16 without parental or guardian consent. If you believe we have collected information from a child without proper consent, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date at the top of this page and, for material changes, notify you by email or through the Products. The current version is always available at loadedgoblininnovation.com/privacy.html.

10. How to contact us

For any privacy questions, requests, or concerns:

Loaded Goblin Innovation Pty Ltd
Email: thegoblin@loadedgoblininnovation.com
Web: loadedgoblininnovation.com