Lodgya is committed to protecting your privacy. This Policy explains what information we collect, how we use it, and your rights.
Last updated: 7 October 2026 · Version 1.4
Lodgya is an Australian software product. References to "Lodgya", "we", "us", or "our" in this Policy refer to the operator of the Lodgya platform. This Policy applies to all Lodgya products including Lodgya Property, Lodgya Personal, Lodgya Business, and Lodgya Vehicle Logbook.
This Policy is written in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
If you create a Lodgya account, we collect your email address and a hashed password. We do not store your password in plain text. We never collect your Tax File Number (TFN), date of birth, home address, or phone number.
If you subscribe to a paid plan, payment is processed by our third-party payment processor (Stripe). We receive a tokenised payment confirmation and your subscription status. We do not receive or store your full card number, CVV, or bank account details.
If you sign up through a partner or member offer, we collect the partner you came from and the identifier you enter to claim the offer — for example a membership number, or a work email used to confirm eligibility. This is stored with your account and used only to apply and administer the discount. Providing false information to obtain a discount may result in the discount being removed.
By default, all transaction data, property records, and receipt images are stored on your device — in your browser's storage or in a file you save to your chosen location. Unless you turn on cloud backup, this data is not transmitted to, or stored on, Lodgya servers.
Cloud backup is off unless you turn it on. If you turn it on:
To warn you if your records go missing from a device (for example, after browser data is cleared), we store with your account the number of entries in each tracker, the general type of device and browser you use (for example, "Android · Chrome"), and when that was last updated. This contains no financial details.
If you use Lodgya Vehicle Logbook, your vehicles, trips, odometer readings, and saved places (such as addresses you label "Home" or "Office") are stored on your device in the same way as your other records. They are not sent to any mapping service, they are only sent to Lodgya servers as part of your encrypted cloud backup if you turn it on, and Lodgya does not track your device's location.
We may collect anonymised usage data (such as page views and feature usage) to improve the Service. This data contains no personally identifiable information and is not linked to your account.
If you accept marketing cookies, we use the Meta Pixel and Meta Conversions API to measure how well our Facebook and Instagram ads work. Meta receives only: that a page was viewed or a free calculator was opened, that an account was created, that a checkout was started, and that a subscription was purchased (with the plan name, price and currency). To match these to ad clicks, we send Meta a one-way encrypted (SHA-256 hashed) form of your email address and account ID, your IP address, browser type and Meta's own cookie identifiers. We never send your financial records, transactions, amounts, receipts, deductions, vehicle logbook or anything else you enter in Lodgya.
When you first arrive from a link, we also record which campaign brought you (such as the ad source and campaign name) and save it with your account when you sign up, so we can see which campaigns work. This stays with us and is not shared with Meta.
We use your personal data only for the following purposes:
We will never sell your data, and we will never share your financial records with any third party without your explicit consent. If you accept marketing cookies, we share limited, hashed account information with Meta only to measure and improve our advertising, as described in section 2. You can withdraw this at any time (see section 8).
We implement appropriate technical and organisational measures to protect your account data, including:
Because your financial records are stored on your device, their security depends on the security of your device and browser. If you turn on cloud backup, your records are encrypted on your device before upload, our servers hold only encrypted data, and every request to the backup service is checked against your sign-in so only you can reach your backups. We strongly recommend turning on cloud backup or keeping backup files in secure locations.
Lodgya uses the following third-party services, each subject to their own privacy policies:
Overseas disclosure: Memberstack, Stripe, Google and (if you accept marketing cookies) Meta process and store data on servers located in the United States. This means some of your personal information — such as your account email, partner details, and subscription status — is disclosed to and held by these providers overseas. If you turn on cloud backup, your encrypted backups are held by our hosting provider in Singapore; because they are encrypted on your device with a passphrase we do not have, neither we nor our hosting provider can read them. By using Lodgya you consent to this overseas disclosure. Each provider is bound by its own privacy commitments and applicable data-protection obligations.
We do not embed advertising networks or data brokers in Lodgya products. The Meta Pixel loads only after you accept marketing cookies: on our public website and sign-up pages, and inside the app only to confirm a completed subscription. It never reads your records.
We retain your account data for as long as your account exists. If you delete your account, we will delete your personal information within 30 days, except where we are required by law to retain it (for example, billing records may be retained for up to 7 years for tax purposes).
Your financial transaction data is stored on your device and is deleted when you use the Delete all data function in the Billing page, or when you clear your browser storage.
If you turn on cloud backup, we keep your most recent encrypted backups of each tracker, weekly copies for about five weeks, and always the most recent backup that contains entries (so a series of empty backups can never replace your last good one); other copies are deleted automatically. Turning off cloud backup permanently deletes all of them straight away. If you delete your account, we delete your cloud backups within 30 days.
Under the Australian Privacy Act and the Australian Privacy Principles, you have the right to:
To exercise any of these rights, contact us via the Contact page. We will respond within 30 days.
Lodgya uses essential cookies that the Service needs to work (such as keeping you logged in), and Google Analytics cookies to measure anonymised page views and feature usage. With your permission, we also use Meta marketing cookies to measure our Facebook and Instagram ads. These load only after you click "Accept" on our cookie banner, and are never used inside your tax records. You can change your choice at any time using Cookie settings below, or by clearing your browser data. Declining does not affect how Lodgya works.
Lodgya is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the date at the top of this page and, where the change affects how we handle your financial data, by email notification. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.
For privacy inquiries, data access requests, or complaints, please contact us via the Contact page. You may also contact the Office of the Australian Information Commissioner (OAIC) at 1300 363 992 or oaic.gov.au.