Privacy Policy
Effective date: February 23, 2026
This Privacy Policy applies to the Nangaroo app and the Nangaroo website (https://nangaroo.com.au), operated by Nangaroo Pty Ltd (ABN 14 661 953 742).
Nangaroo is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what personal information we collect, how we use it, and your rights regarding that information.
Information We Collect
Account Information
- Mobile phone number (used for account creation and SMS verification)
- First name, last name, and email address
Delivery Information
- Saved delivery addresses, including street address, city, state, and postcode
- Geographic coordinates (latitude and longitude) derived from your address via Google Places, used to determine delivery availability and fees
- Delivery preferences and instructions
Age Verification Information
If you use the “leave in safe place” delivery option, you may be required to upload a photo of your ID and a selfie. These images are reviewed by Nangaroo staff and deleted once verification is complete. Only the outcome (verified or not verified) is retained on your account.
Payment Information
- Payment method type (e.g., card brand, last four digits, expiry date, PayPal email)
- Payment method identifiers issued by our payment processors (Stripe and PayPal)
- Full card numbers and sensitive payment details are handled entirely by Stripe and are never stored on Nangaroo’s servers
Order Information
- Order history, including items, quantities, prices, delivery addresses, and timestamps
- Promo codes applied and credit used
- Order instructions
Communications
- Messages sent and received through in-app support chat and driver chat
- Chat messages are periodically deleted and are not retained permanently
Device & Technical Information
- Push notification tokens and device platform (iOS or Android), used to deliver notifications
- App usage data necessary for the functioning of the service
Marketing Preferences
- Your SMS and email marketing subscription preferences
Loyalty & Referral Data
- Loyalty points, tier status, and points history
- Referral code and referral credit balance
How We Use Your Information
We use your personal information to:
- Create and manage your account
- Process and deliver your orders
- Communicate with you about your orders (status updates, driver messages)
- Verify your age for delivery purposes
- Operate the loyalty program and referral program
- Apply promotional codes and account credits
- Provide customer support
- Send marketing communications (where you have not opted out)
- Comply with legal and regulatory obligations
Marketing Communications
When you create an account, you are subscribed to SMS and email marketing communications by default. You can opt out at any time through the Marketing Preferences section in your account settings, or by contacting us at support@nangaroo.com.au. We comply with the Spam Act 2003 (Cth) and all marketing messages include an option to unsubscribe.
Third-Party Services
We share your information with the following third-party services as necessary to operate the app:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing (cards, Apple Pay, Google Pay, BNPL) | Payment method details, transaction amounts |
| PayPal | Payment processing | PayPal account details, transaction amounts |
| Google Places API | Address autocomplete and geocoding | Address search queries, delivery addresses |
| Google Static Maps API | Displaying delivery location maps | Delivery address coordinates |
| Expo Push Notification Service | Delivering push notifications | Device push tokens, notification content |
These services have their own privacy policies governing how they handle your data. We do not sell your personal information to third parties.
Push Notifications
With your permission, we send push notifications for order updates, driver messages, support replies, deals, and marketing. You can manage notification permissions through your device settings at any time.
Data Security
We take reasonable steps to protect your personal information, including:
- Secure token storage on your device
- Encrypted communications (HTTPS) between the app and our servers
- PCI-compliant payment processing through Stripe
- Restricted access to personal data on a need-to-know basis
Data Retention
- Account data and order history are retained for as long as your account is active.
- Age verification images are deleted once the review is complete.
- Chat messages are periodically deleted and are not retained permanently.
- Anonymised data may be retained for legal, tax, or analytical purposes after account deletion.
Account Deletion
You can delete your account at any time through the Profile section in the app. Upon deletion, your personal data is permanently removed, except where anonymised records are retained for legal or tax purposes. Your phone number will be permanently blocked from future registration.
Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access your personal information held by us
- Correct inaccurate or outdated information (via your account settings or by contacting us)
- Request deletion of your personal information (via the app or by contacting us)
- Opt out of marketing communications at any time
To exercise any of these rights, contact us at support@nangaroo.com.au.
Children’s Privacy
Nangaroo does not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.
Changes to This Privacy Policy
Nangaroo reserves the right to amend this Privacy Policy at any time. If we make material changes, we will notify you through the app or by email. Continued use of the app after changes are published constitutes acceptance of the updated policy.
Contact
If you have any questions about this Privacy Policy, please contact us:
Email: support@nangaroo.com.au