Privacy policy

1. The summary

IO CORP PTY LTD, trading as Ahead Money ("Ahead", "we", "us"), provides personal finance forecasting software. We collect only what we need to run the service. We do not sell your data, we do not advertise to you, and we never share your bank credentials.

2. What we collect

• Account information. Your name and email (from your Apple or Google sign-in) and optional profile preferences.
• Sign-in (Apple or Google). You create and access your account with Sign in with Apple or Sign in with Google. We receive a unique sign-in identifier and, on your first sign-in, your name and email address (which may be a private relay address if you chose to hide it). We use these only to create and secure your account. We never post to those accounts or read anything else from them.
• Banking data. Balances and transactions collected by Fiskil, an accredited CDR principal, and disclosed to us as its CDR Representative, read-only.
• Billing data. Subscription status from the Apple App Store / Google Play (via RevenueCat). We never see your card details.
• Usage analytics. Privacy respecting product analytics to improve the service.
• Support correspondence. Emails you send us, so we can help and keep a record of the conversation.

3. How we use it

To project your cashflow, detect recurring patterns, compute scenarios and estimated tax figures, and operate the service. That's it. We do not enrich, resell, license, or syndicate your data to third parties for marketing or analytics. When you use the what-if chat, a summary of your financial position is processed by an AI model hosted on AWS Bedrock in Australia; it is not used to train any model and is not retained by the model provider.

4. How we protect it

Data is encrypted in transit and at rest. Banking tokens are scoped, rotated, and stored in dedicated secure infrastructure. Access is role-based and audited. Tenant data is strictly isolated.

5. Your rights

You can access, export, correct, or delete your data at any time from settings, or by emailing privacy@getahead.money. Disconnecting a bank revokes our CDR consent immediately.

6. How long we keep it

We keep your data while your account is active. When you delete your account, your personal and banking data is deleted from live systems promptly and from encrypted backups on their rotation cycle. CDR data that is no longer needed for the service you asked for is deleted in line with the Consumer Data Right rules on redundant data. We retain the records we are legally required to keep (for example, records of your acceptance of our terms).

7. The rules we operate under

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Banking data is collected under the Consumer Data Right: Ahead is a CDR Representative of Fiskil Pty Ltd, an accredited data recipient, and CDR data is handled under Fiskil's CDR policy. We do not disclose your personal information to overseas recipients; data is stored in Australia (Sydney).

8. Complaints

If you have a privacy concern, email privacy@getahead.money and we will respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au); complaints about CDR data can also be made to Fiskil or the OAIC.

9. Contact

Questions? Email privacy@getahead.money.