SponsorWallet privacy notice

SponsorLink.au · ABN 86 328 655 832

Last updated 5 October 2026. Applies to SponsorWallet on the web (wallet.sponsorlink.au) and the SponsorWallet Android app, which shows the same web app.

SponsorWallet is a loyalty card wallet made by SponsorLink.au ("we"), an Australian business. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. SponsorWallet has its own accounts and its own database, separate from the SponsorLink.au platform; SponsorLink.au's privacy policy covers SponsorLink itself.

What we collect, and why

• Your account: your name, email address, an optional mobile number and your password (stored only as a one-way hash). We use these to run your account, sign you in and send you service emails.
• Your cards: each card's name, store, number, colour and barcode type, and any notes and photos you add. Card numbers, notes and photos are encrypted (AES-256) before they are stored. We use them only to show your cards back to you.
• A SponsorLink club membership, if you choose to link one: which membership is linked, so the wallet can show its card. To link it we email a code to the membership's email address.
• Your location - not collected: if you allow location, when you open a card your phone remembers roughly where (up to 10 spots per card), so that card moves to the top next time you are there. Those spots are kept only on your phone, encrypted, and are never sent to us. "Forget saved places" on the cards page deletes them, and so does signing out.
• Links you tap to SponsorLink.au: we count which link was tapped, with your account, to measure how many people the wallet sends to SponsorLink. If you delete your account, the count stays without you.
• Security records: your IP address and browser type when you use the service, and records of sign-ins and account changes, to keep accounts safe. These logs are kept for 30 days.

A sign-in cookie keeps you signed in, and a copy of your cards is kept in your browser's storage on your device so an open wallet still works if the signal drops. Signing out removes that copy. SponsorWallet does not use advertising networks, ad tracking or analytics tools in the app.

Emails

We send service emails from [email protected] - confirming your email, password resets, security notices and replies to you. We send promotional emails (for example, news about local clubs on SponsorLink.au) only if you tick the box for them; you can turn them off any time on your account page.

Where it is stored and who handles it

• Google Cloud hosts the service and its database in Sydney, Australia.
• Cloudflare carries traffic to the service and protects it from attacks.
• Twilio SendGrid (United States) delivers our emails, so your email address and the email's contents pass through it.

We do not sell your personal information, and we do not share your cards or account with SponsorLink clubs or businesses. We may disclose information if the law requires it.

How long we keep it

Until you delete your account. When you do, your account, cards, notes, photos and membership links are deleted straight away; copies in our encrypted database backups are gone within 7 days, and logs within 30 days.

Your choices and rights

• See and change your details on your account page, and export your cards to a file.
• Delete your account and every card at any time.
• Ask us for the information we hold about you, or to correct it, at [email protected].

Questions and complaints

Email [email protected] (SponsorLink.au, Queensland, Australia). If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.