Privacy policy

Last updated 15 October 2026

Short version: your financial numbers are yours. Numbat is designed so we never see them. We only collect what we need to sell you Numbat, answer your messages and (if you ask) email you.

Who we are

Numbat is run by Jordan Neenan trading as Numbat Tax, a sole trader in Brisbane, Queensland (ABN 33 273 586 545). "We" and "us" in this policy means Numbat Tax. You can reach us at [email protected] or through our contact form.

Your tax and business numbers

• The Numbat app is local-first. The invoices, expenses, car trips, receipt photos and settings you enter are stored on your phone or computer, in your browser's storage. They aren't sent to us or anyone else, the app works offline, and there's no account or bank connection. Because we don't hold a copy, we can't recover your data if you clear your browser or lose your device. Use the app's export to keep your own backup.
• The spreadsheet and Notion template are files and pages you keep in your own Excel, Google, Apple or Notion account. We can't see them. Those services have their own privacy policies.
• The free calculator on our website runs entirely in your browser. What you type isn't sent or stored.

What we do collect, and why

• When you buy: our payment provider, Stripe, handles checkout through its Link service as the merchant of record (the legal seller). It collects your payment details, works out any tax and sends your receipt. It shares your name, email address, country and what you bought with us, so we can deliver your purchase, send updates for it and handle refunds. We email your download links from our Gmail account. We never see your card details.
• When you use the contact form: your name, email address, the topic and your message, plus your IP address (used only to stop spam, by limiting how many messages one person can send). Messages are stored on our server in Brisbane and delivered to our Gmail inbox so we can reply.
• When you email us: whatever you send. Email to @getnumbat.com is forwarded by Cloudflare to our Gmail inbox.
• When you join the mailing list: your email address, stored with our email service, Buttondown, so we can tell you about early access, new rates and new editions. Every email has an unsubscribe link. Buyers only get marketing emails if they've opted in.
• When you visit the site or app: like most websites, our hosting (Cloudflare and our own server) keeps short-lived technical logs, such as IP address, browser and pages requested, for security and to keep things running. We don't use these to identify or profile you.

We don't sell your information or use it for advertising.

Who we share it with

Only the services we need to run Numbat. Some of them store data outside Australia, mainly in the United States:

• Stripe, including its Link checkout (payments, tax and receipts)
• Buttondown (mailing list)
• Google, through Gmail (our inbox) and Google Fonts (the website's typeface)
• Cloudflare (website delivery, security and email forwarding)

We choose established providers with their own privacy and security commitments, and we share only what each one needs. We'll also disclose information if the law requires it.

Cookies

Our website and app don't use advertising, analytics or tracking cookies. Cloudflare may set strictly necessary security cookies to protect the site from abuse, and the checkout page (run by Stripe) uses its own cookies to process your payment. If we ever add privacy-friendly analytics, we'll list it here first.

How long we keep it

We keep purchase records for as long as Australian tax law requires (generally five years). We keep contact messages while we need them to help you, and mailing-list addresses until you unsubscribe. Ask us and we'll delete anything we're not required to keep.

Your rights

We handle personal information in line with the Australian Privacy Principles. You can ask to see or correct what we hold about you, ask us to delete it, or make a complaint, by contacting us at [email protected]. We'll reply within 30 days. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner.

Changes

If this policy changes, we'll update it here and change the date at the top. If a change is significant, we'll tell customers by email.