Covers oikosai.com.au, the OikosAi app and aq.oikosai.com.au (the household savings score quiz). Last updated: 20 Oct 2026
We built OikosAi to help households save, not to profit from their data. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). OikosAi is for adults aged 18 and over.
1. What we collect
When you ask for access or sign up: your first name, email address, suburb, why you're joining, how you heard about us, and whether you want updates.
Your profile (optional): postcode, suburb, household size and whether you own or rent.
When you use the app:
searches, comparisons, baskets and shopping lists;
Energy: postcode, meter type, solar and the plan details you enter;
Fuel: postcode, fuel type and any vehicle details you choose to add;
your credit balance and how credits are used.
Files you upload: receipts, bills and product photos. An energy bill can show your name, address and meter numbers. We use what's needed to give you the result.
Feedback you send: your message, the screen, and basic device and app details.
The quiz: postcode, age bracket, your answers and score; your first name and email only if you choose to give them.
Technical data: sign-in records, a scrambled (hashed) form of your IP address, device and browser type, and pages visited.
Savings emails (if you sign up): your email address, which emails you chose, when and on which page you signed up, the wording you agreed to, which savings headline you saw, any campaign tag in the link you came from (such as "facebook"), and a scrambled (hashed) form of your IP address to stop abuse.
Sign-up attempts: each time the savings-email form is sent, a scrambled (hashed) form of your connection's IP address, to stop abuse. We delete these after 24 hours.
We never ask for your bank account, card numbers, income or passwords to other services. OikosAi has no bank connection.
2. Why we use it
To run OikosAi: sign you in, compare prices, read your uploads and show your savings.
To reply to you, fix errors and improve the app.
To build anonymous totals, such as suburb averages, only once enough people have taken part.
To send emails about your account, and savings emails and updates only if you said yes; every one of those has an unsubscribe link.
3. Who we share it with
We never sell your information, and never share it with supermarkets, energy retailers, fuel companies, insurers or advertisers. We use these service providers to run OikosAi:
Provider
What for
Where
Supabase
Database and sign-in
Sydney, Australia
Cloudflare
Website hosting, security, email forwarding
Worldwide network
Google (Gemini AI)
Reading uploads, matching products and some summaries
May be outside Australia
Google (Places)
Restaurant details in Dining
May be outside Australia
Resend
Sending emails
United States
Google (Gmail)
Receiving emails sent to our @oikosai.com.au addresses
May be outside Australia
Analytics (Google Analytics, Cloudflare Web Analytics)
Counting visits to our websites and app
May be outside Australia
These providers may store or process information outside Australia, including in the United States. We choose providers with strong security and share only what each needs. We may also disclose information when the law requires it.
4. The quiz activity feed
If you give your first name and postcode in the quiz, your first name, postcode and score may show in the live activity feed on the quiz site. We'll show it only if you agree, and you can ask us to remove it at any time.
5. Storage, security and how long we keep it
Our database is in Sydney, with row-level security and encryption at rest.
We keep account information, including your uploads, while your account is open, and delete or de-identify it within 12 months after you close it.
Quiz data is kept for 24 months, then de-identified or deleted.
Savings emails: we keep your address while you're subscribed. If you unsubscribe, we keep your address and the date only so we never email you again by mistake. If you never confirm, we delete the request after 30 days.
No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner.
6. Cookies and browser storage
We use browser storage to keep you signed in and remember your settings. Analytics tools count visits to our websites and app; Google Analytics uses cookies to do this. You can block or clear cookies in your browser settings. You can clear browser storage at any time; you'll be signed out.
7. Your choices and rights
Access or correct your information, or ask us to delete it: email hello@oikosai.com.au with "Privacy request" in the subject.
Stop marketing emails: use the unsubscribe link, or email us.
Use OikosAi with less: profile details and uploads are optional, though some features need them.
We reply within 30 days.
8. Complaints
Email hello@oikosai.com.au first. If you're not happy with our reply, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
9. Changes
We'll update this policy when our practices change, and show the date at the top.