Privacy Policy
Last updated: 3 September 2026
Cacha respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how Cacha collects, uses, stores and protects information when you use our website, mobile application, Cacha Labs and related services (collectively, the “Services”).
Cacha is initially intended for users in Australia and New Zealand.
By accessing or using our Services, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
We may collect information that you provide directly to Cacha when you use our website, mobile application, Cacha Labs or related services.
This may include:
Account information — such as your name, email address and account details when you create or manage a Cacha account.
Gift card information — such as gift card names, card numbers, barcode information, expiry dates, notes, images and other details you choose to store in Cacha.
Cacha Labs information — such as your email address and any information or feedback you provide when registering for beta testing, early access or product updates.
Communications — information you provide when you contact Cacha for support, feedback or other enquiries.
Technical and usage information — such as device type, operating system, app or website usage, diagnostic information and similar technical information that may be collected when you use our Services.
We aim to collect only information that is reasonably necessary to provide, maintain, improve and protect Cacha and our Services.
2. How We Use Your Information
Cacha may use information we collect to:
Provide and operate the Cacha website, mobile application and related Services.
Create, authenticate and manage user accounts.
Allow users to store, organise and access their gift card information.
Provide features such as gift card expiry reminders and notifications.
Manage Cacha Labs registrations, beta testing and early-access programs.
Communicate with you about Cacha, including important service updates, support requests and product announcements.
Understand how Cacha is being used and improve our products, features and user experience.
Maintain the security, reliability and integrity of our Services.
Detect, investigate and help prevent fraud, misuse, security incidents or other harmful activity.
Comply with applicable legal and regulatory obligations.
Where required by applicable law, we will seek your consent before using your personal information for purposes that require consent.
3. Gift Card Information
Cacha allows users to store and manage information relating to gift cards issued by third-party retailers, brands and other gift card providers.
Gift card information you choose to store may include:
Gift card numbers.
Barcode or QR code information.
Card names and brands.
Expiry dates.
Notes.
Images.
Other information associated with your gift cards.
Cacha does not issue the third-party gift cards stored within the Services.
Users are responsible for ensuring they are authorised to store and use gift card information they add to Cacha.
Because gift card numbers, barcodes and PINs may provide access to stored gift-card value, users should treat this information carefully and avoid sharing it with people they do not trust.
4. How We Store and Protect Your Information
Cacha takes reasonable steps to protect personal information and gift card information entrusted to us from loss, misuse, unauthorised access, disclosure, alteration or destruction.
Cacha uses third-party technology and cloud service providers to help operate and secure our Services. This may include services provided by Google, including Firebase, for functions such as user authentication, database storage and file storage.
Information may be stored or processed using infrastructure located outside Australia or New Zealand.
Where we use third-party service providers, we take reasonable steps to select reputable providers and protect information in accordance with applicable privacy requirements.
While we take reasonable measures to protect information, no internet transmission, mobile application or electronic storage system can be guaranteed to be completely secure.
Users should also take reasonable steps to protect their Cacha account credentials, devices and gift card information.
5. Sharing Your Information
Cacha does not sell or rent your personal information.
We may share limited information with trusted third-party service providers where reasonably necessary to operate, maintain, secure or improve Cacha.
These providers may assist with services such as:
Cloud hosting.
Authentication.
Data storage.
Analytics.
Communications.
Notifications.
Technical support.
We may also disclose information where:
You have given us permission to do so.
It is necessary to provide a service or feature you have requested.
We are required or authorised to do so by law, regulation, court order or another lawful request.
We reasonably believe disclosure is necessary to protect Cacha, our users or others from fraud, security threats, misuse or harm.
Cacha undergoes a business transaction such as a merger, acquisition, restructuring or transfer of assets, subject to applicable privacy requirements.
Third-party service providers are responsible for handling information in accordance with their own legal obligations and applicable privacy requirements.
6. Third-Party Retailers and Gift Card Providers
Cacha is not the issuer of third-party gift cards and is not affiliated with, endorsed by or responsible for a retailer or gift card provider unless expressly stated otherwise.
The collection and use of information by a retailer or gift card provider when you purchase, manage or redeem a gift card is governed by that provider's own privacy policy and terms.
Cacha is not responsible for the privacy practices of third-party retailers or gift card providers.
Retailer names, trademarks and logos remain the property of their respective owners.
7. Cookies, Analytics and Website Data
The Cacha website may use cookies and similar technologies to help the website operate, understand how visitors use the site and improve the user experience.
These technologies may collect information such as:
Browser type.
Device information.
Pages visited.
Approximate location based on IP address.
Interactions with the website.
Cacha may use analytics and website services provided by third parties, including services made available through our website platform and other technology providers.
Where required by applicable law, we will request consent before using non-essential cookies or similar technologies.
You may be able to manage or disable cookies through your browser settings. Disabling certain cookies may affect how parts of the website function.
8. Cacha Labs and Communications
If you register for Cacha Labs, beta testing, early access, product updates or other Cacha communications, we may use the contact information you provide to communicate with you about Cacha.
These communications may include:
Cacha Labs invitations and beta-testing opportunities.
Early access to new features.
Product and development updates.
Launch announcements and important Cacha news.
Requests for feedback about Cacha and upcoming features.
You can unsubscribe from optional marketing communications at any time by using the unsubscribe option provided in our emails or by contacting Cacha.
We may still send essential service-related communications where necessary, such as account, security, privacy or important service notices.
Participation in Cacha Labs or beta testing may also be subject to additional terms provided to participants where appropriate.
9. Your Privacy Rights
Depending on where you are located and applicable privacy laws, you may have rights regarding the personal information Cacha holds about you.
You may contact Cacha to:
Request access to personal information we hold about you.
Ask us to correct information that is inaccurate or out of date.
Request deletion of your personal information where applicable.
Ask questions about how your information is collected, used or stored.
Withdraw consent where our processing of your information relies on your consent.
Make a privacy-related complaint or enquiry.
Cacha may need to verify your identity before completing certain privacy or data-deletion requests.
Nothing in this Privacy Policy is intended to limit privacy rights that cannot lawfully be excluded.
10. Account and Data Deletion
When a Cacha account is deleted, we will take reasonable steps to delete or de-identify personal information associated with the account where required and appropriate.
This is subject to information that we may be required or permitted to retain for legal, security, fraud-prevention or legitimate operational purposes.
Some information may remain temporarily in secure backups or systems before being deleted through our normal data-retention processes.
Before deleting an account, users should ensure they have retained any gift card information they may require.
To make a privacy or data-deletion request, please contact Cacha using the contact details at the end of this Privacy Policy.
11. Data Retention
Cacha retains personal information only for as long as reasonably necessary to provide our Services, fulfil the purposes described in this Privacy Policy, meet legal obligations, resolve disputes, maintain security and prevent fraud or misuse.
How long we retain information may depend on the type of information, why it was collected and whether we are required or permitted to retain it under applicable law.
Information associated with an active Cacha account may generally be retained while the account remains active or as necessary to provide Cacha Services.
If you delete your account or request deletion of your personal information, Cacha will take reasonable steps to delete or de-identify relevant information where appropriate, subject to applicable legal, security and operational requirements.
Information contained in backups may remain for a limited period until those backups are overwritten or deleted through our normal retention processes.
12. International Data Transfers
Cacha may use service providers that store or process information in countries outside Australia or New Zealand.
As a result, personal information may be transferred to, stored in or processed in other countries where Cacha or our service providers operate.
Privacy and data-protection laws in those countries may differ from the laws that apply in Australia or New Zealand.
Where required by applicable law, Cacha will take reasonable steps to ensure that personal information transferred or disclosed overseas is handled appropriately and protected in accordance with applicable privacy requirements.
13. Children's Privacy
Cacha is not specifically designed or directed toward young children.
If you are under the age at which you can legally consent to the collection and use of your personal information in your location, you should use Cacha only with the involvement and permission of a parent or legal guardian where required by applicable law.
We do not knowingly seek to collect personal information from children in circumstances where parental or guardian consent is legally required and has not been provided.
If a parent or legal guardian believes that a child has provided personal information to Cacha inappropriately, they may contact us. We will take reasonable steps to investigate and, where appropriate, delete the information.
14. Security Incidents
Cacha takes the security of personal and gift card information seriously.
If we become aware of a security incident involving personal information, we will investigate the incident and take reasonable steps to contain and address it.
Where applicable law requires us to notify affected individuals or a privacy regulator of an eligible data breach or similar incident, we will take appropriate steps to meet those obligations.
Users should contact Cacha promptly if they believe their account or information has been compromised.
15. External Links
The Cacha website or application may contain links to websites or services operated by third parties.
Cacha does not control the privacy practices of these third parties.
We encourage you to review the privacy policies and terms of third-party websites and services before providing them with personal information.
16. Changes to This Privacy Policy
Cacha may update this Privacy Policy from time to time as our Services, features, technology or legal obligations change.
When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.
If we make significant changes that materially affect how we collect, use or protect personal information, we may provide additional notice through the Cacha website, mobile application, email or another appropriate method.
We encourage users to review this Privacy Policy periodically to stay informed about how Cacha handles personal information.
17. Privacy Enquiries and Complaints
If you have a question, concern or complaint about how Cacha handles your personal information, please contact us using the details below.
We will take reasonable steps to investigate and respond to privacy enquiries and complaints within an appropriate timeframe.
If you are not satisfied with our response, you may have the right to contact the relevant privacy regulator in your country.
For users in Australia, this may include the Office of the Australian Information Commissioner (OAIC).
For users in New Zealand, this may include the Office of the Privacy Commissioner.
18. Contact Us
If you have questions about this Privacy Policy, your personal information or a privacy-related request, please contact:
Cacha
Email: cacha.app@outlook.com
Website: getcacha.com
Australia
For privacy or data-deletion requests, please include enough information for us to identify your account or request.
Please do not send gift card numbers, PINs, barcodes or other sensitive gift card information by email unless specifically requested through a secure Cacha process.