This policy explains what personal information CubeBloom collects, why we collect it, who we give it to, and what you can do about it. It's written to meet the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). Pick the question you came with — every answer opens on this page.
Before this goes liveThis is a drafted starting point, not legal advice. Fill in every highlighted field, check it still matches what your build actually does, and have it reviewed before launch.
Small businesses under $3 million annual turnover are currently outside most of the Privacy Act, but that exemption is being wound back and holding a compliant policy is the sensible default either way.
16 articles in 6 groups
We don't collect sensitive information as the Privacy Act defines it (health, racial or ethnic origin, political opinions, religion, sexual orientation, criminal record, biometric templates). Please don't send us any.
Directly from you — when you create an account, subscribe, time a solve, import a csTimer history, or ask the AI coach a question. Technical data is collected automatically when your browser contacts our servers.
No. We do not sell your personal information, and we do not use your solve data to train AI models.
Traffic is encrypted in transit. API keys stay on our server and are never exposed to the browser. Access to systems holding personal information is limited to people who need it. No system is perfectly secure, so we can't guarantee it — but we take reasonable steps, and we destroy or de-identify personal information when we no longer need it.
If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Some of the providers above are located outside Australia — principally in the United States. When you use AI coaching, your prompt and the solve summary attached to it are sent overseas to be processed.
We take reasonable steps to ensure overseas recipients handle your information consistently with the APPs, including by contract. You should be aware that once information is overseas, Australian privacy law may not be enforceable against that recipient in the same way. If you'd rather your solve data wasn't sent overseas, don't use the AI coach — every other feature works without it.
CubeBloom uses your browser's local storage to keep your solve history, drill progress and settings on your device. That is how the app works offline and why we don't need a server copy. Clearing your browser data will erase it, and we can't recover it — export regularly if it matters to you.
We use only the cookies needed to keep you signed in and to run the site. [If you add analytics or advertising cookies, list them here and add a consent banner.]
You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it's wrong. Email [privacy@yourdomain.com]. We'll respond within 30 days. There's no charge for making a request.
Most of your solve data isn't held by us at all — you can export or delete it from within the app at any time.
To close your account and have us delete the personal information we hold, email [privacy@yourdomain.com]. We may need to keep some records (such as tax invoices) for as long as the law requires.
We only send marketing email to people who asked for it — for example by entering their address in the sign-up field on our home page. Under the Spam Act 2003 (Cth) every message we send will identify us and include a working unsubscribe link.
Unsubscribing takes one click. We won't make you log in, create an account, or give us extra information to do it, and we'll action the request within 5 business days. Service emails — receipts, renewal notices, security alerts — will still be sent, because they're part of the service you bought.
We'll post any changes on this page and update the date at the top. If a change materially affects how we handle your information, we'll email you before it takes effect.
Speedcubing has a lot of young players. If you're under 18, get a parent or guardian's permission before you create an account. If you believe a child has given us personal information without that permission, contact us and we'll delete it.
If you think we've mishandled your personal information, email [privacy@yourdomain.com] with the details. We'll acknowledge within 5 business days and aim to resolve it within 30 days.
If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
[Legal entity name], ABN [ABN]
[Registered business address, Australia]
[privacy@yourdomain.com]