Privacy Policy
Last updated: 14 October 2026Effective: 14 October 2026
Ivarlo keeps what two phones need to share one learner's course, keeps mood ratings and prep answers on the phone they were entered on, and sells nothing to anybody.
1.Who we are
Ivarlo is a business name registered to Jarod Meijer, a sole trader (ABN 33 159 532 314), of Level 1, 125 St Georges Terrace, Perth WA 6000 ("Ivarlo", "we", "us"). You can reach us at hello@ivarlo.com.au.
We intend to move the business to a company, Ivarlo Pty Ltd, before or when the app launches. When that happens the company will take over this policy and the information we hold, keep to the same promises, and we will update this page and tell you.
This policy covers the Ivarlo app on iPhone and Android, the website at ivarlo.com.au, and the emails we send. We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).
2.The short version
- Two phones, one course. A supervisor's phone and a learner's phone share that learner's course, hours, stamps and drive plan. That is most of what we store.
- Some things never leave the phone. Mood ratings and prep answers stay on the phone they were entered on. Not the other seat, not us, nobody.
- Location stays on your phone. We read it once to work out sunset, so night hours count, then drop it.
- No ads, no selling. We do not sell personal information. The app has no advertising and no analytics trackers. The website sets no tracking cookies; our newsletter records opens and clicks, explained in section 15.
- A parent agrees for a learner under 18. The supervisor who sets up the account accepts this policy for the learner.
- You can download it or delete it, in the app. Settings has both, and deleting takes everything on our servers.
- A few trusted providers help us run it. Some of them are overseas. Section 10 names each one.
3.What we collect
We collect only what the app needs to run a learner's course across two phones. Most of it you type in yourself.
| Information | Why we need it | Where it is kept |
|---|---|---|
| Email address | To sign you in with a one-time code and to tell you about your account | Our servers in Sydney |
| Password and two-step code (both optional) | A second way to sign in, and extra protection. Passwords are stored only as a one-way hash | Our servers in Sydney |
| Names typed into the app (supervisors and learners) | So each phone knows who is who and whose course it is showing | Our servers in Sydney |
| Learner details: manual or automatic car, age band, where they are up to, and hours driven before Ivarlo (as you tell us) | To set the course, the hours figures and the starting point | Our servers in Sydney |
| Course progress: lessons done, skill stamps, checkpoint results, Revs, and the drive log (date, times, minutes, night minutes, who supervised) | So both phones show the same course, and so the logbook adds up | Our servers in Sydney |
| Drive plan: free times, booked drives, weekly goals, and notices between the two seats | To book drives and tell the other phone about them | Our servers in Sydney |
| Purchase records: what was bought, when, and the store's transaction reference | To unlock the course on every phone on the account and restore it after a reinstall | Our servers in Sydney, RevenueCat, and Apple or Google |
| Resit cover claim: the first-attempt result, the resit receipt, the booking reference, and a PayID or BSB and account number | To check and pay a resit cover claim | Private storage on our servers in Sydney, or our email inbox if you claim by email. Bank details are deleted once the claim is paid |
| Push address (a token for your phone), notification settings and quiet hours | To send notifications you have allowed, and not at night | Token on our servers; settings on your phone |
| Mood ratings and prep answers | To tune the next lesson on that phone | Your phone only |
| Location | To work out sunset where you are, so night hours are counted | Your phone only, and dropped straight away |
| Photos or files you choose for a claim | To attach to a resit cover claim | Only the file you pick is uploaded |
| Messages you send us | To answer you | Our email inbox |
| Technical logs: IP address, sign-in times, errors | To keep accounts secure and fix faults | Our hosting providers, for a short time |
From our website and newsletter: if you join our mailing list or contact us through ivarlo.com.au, we collect the email address and any name you give us, and when and where you signed up. When you visit the website, our host keeps standard web logs: your IP address, browser and the pages you view. Section 15 explains both.
What we do not ask for: a date of birth, a home address, a phone number, a licence or permit number, or your Transport WA login. We never see your card details; Apple or Google handle payment.
You do not have to give us anything. Without an email address, though, two phones cannot share a course and the course cannot be unlocked.
Information about other people. You can use a first name or a nickname for anyone on the account. If you add someone else, such as another supervisor or a learner, let them know. For a learner under 18, you must be their parent or guardian, or have that person's permission.
4.What never leaves your phone
Three things are kept on the phone they were entered on and are never sent to us or to the other seat:
- Mood ratings. How a drive felt, as the supervisor or the learner rated it. Ivarlo uses both to shape the next lesson and shows neither to the other person.
- Prep answers. What each person answered in their half of a prep pack.
- Your location. Read once, on the phone, to find sunset. It is turned into a time and then dropped. If you say no, the app counts night from 6pm instead.
Our servers are set up to refuse these even if a phone tried to send them. If you delete the app or reset the phone, they are gone.
5.Who on your account sees what
An account is a family: one or more supervisors and one or more learners. Each learner's phone belongs to that learner alone.
| Information | Supervisors on the account | That learner | Another learner on the account |
|---|---|---|---|
| The learner's course, hours, stamps, Revs and drive log | Yes | Yes | No |
| The learner's booked drives and free times | Yes | Yes | No |
| Names of the people on the account | Everyone | The adults and themselves | The adults and themselves |
| Mood ratings and prep answers | Only their own | Only their own | No |
| What the family has bought | Yes | Yes, so the course unlocks | Yes, so the course unlocks |
| Resit cover claims and bank details | Yes | No | No |
Inside Ivarlo, a person looks at account information only to answer a request you have made, to check a resit cover claim, to keep the service secure, or where the law requires it.
6.How we use it
We use personal information to:
- Run the app: sign you in, show the right learner's course, and keep two phones in step.
- Send the notifications you have allowed, such as a drive being booked or moved.
- Unlock what your family has bought, on every phone on the account, and restore it after a reinstall.
- Check and pay resit cover claims.
- Answer your questions and fix problems you report.
- Keep accounts secure, and stop misuse and fraud, including false resit cover claims.
- Keep the records the law requires, such as tax records of payments.
We send news about Ivarlo only to people who have asked for it (section 15). We do not show you advertising, we do not build profiles for anyone else, and we do not use it to train artificial intelligence models. We will not use it for a new purpose unless you agree or the law allows it.
7.Decisions a program helps make
Some of what Ivarlo shows is worked out by the app's own software from your information:
- Which lessons are open. Worked out from the lessons completed, by the course's own rules.
- Whether resit cover is due. Worked out from the drive log (hours, night hours, hours driven in the app), the lessons and checkpoints completed, and the assessment result you record.
- What the next lesson focuses on. Worked out on the phone from that phone's mood ratings and from progress.
None of these is made about you by a person you cannot reach. A person at Ivarlo makes every decision to pay or decline a resit cover claim, using the drive log and the documents you upload. If you think the software has got something wrong, tell us and a person will review it.
8.Learners under 18
Most learners are 16 or 17. Ivarlo is designed for learners aged 16 and over, and a learner's phone can only join an account with a code that a supervisor creates.
- A parent or guardian agrees for the learner. The supervisor who sets up the account confirms that they are the learner's parent or legal guardian, or that they have that person's permission, and accepts this policy on the learner's behalf.
- We collect less about learners. A first name (or whatever the family calls them), an age band rather than a date of birth, and their course. Nothing on the learner's phone asks for contact details.
- The learner is told what their supervisor can see. Their phone shows it during setup, before anything is shared.
- A learner's information can be deleted. A supervisor can remove a learner in Settings, which deletes that learner's course from our servers. A learner, or their parent or guardian, can also ask us directly.
- At 18, a learner can deal with us directly about their own information.
We will update this section when the Children's Online Privacy Code being developed by the Office of the Australian Information Commissioner (OAIC) takes effect.
9.For learners: the plain version
- Your supervisor and you share your course: the lessons you have done, your stamps, your hours and your booked drives.
- How a drive felt, and your answers in your prep pack, stay on your phone. Your supervisor never sees them, and neither do we.
- If you have a brother or sister learning too, you cannot see their course and they cannot see yours.
- Your phone's location is used once to work out sunset, so night drives count. It never leaves your phone.
- Your phone shows "Phone away. Eyes up." while a lesson is running. That is so you drive, not so anyone can watch you.
- You can ask us what we hold about you, or ask us to delete it: hello@ivarlo.com.au.
10.Who we share it with
We do not sell personal information. We share it only with the providers below, each of which handles it on our behalf and only to provide its part of the service.
| Provider | What it does for Ivarlo | What it receives | Where |
|---|---|---|---|
| Supabase, Inc. | Hosts our database, sign-in and file storage, and sends notices to the push service | Everything section 3 lists as kept on our servers | Stored in Sydney, Australia. Supabase is a US company and its staff may reach it from overseas for support |
| RevenueCat, Inc. | Manages purchases so they unlock on every phone on the account | An account identifier, purchase records, device type, country and IP address | United States |
| Apple and Google | Sell the course through the App Store and Google Play, handle refunds, and deliver notifications to your phone | Your purchase (under their own terms and privacy policies), your push token and the notification text | United States and other countries |
| Expo (650 Industries, Inc.) | Passes notifications to Apple and Google | Your push token and the notification text, which can include a first name | United States |
| Resend, Inc. | Sends sign-in and confirmation codes by email | Your email address and the code | Japan (Tokyo). Resend is a US company |
| Mailchimp (Intuit Inc.) | Sends our newsletter and launch updates to people who have signed up | Email address, any name you give, sign-up details, and whether you open emails or click links in them | United States |
| Netlify, Inc. | Hosts ivarlo.com.au | IP address, browser and the pages you view (standard web logs), and anything you type into a form on the site | United States, and the countries where Netlify's servers deliver the site |
| Microsoft (Microsoft 365) | Our inbox | Messages you send us | Australia, where Microsoft stores Australian accounts' mail. Microsoft may reach it from overseas for support |
We may also disclose personal information:
- where the law requires it, such as a court order or a lawful request from a government agency;
- to our professional advisers, such as accountants and lawyers, under a duty of confidence;
- to a buyer of the Ivarlo business, who must keep to this policy for information we already hold; or
- with your consent.
Transport WA receives nothing from us. Ivarlo links to Transport WA's website; what you do there is covered by its own privacy policy.
11.Sending information overseas
The app's course data is stored in Australia. Some of the providers in section 10 are based in, or reach data from, the United States and Japan. Before we use a provider, we check that it is bound by terms that protect personal information to a standard similar to the APPs. Where information goes overseas, we remain accountable for it under the Privacy Act.
12.Keeping it secure
- Information travels encrypted between your phone and our servers, and is encrypted where it is stored.
- Every request is checked against who you are and which seat you hold, so a phone can read only what its seat is allowed to see. We test those rules as real signed-in users.
- Sign-in codes expire after 15 minutes. Passwords are stored only as a one-way hash.
- Invite codes are stored only in scrambled form, expire, and stop working after repeated wrong guesses.
- Two-step sign-in is available to everyone, in Settings.
- Resit cover documents sit in private storage that no phone on any account can read back.
No system is perfectly secure. If you think your account has been misused, sign out of other phones, change your password, and email us.
13.How long we keep it
| Information | How long |
|---|---|
| Account, course, drive log and plan | Until you delete the account, or remove that learner or person |
| A deleted account | Removed from our live database at once. Sign-in records go at the same time or within 30 days. Backups roll over within 7 days |
| A deleted sign-in | Its place on the account, push token and own mood ratings and prep answers are removed at once. The sign-in record goes at the same time or within 30 days. Backups roll over within 7 days |
| Bank details on a resit cover claim | Deleted as soon as the claim is paid, whether it came through the app or by email |
| Resit cover documents | Until the account is deleted. Documents emailed to us are deleted once the claim is settled |
| A record of a resit payment we made (amount, date, last three digits of the account) | 5 years, as Australian tax law requires |
| Invite codes | Until used, withdrawn or expired |
| Push token | Until you sign out, delete the account or are removed from it |
| Messages you send us | 2 years after our last contact |
| Technical logs | As long as our providers keep them, usually days to weeks |
| Anything kept only on your phone | Until you delete the app or erase the account in Settings |
| Newsletter sign-up | Until you unsubscribe, then removed from our list within 30 days |
Purchase records held by Apple, Google and RevenueCat are also kept under their own policies.
14.Your rights and choices
| You want to | How |
|---|---|
| See what we hold | Download a copy from Settings, or email us |
| Get a copy | Settings has a download of everything the phone holds, as one file, grouped by what is shared and what stays private |
| Fix something | Change names, the car and the age band in Settings, or email us |
| Delete a learner | A supervisor removes them in Settings. Their course goes with them |
| Delete the whole account | A supervisor deletes it in Settings. It takes everything on our servers, for every person on the account |
| Stop location | Say no when asked, or turn it off in your phone's settings. Night hours then count from 6pm |
| Stop notifications | Turn them off in Settings or in your phone's settings, or set quiet hours |
| Leave an account | Ask a supervisor to remove you, or email us |
| Stop the newsletter | Use the unsubscribe link in any newsletter, or email us |
| Delete only your own sign-in | Delete it in Settings, under This phone, or email us. Any supervisor or learner can, except an account's only supervisor, who deletes the whole account instead. It removes that sign-in, its place on the account and its own mood ratings and prep answers at once, and the sign-in record within 30 days at most. The rest of the account stays unless a supervisor deletes it |
If you email us, we will reply within 30 days and it costs nothing. We may need to check who you are first, so we do not hand one family's information to someone else. If we cannot do what you ask, because the law requires us to keep something or it would expose another person's information, we will tell you why and how to complain.
15.Emails, notifications and our website
The app's own emails are only about your account: a sign-in code, a confirmation code, and replies to you. Drive notices come as phone notifications, and only if you allow them. You can set quiet hours, 11pm to 5am unless you change them. Nothing from Ivarlo buzzes your phone in those hours, and a notification you turn off in Settings is not sent at all.
Newsletter. If you sign up for our newsletter, we send news about Ivarlo through Mailchimp: launch updates, new features and offers. We only send it if you have asked for it. Every email has an unsubscribe link, as the Spam Act 2003 (Cth) requires, and unsubscribing never affects your account or its sign-in codes. Mailchimp tells us whether an email was opened and which links were clicked; we use that only to see what is useful.
Our website and cookies. ivarlo.com.au is hosted by Netlify. The site sets no advertising, analytics or tracking cookies. Netlify keeps standard web logs (IP address, browser and pages requested) for a short time to deliver the site and keep it secure.
16.If something goes wrong
If a data breach is likely to cause serious harm to anyone, we will tell the people affected and the OAIC as soon as we can, under the Notifiable Data Breaches scheme, and say what we are doing about it.
17.Complaints
Email hello@ivarlo.com.au with "Privacy" in the subject line. We will acknowledge it within 7 days and give you an answer within 30.
If you are not satisfied, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, phone 1300 363 992.
18.Changes to this policy
We will change this policy when the app or the law changes. The effective date at the top will always show the current version. If a change affects how we use information you have already given us, we will tell you in the app or by email before it takes effect.
19.Contact
Ivarlo (Jarod Meijer, sole trader, ABN 33 159 532 314)
Level 1, 125 St Georges Terrace, Perth WA 6000, Australia
hello@ivarlo.com.au