Ready2Tow — Privacy Policy
Last updated: September 2026 (v2.1)
Version: 2.1
Effective Date: September 2026
Applies To: Worldwide (App Store; Google Play)
Primary Jurisdiction: New South Wales, Australia
ABN: 78 694 741 636
1. INTRODUCTION AND COMMITMENT TO PRIVACY
Ready2Tow ("App," "we," "us," "our") is committed to protecting
your privacy and ensuring you have a positive experience on our
platform. This Privacy Policy explains how we collect, use, disclose,
and safeguard your information when you use our App.
The App is distributed worldwide on the Apple App Store and in Australia
and New Zealand on Google Play. Accordingly, this policy is intended to
comply with applicable privacy laws across all regions where the App is
available, including (but not limited to):
- Australian Privacy Principles (APPs) under the Privacy Act 1988
- New Zealand Privacy Act 2020 - for NZ users
- EU General Data Protection Regulation (GDPR) - for users in the EU
- UK General Data Protection Regulation (UK GDPR) and Data Protection
- California Consumer Privacy Act (CCPA) - for California, USA users
- Personal Information Protection and Electronic Documents Act
Please read this Privacy Policy carefully. If you do not agree with our
practices, please do not use the App.
2. INFORMATION WE COLLECT
2.1 Personal Information
- Email address (for account creation)
- Name (optional)
- Profile photo (optional)
2.2 Weight and Safety Data
Your rig data (vehicle specifications, weight limits, tyre
specifications, assessment results, weighbridge records) is stored on
your device and automatically backed up to secure cloud servers when
you are signed in. We do NOT have access to your specific rig data
for any purpose other than providing App functionality.
2.3 Cloud Backup and Sync
When you are signed in, your data is automatically backed up to secure
cloud servers powered by Google Firebase. Your data is encrypted in
transit using TLS 1.3 and encrypted at rest using Google Cloud\'s
built-in encryption. Access to your data is protected by your
authentication credentials. We do not access, review, or use your
rig data for any purpose. Only authenticated sessions linked to
your account can retrieve your data.
2.4 Anonymised Analytics We DO Collect
- Number of scenarios created (to improve features)
- Average runway months distribution (anonymised, for benchmarking)
- Most used expense categories (to optimise quick entry)
- Feature usage patterns (to prioritise development)
- App crash reports and performance metrics
2.5 How We Treat Your Rig and Safety Data
We never access, read, or analyse your rig data for our own purposes. We
do not use it for analytics, marketing, product development, or
profiling, and we never sell it. This includes your vehicle weight
measurements, tyre pressure readings, assessment results, and compliance
status.
We never receive your bank account details or card numbers. Payments are
handled entirely by Apple and Google.
There are exceptions, and they happen only when you use the feature that
requires them.
AI assistance (Tow Pro and Professional)When you ask the AI copilot a question, request a safety narrative, ask
for a glossary explanation, or generate a Professional report, the rig,
weight, and assessment details needed to answer are sent to our AI
provider (see Section 5) so that a response can be generated.
Photograph capture (OCR)When you photograph a compliance plate, a tyre sidewall, or a weighbridge
ticket so the App can read it for you, **that photograph is sent to our
AI provider to be read.** It is used only to extract the values you asked
for, and is not retained by the provider afterwards.
If you would rather not send a photograph, every value the App reads by
camera can be typed in by hand.
Natural-language payload entryDescribing your load in words -- "two bikes and a full water tank" --
sends that description to our AI provider to be converted into weights.
In all cases the data is used only to answer the request you made, and
is not used to train any AI model.
Free tierThe free tier has no AI features of any kind. Nothing described in this
section applies to it: no rig data, no photographs, and no descriptions
are transmitted.
2.6 Information You Provide Directly
Rig and Safety Data:- Vehicle and trailer specifications (make, model, year, weights,
- Weight limits (ATM, GTM, GVM, GCM, tow ball rating)
- Tyre specifications (size, load index, speed rating, pressure)
- Payload details (water, gas, occupant, gear weights)
- Assessment results and compliance history
- Weighbridge records and docket photographs
- Compliance plate and tyre sidewall photographs (for OCR)
- Maintenance schedule records and service history
- Client records (Professional tier only)
- Name, email address, and contact details
- Authentication credentials (encrypted)
- Payment information (managed by Apple or Google - we do not receive
- Messages, feedback, or support requests you send to us
- Your responses to surveys, questionnaires, or user feedback requests
- Whether you marked a blog article as helpful (stored against your
2.7 Information Collected Automatically
Device and Usage Data:- Device type, operating system, and version
- Device identifiers (IDFA for iOS, Advertising ID for Android)
- App version and features you use
- Duration and frequency of use
- Crash reports and error logs
- IP address and network connection type
- Approximate location based on IP address (not GPS-precise location)
- Precise GPS location only when you explicitly grant location
2.8 Information from Third Parties
- Device operating system providers (Apple, Google) may provide app
- Payment processors may provide transaction details related to
- Third-party service providers may share error logs or security
2.9 Community Contributions
Ready2Tow includes a community database of vehicle and caravan
specifications built by its users.
When you submit a rig specification or a correction to one:
- It becomes publicly visible to all Ready2Tow and Ready2Roam users
- It becomes Ready2Roam-owned content under Section 4.2 of the End User
- Your email address is never attached to a contribution
**If you delete your account, your contributions remain, with your
identity removed.** Other users depend on them. Once anonymised, a
contribution is no longer personal information and is retained
indefinitely.
Community Stories and photographs. If you submit a story, tip, or
photograph for publication, we collect what you provide: a title and text,
any photographs you attach, an optional location you type, and your chosen
attribution (a name you give us, or anonymous). Your submission is reviewed
by a person before anything is published. If it is approved and published,
it appears in the in-app blog and on the Ready2Roam website, and is handled
under EULA Section 4.2.
Photographs you submit may contain metadata (such as capture time or GPS
location) and may show people or property. Submit only photographs you have
the right to share, and only of people who have agreed to appear. You can
withdraw a submission before it is published, and request removal after
publication (EULA Section 4.2).
Published stories and photographs, like other community contributions, are
retained after account deletion with your identity removed.
2.10 Ready2Tow and Ready2Roam
Ready2Tow and Ready2Roam are separate apps that share a single account.
Signing in to either uses the same email address and identity, and one
subscription record covers both. This is what makes the cross-app
loyalty discount possible (End User Licence Agreement, Section 5.6).
Each app's data is separate. **Deleting your account in one app deletes
only that app's data.** If you use both apps and want to leave entirely,
delete your account from each. When the last one is deleted, your
account itself is removed.
Vehicle maintenance records are shared between the two apps, because a
service performed on a vehicle is relevant to both. When you delete your
account in one app, those records are retained for the other, with no
link to you.
3. HOW WE USE YOUR PERSONAL INFORMATION
3.1 Service Delivery and Functionality
- Providing you with access to the App and its features
- Processing and performing weight compliance and tyre pressure
- Reading the compliance plates, tyre sidewalls, and weighbridge
text detection is used only to frame the camera
- Providing AI copilot responses and safety narratives
- Displaying weighbridge locations on maps
- Storing your preferences, rig profiles, and assessment history
- Providing cloud backup and sync to protect your data and enable
3.2 Technical Operations and Support
- Troubleshooting technical issues and errors
- Monitoring app performance, stability, and security
- Conducting crash analysis and error reporting
- Providing customer support and responding to your inquiries
- Debugging and improving app functionality
3.3 Analytics and Improvement
- Understanding how you use the App
- Analysing user behaviour to improve features and user experience
- Identifying technical problems and areas for enhancement
- Measuring feature adoption and effectiveness
3.4 Lawful Basis for Processing (GDPR/UK GDPR)
For users in the EU, EEA, and UK, we process personal data under the
following lawful bases:
-----------------------------------------------------------------------
Lawful Basis Activities
------------------------ ----------------------------------------------
Contract Performance Account creation and management; cloud sync
(Art. 6(1)(b)) and backup; subscription management
Legitimate Interests App performance monitoring; crash reporting;
(Art. 6(1)(f)) security; anonymised analytics to improve the
App
Consent (Art. 6(1)(a)) Precise GPS location access (requested at
runtime); optional analytics if a consent
mechanism is presented
Legal Obligation (Art. Compliance with applicable law; response to
6(1)(c)) lawful legal orders
-----------------------------------------------------------------------
4. DATA STORAGE AND SECURITY
4.1 Storage Architecture
Your data is stored using a dual-storage approach:
- Local Storage: All data is stored on your device using an encrypted
- Cloud Backup: When signed in, data is automatically synchronised to
region).
EU and UK users - data residency:Currently, all user data is stored in Google Firebase\'s
australia-southeast1 (Sydney) region. This includes data from EU and
UK users. This transfer is covered by Standard Contractual Clauses
(SCCs) between Ready2Tow and Google. A dedicated EU Firebase region
is planned for V1.2 to provide EU-local data residency.
4.2 Security Measures
-------------------------------------------------------------------------
Layer Technology Details
---------------- ------------------ -------------------------------------
Local Storage SQLCipher All local databases encrypted with
(AES-256) user-derived key
Cloud Storage Google Cloud Automatic server-side encryption for
Encryption Firestore data
Data in Transit TLS 1.3 All API calls over HTTPS
Authentication Firebase Auth Apple, Google, and email sign-in with
secure token management
Key Management iOS Keychain / Encryption keys stored in device
Android Keystore secure enclave
-------------------------------------------------------------------------
4.3 Data Retention
- Cloud data is retained while your account is active
**When you delete your account, your private cloud data is deleted
promptly and is not kept in backups.** This includes rigs,
rig assessments, tyre profiles, gear presets, weighbridge records, and
payload loads. Local data on your device is erased at the same time.
Reports you have shared by link stop working immediately. Anyoneholding a link to one of your safety cards or Professional reports will
no longer be able to open it.
The following are not deleted, and this is deliberate:
- Community rig specifications you have contributed, which are
- Vehicle maintenance records, retained with no link to you,
- **Newsletter subscriptions, waiting-list entries, and messages you
separately. Deleting your account does not unsubscribe you.
- Anonymised analytics, which contain no identifier and may be
through the Apple App Store or Google Play Store.
5. DATA SHARING AND DISCLOSURE
We do NOT sell your personal information to third parties under any
circumstances.
AI providers process your request only to generate a response, and do
not use it to train their models. AI features are available to Tow Pro
and Professional subscribers. **The free tier has no AI features and
transmits no rig data, photographs, or descriptions.**
We may share limited data with:
- Google Firebase: Cloud infrastructure provider (data processing
- Google Maps Platform: Weighbridge locator map display (receives
- Anthropic (Claude): Powers the AI copilot, the plain-language
narrative. Receives the text of your question and the rig, weight,
and assessment context needed to answer it. Does not receive your
photographs.
- Google (Gemini): Reads compliance plates, tyre sidewalls, and
natural-language payload descriptions into weights. **Receives the
photograph you captured.** It is used only to extract the values you
asked for.
- Google ML Kit: On-device text detection used to guide the camera
nothing.
- Sanity: Content platform that stores and serves the Ready2Roam blog
photographs of stories that have been approved for publication.
Receives only content approved for publication, not your private rig
data.
- RevenueCat: Subscription management (receives only subscription
- Apple/Google: App Store payment processing for subscriptions
- Analytics providers (e.g., Firebase Analytics, Crashlytics):
Law enforcement and regulatory disclosure:
We may disclose personal information to law enforcement, government
authorities, or regulatory bodies where we are required to do so by
applicable law or a valid legal order from a competent authority in any
applicable jurisdiction, including Australian, New Zealand, EU/EEA
member state, UK, US, and Canadian authorities as applicable. We will,
where lawfully permitted, notify you of such requests.
6. YOUR RIGHTS
Under the Australian Privacy Principles (and as expanded for users in
other jurisdictions - see Section 13), you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate personal information
- Deletion: Delete your account from within the App, at Settings >
removed.
- Data Export: Export your data in standard formats from within the
- Opt-out: Disable analytics collection in App settings
- Complaint: Lodge a complaint with the Office of the Australian
*Users in other jurisdictions have additional rights - please refer to
Section 13 for details specific to your region.*
7. SUBSCRIPTION MANAGEMENT
If you subscribe to a paid plan (Tow Pro or Professional), your
subscription is managed by Apple (App Store) or Google (Play Store), not
by Ready2Tow. Important points:
- We do not have access to your payment card details
- Subscription cancellation must be done through your Apple ID or
- Deleting your Ready2Tow account does NOT automatically cancel your
- You are responsible for cancelling your subscription separately to
- Refund requests must be directed to Apple or Google, not to
8. AGE REQUIREMENT
Ready2Tow is designed for users aged 13 years and older. By creating an
account and using the App, you confirm that you are at least 13 years of
age. We do not knowingly collect personal information from anyone under
- If we become aware that we have collected information from a person
between the ages of 13 and the age of majority in their jurisdiction
should review this Privacy Policy with a parent or legal guardian.
9. CHILDREN\'S PRIVACY
The App is not intended for children under 13 years of age. Consistent
with the United States Children's Online Privacy Protection Act (COPPA),
we do not knowingly collect, use, or disclose personal information from
children under 13. If we become aware that we have inadvertently
collected personal information from a child under 13, we will delete
that information promptly. If a parent or guardian becomes aware that
their child under 13 has provided us with personal information, they
should contact us at support@ready2tow.com and we will take steps
to remove that information from our systems.
10. INTERNATIONAL DATA TRANSFERS
Your data is primarily stored on Google Firebase servers in the
australia-southeast1 (Sydney) region. Some anonymised analytics and
crash data may be processed by third-party providers (e.g., Firebase
Analytics servers operated by Google in the US) in other jurisdictions.
Where data is transferred internationally, we ensure appropriate
safeguards are in place in accordance with applicable privacy law. For
EU and UK users, international transfers from the EU/EEA and UK are
covered by Standard Contractual Clauses (SCCs) entered into between
Ready2Tow and Google LLC as data processor. A copy of Google\'s
applicable SCCs is available at https://cloud.google.com/terms/sccs.
For NZ users, transfers to Australia are subject to the Trans-Tasman
mutual recognition framework. Ready2Tow acknowledges its obligations to
NZ users under the NZ Privacy Act 2020 as set out in Section 13.1.
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will notify you
of material changes by:
- Displaying a notice within the App
- Requiring re-acceptance for significant changes
- Updating the version number and effective date
Your continued use of the App after changes constitutes acceptance of
the updated policy.
12. CONTACT US
If you have questions about this Privacy Policy or wish to exercise your
rights, contact us:
- Email: support@ready2tow.com
- Business Name: Ready2Roam Pty Ltd
- ABN: 78 694 741 636
- Jurisdiction: New South Wales, Australia
For privacy complaints, you may also contact the Office of the
Australian Information Commissioner (OAIC) at www.oaic.gov.au. Users in
other jurisdictions may contact their applicable supervisory authority
as described in Section 13.
13. INTERNATIONAL USERS AND REGIONAL RIGHTS
Ready2Tow is distributed worldwide on the Apple App Store. The
following subsections describe the additional rights and obligations
that apply to users in specific regions, in addition to the general
provisions of this policy.
13.1 New Zealand
Ready2Tow is operated by an Australian entity (ABN 78 694 741 636) and
is distributed in New Zealand. NZ users\' personal information is
handled in accordance with the New Zealand Privacy Act 2020 where
applicable, in addition to the Australian Privacy Principles.
Key points for NZ users:
- The NZ Privacy Act 2020 sets out 13 Information Privacy Principles
disclosed
- Ready2Tow applies these principles to NZ user data to the extent
Australian Privacy Act 1988
- The Privacy Commissioner of New Zealand has jurisdiction to
Commissioner at www.privacy.org.nz
- Transfers of your data to Australia (for cloud storage in Firebase)
- Contact for NZ privacy enquiries: support@ready2tow.com (same
13.2 European Union and European Economic Area (GDPR)
If you are located in the EU or EEA, the General Data Protection
Regulation (EU) 2016/679 (GDPR) applies to your personal data. In
addition to the rights described in Section 6, you have the following
rights under the GDPR:
-----------------------------------------------------------------------
Right Description
------------------------ ----------------------------------------------
Right of Access (Art. Obtain a copy of personal data we hold about
15) you and information on how it is processed
Right to Rectification Request correction of inaccurate or incomplete
(Art. 16) personal data
Right to Erasure (Art. Request deletion of personal data where it is
17) no longer necessary, consent is withdrawn, or
processing is unlawful
Right to Restriction Request that processing be restricted in
(Art. 18) certain circumstances while accuracy is
contested or objection is pending
Right to Data Receive your personal data in a structured,
Portability (Art. 20) machine-readable format for transfer to
another controller
Right to Object (Art. Object to processing based on legitimate
21) interests. We will cease unless we demonstrate
compelling legitimate grounds
Right to Lodge Complaint Lodge a complaint with your member state
supervisory authority (e.g., CNIL in France,
BfDI in Germany, ICO in the UK - see 13.3)
-----------------------------------------------------------------------
Lawful basis: As described in Section 3.4, we process personal data on
the bases of contract performance, legitimate interests, consent, and
legal obligation. Where processing is based on consent, you may withdraw
consent at any time without affecting the lawfulness of prior
processing.
Data transfers: Personal data is currently stored in Google Firebase\'s
australia-southeast1 region. This transfer from the EU/EEA to Australia
is made under Standard Contractual Clauses (SCCs). Australia is not
currently an EU-designated adequate country; accordingly SCCs are
required and are in place.
V1.2 Roadmap - EU data residency:A dedicated EU Firebase region (europe-west1, Belgium) is planned for
V1.2. When deployed, EU user data will be stored within the EU with
no cross-border transfer required. This policy will be updated
accordingly.
13.3 United Kingdom (UK GDPR)
If you are located in the United Kingdom, the UK General Data Protection
Regulation (UK GDPR) and the Data Protection Act 2018 apply. The UK GDPR
is broadly equivalent to the EU GDPR but is a distinct regulation
following the UK\'s departure from the EU. The Information
Commissioner\'s Office (ICO) is the UK supervisory authority.
UK users have the same rights as EU users described in Section 13.2,
exercisable under UK GDPR rather than EU GDPR. Key UK-specific points:
- The ICO is your supervisory authority. You may lodge a complaint at
- International transfers from the UK are governed by the UK\'s
UK user data to Australia use Google\'s IDTA-compliant processing
terms
- The UK has recognised Australia as providing adequate protection
safeguards are maintained for Firestore processing
13.4 United States - California (CCPA)
If you are a California resident, the California Consumer Privacy Act
(CCPA) and the California Privacy Rights Act (CPRA) may apply to your
personal information. The following disclosures are provided in
accordance with CCPA requirements:
Categories of personal information we collect (in the preceding 12
months):
- Identifiers: email address, name (optional), IP address, device
- Internet or other electronic network activity: app usage, feature
- Geolocation data: approximate (IP-based) and precise (GPS, if
- Inferences: anonymised usage patterns derived from app interaction
We do not sell, rent, or share your personal information with third
parties for monetary consideration or other valuable consideration as
defined under the CCPA.
Your California privacy rights:
- Right to Know: You may request disclosure of personal information
- Right to Delete: You may request deletion of personal information we
- Right to Correct: You may request correction of inaccurate personal
- Right to Opt-Out of Sale: We do not sell personal information. No
time
- Right to Non-Discrimination: We will not discriminate against you
To exercise your California rights, contact us at
support@ready2tow.com. We will respond within 45 days of a
verifiable consumer request.
Law enforcement disclosures: Ready2Tow may be required to disclose
personal information in response to lawful requests from US government
authorities, including to meet national security or law enforcement
requirements. We will, where legally permitted, notify affected users.
13.5 Canada (PIPEDA)
If you are located in Canada, the Personal Information Protection and
Electronic Documents Act (PIPEDA) and applicable provincial privacy laws
may govern the collection, use, and disclosure of your personal
information. Key provisions:
- We collect, use, and disclose personal information with your
permitted by law
- You may access and correct your personal information by contacting
- Personal information is transferred to Australia for cloud storage.
consistent with PIPEDA Schedule 1 Principle 7
- You may file a complaint with the Office of the Privacy Commissioner