Privacy Policy

1. Who we are

The JustMac service (justmac.app) is provided by JustMac (“we”). We are responsible for the personal information we collect about you and handle it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Policy explains what information we collect, why, who we share it with, how we protect it and how you can manage it. It applies to the justmac.app website, your account, Sessions and the Service’s emails.

2. What information we collect

Information you provide

• Account details: email address, name and password when you sign in with email (the password is stored only as a cryptographic hash).
• Information from sign-in services: when you sign in with Google, Apple, Facebook or GitHub — the name, email address and account identifier that the service provides. When signing in with Apple, you can hide your email address, in which case we receive an anonymous Apple relay address for forwarding emails.
• Enquiries: the content of your messages to support and our replies.

Information generated when you use the Service

• Rentals and payments: Mac model, rental periods, renewals, auto-renewal settings, payment amounts, dates and status, and the card type and last 4 digits.
• Technical data: IP address, browser and device type and version, Session connection times, connection latency and quality, and error logs.
• Cookies and browser storage: see the “Cookies” section.

What we do not collect

• We do not receive or store your full card number, expiry date or CVC: these are processed by the payment provider.
• We do not view or copy the contents of a rented Mac. The exceptions are described in the Rental Terms: a legal requirement, a request from an authorised authority, investigation of a serious breach or security threat, or your consent.
• We do not deliberately collect sensitive information (for example, about health, beliefs or origin).

3. Why we use information

• to create and maintain your account and let you sign in to it;
• to provide Rentals: connecting you to a Mac, tracking the Rental Period, renewing Rentals and wiping the Mac afterwards;
• to accept payments, issue receipts and invoices, and keep accounting and tax records;
• to send service emails: receipts, reminders that a Rental Period is ending, notices of charges, and a “Mac available” notice if you requested one;
• to respond to enquiries and resolve issues;
• to maintain security and prevent fraud and breaches of the Rental Terms and the macOS licence;
• to analyse the Service’s performance in aggregate form and improve it;
• to comply with legal requirements.

We do not use your information for advertising, we do not sell it and we do not disclose it to third parties for marketing. We do not send marketing emails. If we start doing so, it will be only with your consent and with an option to unsubscribe in every email.

4. Who we share information with

We share information only to the extent necessary for the purposes described:

• Contractors without whom the Service cannot operate: the payment provider and reseller (Paddle), hosting providers, the email delivery service, error monitoring services and the anti-spam check on forms (Cloudflare Turnstile). They are required to use the information only to provide services to us and to protect it.
• Sign-in services (Google, Apple, Facebook, GitHub) — when you choose to sign in with them.
• Professional advisers — lawyers, accountants and auditors — in the course of their work.
• Government authorities — where required or authorised by law, for example under a court order or at the request of law enforcement agencies.
• A successor — in the event of a sale or restructure of the business. We will notify you in advance, and your information will remain protected by this Policy.

5. Disclosure of information outside Australia

The Service’s main servers and Macs are located in Australia. Some contractors (the payment provider, the email delivery service, the anti-spam check (Cloudflare) and sign-in services) may store and process information in other countries — in particular, in the United States.

Before disclosing information overseas, we take reasonable steps to ensure that the recipient handles it in accordance with the Australian Privacy Principles, including through contractual obligations.

6. Cookies and browser storage

• We use only essential cookies and browser storage (localStorage): to keep you signed in, to make Sessions work and to remember your settings.
• We do not use advertising cookies or third-party trackers, and we do not display advertising.
• You can delete cookies in your browser settings, but you will then need to sign in again.
• Some forms use Cloudflare Turnstile, an anti-spam check that processes your IP address and browser data. Paddle’s payment window may set its own cookies needed to process the payment. These are not used for advertising.

7. How we protect information

• Connections to the website and Sessions are encrypted.
• Passwords are stored only as hashes, and access to our systems is limited to staff who need it for their work.
• Rented Macs are isolated from one another and completely wiped after each Rental.
• We regularly update our systems and monitor security.

No system is completely secure. If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

8. How long we keep information

• Account details — for as long as the account exists, and for up to 30 days after it is deleted.
• Rental and payment records — 7 years, as required by Australian tax law.
• Technical logs — up to 90 days, unless they are needed to investigate a breach.
• Support enquiries — up to 2 years after the last message.
• Contents of a rented Mac — permanently deleted one hour after the Rental ends.

When information is no longer needed, we delete or de-identify it.

9. Your rights

• Access. You can request a copy of the information we hold about you.
• Correction. You can ask us to correct information that is inaccurate, out of date or incomplete.
• Deletion. You can ask us to delete your account and the information about you (see the next section). We are required by law to keep some information, such as payment records.
• Anonymity. You cannot rent a Mac anonymously: we need your email address and, for payment, your card details. If you are just asking a question, you do not need to identify yourself.

To exercise your rights, email hello@justmac.app from your account email address. We may ask you to verify your identity. We will respond within 30 days. Access and correction are free of charge.

Users in the EU and the UK

If the GDPR applies to you, we process your data to perform our contract with you, to comply with legal requirements and for our legitimate interests (security and improvement of the Service). You also have the right to object to processing, to restrict it, to receive your data in a machine-readable format and to lodge a complaint with the supervisory authority in your country.

10. How to delete your account

1. Email hello@justmac.app with the subject “Delete account” from the email address linked to your account.
2. We will delete your account and the associated information within 30 days and send you a confirmation. Any active Rental will end, and the data on the Mac will be deleted.
3. Payment records are retained for as long as the law requires.

If you signed in with Google, Apple, Facebook or GitHub, you can also revoke JustMac’s access in that service’s settings.

11. Complaints

If you believe we have breached your privacy, email hello@justmac.app and describe the situation. We will acknowledge receipt within 5 business days and give you a substantive response within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992.

12. Children

The Service is intended for people aged 18 and over. We do not knowingly collect information about children. If you become aware that a child has provided us with their information, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy. The new version is published on this page with its effective date. We will notify you of material changes by email in advance.

14. Contact us

JustMac.

Privacy enquiries: hello@justmac.app.