Aulo Privacy Policy

Effective: 7 November 2026 · Last updated: 7 November 2026

Paddles Brewing Co. Pty Ltd, trading as Aulo Travel (ABN 12 660 689 323) ("Aulo", "we", "us"), makes Aulo, an app for planning road trips around Australia and keeping a journal of them. This policy explains what personal information the app and our website collect, why, who we share it with, and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

The short version

  • We collect what you give us to plan and remember your trips, plus a little technical information to keep the app working.
  • Your trips, journal, photos and videos are private to your account.
  • We don't sell your information or show you ads, and the app has no advertising or analytics trackers.
  • The app runs on Google services (sign-in, storage, maps, AI trip planning and crash reports), so Google handles some of your information for us.
  • You can delete your account, and everything in it, from the app at any time.
  • If you join our waitlist, we use your email address to send you news about Aulo, and you can unsubscribe at any time.

What we collect

Information you give us

  • Your account: your email address and password. We never see your password; Firebase Authentication stores it in a form that can't be read back. If you sign in with Google, Google shares your name, email address and profile picture with us, and we use your name to fill in your first name.
  • Your profile: your first name, vehicle type, interests, preferences (such as units), and whether you've allowed location and notifications. Profiles made before October 2026 also hold a travel pace.
  • Your trips: trip names, start and end points, where you'd like a round trip to go, dates, how many hours a day you like to drive, stops, places to stay, notes, the ratings you give stops, and the instructions you type when you ask the Aulo Planner to change a trip.
  • Your journal: what you write and the photos and videos you add. Before a photo is stored, the app removes the location your camera saved in it. Other details, such as when it was taken, stay. A video is compressed on your phone before it's stored, and it loses the location and the other details your camera saved in it.
  • Messages to us: if you email us, your email address and what you write.

Information collected automatically

  • Your location, only if you allow it. When your phone asks, you choose precise or approximate location. The app uses it to suggest road trips that start near you, and to fill in where your trip starts when you tap "Use my current location".
    • For trip suggestions, your location stays on your phone: the app only asks our servers for trips around the nearest regional town.
    • For "Use my current location" with precise location and signal, the app sends your location through our servers to Google, which names the suburb you're in. It isn't stored. With approximate location, or without signal, the app names your town from a list built into it, and your location stays on your phone.
    • Either way, a trip saves only the place's name, as if you'd typed it.
  • Crash reports. If the app crashes or hits an error it can't handle, it sends a crash report to Google's Firebase Crashlytics so we can fix it. A report holds the error and where in the app's code it happened, the screen that was open, whether the device was offline, device details (model, operating system, app version, free memory and storage) and a random identifier for this installation. It never includes your name, email, account, location, trips, journal entries, photos or videos.
  • Usage counts: how many times a day your account uses the AI planner, place search and our other server features, so we can keep usage within fair limits.
  • Technical information. Like any internet service, our providers receive your IP address and basic device information when the app connects to them. Our server logs record which account made a request, not what you typed.

How we use it

  • To run the app: your account, keeping your trips in sync across your devices and available offline, planning and editing itineraries, maps, routes and place search, and your journal and its photo and video backup.
  • To keep Aulo reliable and fair: finding and fixing crashes, enforcing fair-use limits and preventing abuse.
  • To contact you about your account (for example, a password-reset email) and to answer your messages.
  • To send you news about Aulo, if you joined the waitlist on our website.

Apart from the waitlist emails you signed up for, we don't use your information for marketing or advertising, and we don't sell or rent it to anyone.

AI trip planning

The Aulo Planner uses Google's Gemini AI. When you ask it to plan, fill in or change a trip, we send Google the details it needs: the places (for a round trip, where you said you'd like to go), dates and trip length, how many hours a day you like to drive (or, for an older trip, your travel pace), your interests and vehicle, what you wrote in "Anything else to share?" when making the trip, the changes you ask for, and the current itinerary. If you change a trip you're already on, we also tell it which day of the trip you're up to. A trip's Notes stay with the trip and aren't sent. We don't send your name or email. Under Google's terms for its paid Gemini API, Google doesn't use this information to improve its products, and keeps it only for a limited time, to detect misuse. Please don't put sensitive information, such as health details, in what you ask the planner.

Maps and places

What you type into a location field, the places you pick and the routes between your stops are sent to Google Maps Platform through our servers. So is where each day of a trip ends, to suggest campsites near it, and your precise location when you ask the app to name where you are (see Information collected automatically). Maps and place photos in the app load from Google. Choosing "Lets go!" opens the day's drive, or a stop, in Google Maps.

Aulo uses Google Maps features and content. Your use of them is subject to the Google Maps/Google Earth Additional Terms of Service and the Google Privacy Policy.

Sharing your trips

When you share a trip or a journal day, the app makes the image or video on your phone, and you choose where it goes: Instagram, your photo library, or another app through your phone's share sheet. A start point that's a street address is shown as its town. Once shared, the other app's privacy policy applies.

Our website and waitlist

Our website, www.aulotravel.com, is hosted by Squarespace.

  • The waitlist: if you join it, we collect your email address and the date you signed up. We use them to send you news about Aulo's launch and to work out who qualifies for any offer the sign-up page describes. Every email has an unsubscribe link.
  • Spam protection: the sign-up form uses Google reCAPTCHA, which sends Google information about your device and browser to check you're a person. The Google Privacy Policy applies.
  • Visiting the site: like every Squarespace site, ours collects basic visitor data (your browser, network and device information, the pages you visit and your IP address) and uses cookies, so the site works and we can see its traffic. We don't add any third-party analytics or advertising trackers to the site.

Who we share it with

We share personal information only:

  • with Google (Google LLC and its affiliates), which provides the services the app runs on: Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions and Crashlytics, Google Maps Platform, the Gemini API, and Google Fonts (the app downloads one of its fonts from Google). Google processes this information for us under its data processing terms. Google Maps features also come under the Google terms linked above;
  • with Squarespace (Squarespace, Inc.), which hosts our website, holds the waitlist and sends our waitlist emails for us under its data processing terms, and with Google for reCAPTCHA on the website's sign-up form;
  • when you choose to share something (see Sharing your trips);
  • when the law requires it, or to protect someone's safety or our legal rights;
  • with a buyer, if Aulo's business is ever sold, who must keep to this policy.

We don't share it with advertisers or data brokers.

Where your information is kept

  • Your profile, trips, journal, photos and videos are stored in Google Cloud's Sydney region.
  • Your sign-in account is held by Firebase Authentication in the United States.
  • AI planning, maps and places, and crash reports are processed by Google in the United States and other countries where Google has facilities.
  • The app keeps a copy of your trips and journal on your phone, so it works offline.
  • The waitlist and our website's visitor data are held by Squarespace in the United States.

So your information may be disclosed to recipients in the United States and other countries. We rely on Google's and Squarespace's contractual data protection terms for it to be handled to a standard consistent with the Australian Privacy Principles.

How long we keep it

  • Your account, profile, trips, journal, photos and videos: until you delete them or your account.
  • Usage counts: until you delete your account.
  • Crash reports: Google keeps them for 90 days.
  • Server logs: 30 days.
  • Sign-in records: Firebase keeps the IP addresses it logs for a few weeks.
  • The waitlist: until you unsubscribe or ask us to delete your address. If you unsubscribe, Squarespace keeps your address on record so you aren't emailed again.

When you delete your account, we delete your profile, trips, journal, photos, videos, usage counts and sign-in account straight away. When you delete a trip, its itinerary, journal, photos and videos go with it, and deleting a journal day deletes its photos and videos. If your phone is offline at the time, those files are deleted from our storage as soon as the app is back online. Google then removes any remaining copies from its systems on its own schedule; for sign-in data, that's within 180 days.

Keeping it safe

Your information is encrypted in transit and when stored. Access rules mean only your account can read your trips, journal, photos and videos through the app. Our small team looks at stored data only when we need to, to run, support or fix the service. The copy on your phone is protected by your phone's own security. No system is perfectly secure: if a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner, as the law requires.

Your choices and rights

  • See and correct: most of your information is in the app, where you can change it. You can also ask us for a copy of the personal information we hold about you, or to correct it.
  • Delete: Settings → Delete Account deletes your account and everything in it. You can also delete a single trip, with its itinerary, journal, photos and videos, or a single journal day with its photos and videos.
  • Waitlist emails: use the unsubscribe link in any of them, or contact us (below).
  • Location: you can say no, or turn location off later in your phone's settings. The app then suggests trips from a standard list, and you type where your trips start.
  • Photos and videos: the app only sees the ones you pick.
  • Questions and complaints: contact us (below). We'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

Age

Aulo is for people aged 18 and over. We don't knowingly collect personal information from anyone under 18. If you think someone under 18 has given us information, contact us and we'll delete it.

Changes to this policy

We'll update this policy as Aulo changes, and post the new version here with a new date. If a change significantly affects how we handle your information, we'll tell you in the app before it takes effect.

Who we are

Paddles Brewing Co. Pty Ltd, trading as Aulo Travel Email: hello@aulotravel.com