SUKARR PRIVACY POLICY
Effective Date: 18 February 2026 | Version 1.0 | Australia / NSW Launch Version
This Privacy Policy explains how Mala Group Pty Ltd (ACN 686 281 818) trading as Sukarr (Sukarr, we, us or our) collects, uses, stores, discloses and protects personal information when you use the Sukarr mobile application, website, account features, subscription features, AI-assisted tools, community features, merchandise store where available, and related services (together, the App).
We are based in Australia and this Privacy Policy has been prepared with Australian privacy expectations in mind. Where other privacy laws apply to your use of the App, we will handle personal information in accordance with applicable legal requirements.
We collect only what we reasonably need to provide, improve, secure and support the App. We do not sell your personal information.
1. Personal Information We Collect
1.1 Account and identity information
When you create an account, sign in or manage your profile, we may collect:
• email address;
• first name and last name;
• profile photo if you choose to upload one;
• phone number if we enable and you use phone or OTP-based sign-in;
• authentication credentials, tokens or sign-in identifiers;
• account preferences and settings; and
• information received through Google, Apple or other third-party sign-in options, such as the name and email address you authorise that provider to share.
1.2 Inventory and product information
When you use the App to manage your household inventory, we may collect information you enter, scan, upload or generate, including:
• food item names, household item names, brands, categories and storage locations;
• quantities, units, notes, tags and item status;
• purchase dates, expiry dates, best-before dates and reminder settings;
• photos of items, labels, cupboards, pantry areas, receipts or related images you choose to submit;
• item changes, deletions, completion status and inventory history; and
• information generated from scans, images, receipts or AI-assisted recognition.
1.3 Shopping and purchase information
If you use shopping or purchase features, we may collect:
• shopping list items, priorities and completion status;
• purchase history you enter or scan, including item, category, quantity, date and store where provided;
• shopping preferences such as preferred stores, household needs, frequency or budget-related preferences if you choose to provide them; and
• subscription plan, billing status and payment-related metadata. We do not store full card numbers unless expressly stated; payments are generally handled by third-party payment processors or app stores.
1.4 Community Hub content
If you use any Community Hub or sharing feature, we may collect:
• posts, titles, captions, comments or body text you create;
• images or attachments you choose to share;
• display name and profile details shown with posts;
• engagement information such as likes, saves, reports or moderation history; and
• information needed to investigate reported or unsafe content.
1.5 Usage, device and activity data
We may collect technical and usage information to operate, secure and improve the App, including:
• in-app activity logs such as inventory changes, recipe generation events, shopping actions and feature usage;
• device platform, operating system, device type, app version and language settings;
• notification settings, default units, theme and preferences;
• approximate technical location data inferred from IP address where necessary for security, analytics or service delivery;
• crash logs, diagnostic data, performance data and error reports;
• security logs, authentication events and session information.
1.6 Voice input and audio
If you use voice input to add items or perform App actions, audio may be captured and processed to convert speech to text. Unless we clearly state otherwise, raw audio is processed for transcription and is not retained after transcription is complete. Transcribed text may be stored as part of your inventory or App activity if you choose to save it.
1.7 Sensitive information
We do not intentionally ask for sensitive information such as health information, medical conditions, allergies, religious beliefs or precise location. However, you may choose to enter information that reveals dietary preferences, allergies, health-related needs or household circumstances. If you provide that information, we will use it only to provide the App features you request, improve safety and functionality, and comply with legal obligations.
You should avoid uploading or entering information you do not want processed through the App, especially where it relates to another person.
2. How We Collect Information
We collect personal information:
• directly from you when you create an account, enter inventory items, upload images, use voice input, post content, subscribe, contact us or use App features;
• automatically when you use the App, including device, usage, security and diagnostic data;
• from third-party sign-in providers where you choose to sign in through them;
• from app stores, payment processors or subscription platforms where needed to manage subscriptions and billing status; and
• from service providers that help us operate, secure and support the App.
3. Why We Use Your Information
We use personal information for the purposes set out below.
Purpose Examples of information used Why we use it
Provide and operate the App Account data, inventory data, shopping lists, preferences To deliver the core inventory and household management features.
Account authentication Email, sign-in tokens, security logs To create accounts, verify users and keep accounts secure.
AI recipe and suggestion features Inventory items, preferences, recipe requests, transient AI inputs To generate suggestions or outputs requested by users.
Image and receipt scanning Photos, receipts, labels and extracted text To identify items, dates, quantities or product information.
Voice input transcription Audio processed transiently and resulting text To convert speech to text when you choose to use voice features.
Smart shopping and reminders Inventory, purchase dates, expiry dates, quantities, preferences To support shopping lists, low-stock reminders and expiry notifications.
Community Hub Posts, display name, images, reports To display community content and moderate unsafe or unlawful content.
Billing and subscriptions Plan, payment status, subscription metadata, contact details To manage free trials, weekly billing, cancellations, failed payments and disputes.
Security and fraud prevention Device data, session logs, authentication events, usage logs To detect misuse, unauthorised access, fraud and technical issues.
Service improvement Aggregated usage, diagnostics, crash data and feedback To improve performance, reliability and product design.
Legal compliance and disputes Account, billing, support, security and usage records To comply with laws, respond to regulators and manage legal claims.
4. AI Processing
Some features may involve AI or automated processing, including recipe generation, image-based item recognition, receipt scanning, item categorisation, shopping suggestions and voice transcription.
Information submitted to AI providers is used to provide the requested feature and, where possible, is processed transiently. We take reasonable steps to ensure service providers handle information securely and only for permitted purposes. However, you should avoid submitting highly sensitive information or information about other people unless necessary.
AI outputs may be inaccurate or incomplete. AI processing does not replace your own judgment, and the Terms explain your responsibility for checking ingredients, allergens, food condition, expiry dates and suitability.
5. Device Permissions
The App may request device permissions. These are generally optional, although some features may not work without them.
Permission Purpose What happens if disabled
Camera Scan food items, labels, barcodes or receipts. Scanning features may not work.
Photo library Upload item, label, receipt or profile images from your device. You may not be able to upload saved images.
Microphone Use voice input to add or search for items. Voice features will not work.
Push notifications Send expiry alerts, low-stock reminders, subscription or security notices. You may not receive reminders or important notices.
You may deny or revoke permissions through your device settings. Revoking permission may disable only the related feature and should not affect unrelated App functions.
6. Who We Share Information With
We do not sell, rent or trade your personal information. We may disclose personal information only where reasonably necessary for the purposes described in this Privacy Policy.
6.1 Service providers
We may share personal information with trusted service providers that help us operate the App, including:
• cloud infrastructure, database, storage and hosting providers, including AWS;
• authentication and sign-in providers;
• AI processing, image recognition, receipt scanning and voice transcription providers;
• analytics, diagnostics, crash reporting and security providers;
• payment processors, app stores and subscription management providers;
• email, notification and customer support providers;
• professional advisers such as lawyers, accountants, insurers and auditors where needed.
We require service providers to handle information only for authorised purposes and to use appropriate safeguards.
6.2 Legal, safety and compliance disclosures
We may disclose information if required or permitted by law, court order, regulator, law enforcement agency, app store, payment provider or government authority. We may also disclose information where reasonably necessary to protect the rights, property, security or safety of Sukarr, users or the public.
6.3 Business transfers
If we are involved in a merger, acquisition, restructure, sale of assets, investment transaction or business transfer, personal information may be disclosed to parties involved in that transaction. We will take reasonable steps to ensure continued protection of personal information and notify users if personal information becomes subject to a materially different privacy policy.
6.4 Public content
If you post content in a public or community area of the App, your display name, profile details and content may be visible to other users. You should not post personal information you do not want others to see.
7. Overseas Disclosure and International Transfers
Some service providers, including AWS and AI or technology providers, may store or process personal information outside Australia. This may include countries where our providers or their infrastructure are located.
Where personal information is transferred or processed overseas, we take reasonable steps to use appropriate safeguards. These may include contractual obligations, technical security measures, access controls, provider due diligence and reliance on recognised transfer mechanisms where applicable.
By using the App, you understand that your information may be processed outside Australia where reasonably necessary to provide the App and related services.
8. Data Retention
We retain personal information for as long as reasonably necessary to provide the App, maintain your account, comply with legal obligations, manage billing and disputes, prevent fraud, maintain security, support backups and improve the service.
Data type General retention approach
Account information Retained while your account is active and for a reasonable period after deletion where required for legal, billing, security or dispute reasons.
Inventory and shopping data Retained until you delete it or delete your account, subject to backups, legal requirements and technical retention periods.
Community posts and images Retained until deleted by you, removed by us, or your account is deleted, subject to moderation, legal or backup needs.
Voice recordings Not retained after transcription unless we clearly state otherwise; resulting text may be saved if you save it in the App.
Activity, diagnostic and security logs Generally retained for a limited period, commonly up to 90 days for ordinary logs, or longer where needed for security, fraud, legal or operational reasons.
Billing and transaction records Retained as needed for accounting, tax, dispute, fraud prevention and legal compliance.
When you delete your account, we will take reasonable steps to delete or anonymise personal information within 30 days, unless we are required or permitted to retain it for legal, accounting, security, backup, dispute-resolution or legitimate business purposes.
9. Security
We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps may include:
• encrypted transmission of data where appropriate;
• encrypted storage or protected storage where appropriate;
• secure authentication and token handling;
• access controls so users can access only their own account data;
• role-based access controls for internal systems where available;
• monitoring, logging and security review processes;
• provider due diligence and contractual confidentiality obligations; and
• reasonable data minimisation and retention controls.
No method of electronic transmission or storage is completely secure. You should use a strong, unique password and keep your account credentials safe.
10. Data Breaches
If we suspect or become aware of unauthorised access, disclosure or loss of personal information, we will take reasonable steps to assess, contain and respond to the incident.
If we determine that a data breach is likely to result in serious harm to affected individuals, we will notify affected users and the Office of the Australian Information Commissioner where required under the Notifiable Data Breaches scheme and applicable Australian privacy laws. Our notification may include the nature of the breach, the types of information involved, recommended steps you should take and how to contact us.
You should contact us immediately at info@sukarr.com if you suspect unauthorised access to your account or become aware of a security issue affecting the App.
11. Your Rights and Choices
Depending on your location and the laws that apply, you may have rights to:
• request access to personal information we hold about you;
• request correction of inaccurate, incomplete or out-of-date personal information;
• request deletion of your account or certain personal information;
• withdraw consent for optional features where processing is based on consent;
• turn off device permissions through your device settings;
• opt out of certain communications where available;
• request information about how we handle your personal information;
• make a privacy complaint.
To exercise these rights, contact us at info@sukarr.com. We may need to verify your identity before responding. We will aim to respond within 30 days, or within any timeframe required by applicable law.
Some information may be necessary to provide the App. If you request deletion or withdraw certain permissions, some features may no longer work.
12. Marketing and Communications
We may send you service-related communications, including account notices, security alerts, subscription notices, billing reminders, feature updates and policy changes. These are not marketing messages and may be necessary to provide the App.
Where permitted by law, we may also send product updates, promotions, launch announcements, offers or content we think may interest you. You can opt out of marketing communications by using unsubscribe options where available or contacting us. Even if you opt out of marketing, we may still send essential service and account communications.
13. Children and Users Under 18
The App is not available to users under 18. We do not knowingly collect personal information from children or users under 18. If you believe a person under 18 has provided personal information to us, please contact us at info@sukarr.com and we will take reasonable steps to delete the information and close the account where appropriate.
14. Third-Party Links and Services
The App may include links, integrations or sign-in options connected with third-party services such as Apple, Google, payment processors, AWS, AI providers or other technology providers. Those third parties may collect and handle information under their own terms and privacy policies.
We are not responsible for the privacy practices of third parties that are not acting on our behalf. You should review their privacy policies before using their services.
15. Anonymised and Aggregated Information
We may create anonymised or aggregated information from App usage, inventory trends, feature usage, performance data or other information. Where information has been properly anonymised so it no longer identifies you, we may use it for analytics, product development, research, reporting, commercial planning and service improvement.
16. Privacy Complaints
If you have a privacy concern or complaint, please contact us at info@sukarr.com with details of the issue. We will review your complaint and aim to respond within a reasonable time.
If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner or another relevant regulator, depending on your location and the nature of the complaint.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as by email, in-app notice or updating the effective date. Where practicable, we will provide at least 14 days notice before material changes take effect.
Your continued use of the App after the updated Privacy Policy takes effect means you acknowledge the updated policy.
18. Contact Us
If you have questions, requests or complaints about this Privacy Policy or how we handle personal information, please contact us:
Mala Group Pty Ltd (ACN 686 281 818) trading as Sukarr
Email: info@sukarr.com