Effective 19 December 2025

This Privacy Policy explains how MYVAL PTY LIMITED (“myVal”, “we”, “us”, “our”) collects, uses, stores, and protects personal information when you access or use our products and services, including our website and any mobile or web-based application we operate (together, the “Platform”).

By creating an account or using the Platform, you acknowledge that your personal information will be handled in accordance with this Privacy Policy and as otherwise permitted or required by law.

We may amend this Privacy Policy from time to time by publishing an updated version on our website or within the Platform. Continued use of the Platform after an update takes effect constitutes acceptance of the revised Privacy Policy to the extent permitted by law.


1. Definitions

For clarity:

  • Personal information has the meaning given in the Privacy Act 1988 (Cth) (“Privacy Act”).
  • Item Data means information you upload or generate about possessions, including photos, descriptions, categories, and valuations.
  • De-identified data means data that has been stripped of identifiers and cannot reasonably identify an individual.
  • Third-Party Services means services you may choose to connect to or interact with via the Platform, including insurers or analytics providers.

2. Collection of Personal Information

2.1 When we collect information

We may collect personal information about you when you:

  • create or manage an account;
  • use Platform features, including documenting items or generating outputs;
  • contact us for support, feedback, or complaints;
  • enable optional permissions (such as location access);
  • interact with Platform communications.

We generally do not permit anonymous or pseudonymous use of the Platform. If you do not provide requested personal information, some features may be unavailable.

2.2 Information you provide

Depending on your use of the Platform, we may collect:

  • Account details: name, email address, phone number
  • Item Data: photos, descriptions, valuations
2.3 Information collected automatically

When you use the Platform, we may collect information automatically, including:

  • device type, operating system, browser;
  • IP address;
  • session timestamps, interaction events, and navigation patterns.
2.4 Cookies and analytics

We may use cookies and similar technologies to operate the Platform, analyse usage, and improve performance. Disabling cookies may limit functionality.

2.5 Collection via third parties

We may collect personal information from third parties where third-party tools are required to support Platform functionality (for example, hosting, security monitoring, or analytics).

Where permitted by law, we may combine information we hold with information obtained from third parties as part of normal operations.


3. Use of Personal Information

We collect and use personal information for purposes not prohibited by law, including to operate, maintain, and improve the Platform.

Without limitation, we may use personal information to:

  1. Provide and operate the Platform
    • create and manage accounts
    • authenticate users and administer permissions
    • respond to support requests
  2. Deliver requested outputs
    • generate item documentation
    • provide insurance alignment insights and estimates
  3. Improve the Platform
    • monitor performance and reliability
    • develop and refine features and user experience
    • conduct analytics and reporting
  4. Communicate with you
    • service messages, updates, and security notices
    • marketing communications (subject to your preferences and applicable law)
  5. Meet legal and regulatory obligations
    • comply with applicable laws
    • enforce our terms
    • manage disputes and protect rights and safety
Important disclaimer: no insurance advice

Any insurance alignment insights, comparisons, or estimates provided through the Platform are informational only. They do not constitute insurance advice, financial advice, or a recommendation of any policy or insurer. Outputs depend entirely on the accuracy and completeness of the information you provide.


4. Secondary Use and Consent

We will not use your personal information for a secondary purpose without your consent unless the use is permitted or required under the Privacy Act (including the Australian Privacy Principles).


5. De-identified and Aggregated Data

We do not sell personal information.

We may create, use, and (where appropriate) share or license de-identified or aggregated data for:

  • analytics and research
  • product development and service improvement
  • commercial partnerships

Reasonable steps are taken to ensure individuals cannot be identified from these datasets.


6. Disclosure of Personal Information

6.1 Who we may disclose to

We may disclose personal information to:

  • Insurers, where you opt to link your account or request sharing
  • Service providers supporting Platform functionality (e.g. hosting, analytics, security)
  • Regulators or government agencies, where required or authorised by law
6.2 Third-Party Services

The Platform may link to or integrate with Third-Party Services. We are not responsible for their privacy practices and encourage you to review their privacy policies before enabling integrations.


7. Data Security and the 5Val Framework

We use safeguards designed to protect personal information from misuse, loss, and unauthorised access. However, no system is completely secure and while we are active in our management, we cannot guarantee absolute security.

7.1 The 5Val Framework

myVal applies its 5Val framework, based on the Australian Government’s Five Safes model:

  • Safe Settings: encryption in transit (TLS) and at rest (AES-256)
  • Safe People: access limited to authorised personnel with privacy training
  • Safe Projects: data use restricted to requested services, anonymised where possible
  • Safe Data: separation of identifying information from Item Data
  • Safe Outputs: user-controlled exports and disclosures
7.2 Data breaches

If a data breach is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme.


8. Under-18 Users

The Platform may be used by individuals under 18. Where required by law, we rely on consent provided by a parent or guardian. We take reasonable steps to protect the personal information of under-18 users.


9. Accuracy of Information

You are responsible for ensuring the accuracy of information you upload. Inaccurate or incomplete information may reduce the usefulness of Platform outputs, including insurance alignment insights. In-app guidance is provided to support correct documentation.

We take no responsibility for outputs produced by the Platform formulated on the input of false or inaccurate information.


10. Access, Correction, Deletion, and Marketing Preferences

10.1 Your rights

Subject to applicable law, you may request to:

  • access personal information we hold about you;
  • correct inaccuracies;
  • delete your account and associated data;
  • opt out of marketing communications.
10.2 Verification and limits

We may require identity verification before fulfilling requests and may refuse requests where permitted by law.

10.3 Marketing opt-outs

If you opt out of marketing, we will retain a record of your opt-out to ensure your preference is respected.


11. Retention and Destruction

We retain personal information only for as long as necessary to provide the Platform or comply with legal obligations.

  • Free users: all account and content data is deleted upon account deletion.
  • Paying users: billing records are retained for the applicable tax period, after which they are securely deleted.

All other account data (including Item Data, names, dates of birth, and addresses) is removed from active systems and securely destroyed or de-identified.

Unsolicited personal information that we are not permitted to collect is destroyed or de-identified as soon as practicable unless retention is required by law.


12. International Data Transfers

We do not currently transfer personal information outside Australia.

If this changes, we will take reasonable steps to ensure overseas recipients comply with the Australian Privacy Principles or obtain your informed consent where required. This privacy policy will be updated in the aforementioned event


13. Contact and Complaints

For privacy queries, requests, or complaints:

We aim to respond within 30 days. If you are dissatisfied with our response, you may lodge a complaint with the Office of the Australian InformationCommissioner (OAIC) at www.oaic.gov.au.