Last updated 3 September 2026
Privacy
policy
This tool asks about your visa, your work and your language. That is personal, and some of it is sensitive. This page says plainly what is collected, who else sees it, where it goes, and how to get rid of it. No account is needed to use the quick check.
The short version
We never send anything to Home Affairs
Nothing you enter is passed to the Department of Home Affairs, to any employer, or to any migration agent. This tool does not lodge anything on your behalf and cannot.
The quick check saves nothing
Use the quick check without an account and your answers live in the page address and your own browser only. They never reach our database.
We never sell your data
Not to employers, not to agents, not to advertisers. There is no such arrangement and there will not be one.
You can have it all deleted
Email us and the account and every profile are erased, permanently.
What is collected, and why
Only what the timeline and the employer filter actually need. There is no field here that exists to build a marketing profile.
Your email address, your name if you give one, and either a password (stored only as a hash, never as the text you typed) or the fact that you signed in with Google.
Why — To create your account, keep you signed in, and let you get back to profiles you saved.
Visa type and expiry date, date of birth, whether you work in aged care or are willing to, your qualification, your English test and its four component scores, the languages you speak, your state and city, whether you are in a regional area, the certificates and checks you hold, and the dates of your police check and first aid certificate.
Why — These are the inputs to the timeline and the employer list. Nothing is computed that does not come from an answer you gave.
Which items on your checklist you have ticked.
Why — So the checklist is still where you left it next time.
Your IP address, browser and device type, the pages you open, and — if the app hits an error — a diagnostic record of that error, which can include a replay of what was on your screen in the moments around it.
Why — To keep the app running, find faults, and understand which parts get used.
Some of this is sensitive information
Under the Privacy Act 1988 (Cth), some of what you enter counts as sensitive information, which carries a higher bar than ordinary personal information:
- Your visa status and expiry
- Your date of birth
- The languages you speak, which can imply your ethnic or national origin
- Your qualifications and work history in aged care
We collect it only because you chose to enter it to get a result, and we use it only to produce that result. We do not use it for anything else, and we do not disclose it to anyone beyond the service providers listed below.
Two ways to use this, two different footprints
Quick check — no account
Your answers are carried in the page address and are never written to our database. Your checklist ticks are stored in your own browser. Clear your browser data and every trace is gone. One consequence worth knowing: because the answers sit in the address, anyone you send that link to can read them, and the link may be kept in your browser history.
Saved profiles — with an account
Your profiles are stored in our database so they are still there next time and on your other devices. One account can hold several profiles — if you are helping someone else, you are responsible for having their permission to enter their details. You can edit or delete any profile at any time.
Who else sees it
We use these companies to run the app. They process your data on our instructions and for no purpose of their own. Several store data outside Australia, which means it is handled under another country’s laws.
Neon
Database hosting
Your account and every profile you save.
Stored — Depends on the region the database runs in; may be outside Australia.
Their privacy policyVercel
Application hosting
Every request you make reaches Vercel servers, so your IP address and request logs pass through it.
Stored — United States and its global edge network.
Their privacy policyPostHog
Product analytics
Page views and events. When you are signed in, your user id, email address and name are attached to those events.
Stored — United States.
Their privacy policySentry
Error monitoring
Error reports and performance traces. When you are signed in, your user id, email address and name are attached. If an error occurs, a session replay of your screen around that moment may be captured.
Stored — United States.
Their privacy policyGoogle
Sign-in, only if you use it
If you choose Sign in with Google, Google tells us your email address, name and Google account id. We never receive your Google password.
Stored — United States and globally.
Their privacy policy
The only other times we would disclose anything
If the law compels it — a court order, a warrant or a statutory notice — or where disclosure is necessary to prevent a serious threat to someone’s life, health or safety. If we are ever compelled, we will tell you unless we are legally barred from doing so.
Cookies and local storage
How long it is kept
Your account and profiles are kept until you delete them or ask us to close the account — a visa timeline runs for years, so we do not expire them on you. Analytics and error records are kept on our providers’ standard retention, which is a matter of months, not years. Quick-check answers are never kept at all.
How it is protected
Traffic is encrypted in transit. Passwords are stored only as hashes, so nobody here can read yours. Profiles are readable only by the account that owns them. No system is perfect, and if a breach ever put you at likely serious harm we would notify you and the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Your rights
Under the Australian Privacy Principles you can ask for any of the following, free of charge.
Asking us about your data cannot affect your visa
We have no relationship with the Department of Home Affairs and no way to tell them anything about you. Emailing us to delete your account is invisible to your visa application, exactly as it should be.
Children and changes
Children
This tool is built for working-age visa holders and is not aimed at children. If you believe a child has created an account, tell us and we will remove it.
Changes to this policy
If we start collecting something new or add a provider, this page changes and the date at the top moves. If a change meaningfully affects what happens to data you have already given us, we will tell account holders by email rather than quietly editing the page.
Contact
For access, correction, deletion or a complaint, email dan.fraga33@gmail.com. We answer privacy requests within 30 days. If you would rather escalate, the Office of the Australian Information Commissioner takes complaints at oaic.gov.au or 1300 363 992.