Privacy
Last updated 19 September 2026. OhGood is built in Melbourne and follows the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Because almost everything here is about somebody's child, there is a section below that says exactly what we hold about a child and how you get rid of it.
The four promises
- Your data is encrypted. In transit over TLS, and at rest in the database and file store. School letters and photographs of a child's note are private documents and are stored as such — no attachment is readable from a public URL.
- We never sell your data. Not to advertisers, not to schools, not to anyone. There are no third-party trackers in the app.
- Your data is never used to train models. We use a commercial AI provider to read your captures, under zero-retention, no-training terms. Your messages are not kept by them and never become training data — ours or theirs.
- You can delete everything. “Delete household” in Settings removes your captures, their attachments, every item made from them, your children and your account. It is immediate and it is not recoverable.
What we store, and why
- Your account
- Name, email address and a hashed password. We never store the password itself.
- Your children
- First name, and optionally a nickname, school, year level and date of birth — entered by you, used only to work out which child a message is about. Children do not have accounts and we do not contact them. There is more detail under Children's information below.
- What you send in
- The email, photo, PDF, voice note or typed line, kept so that every date in your plan can be traced back to where it came from. Raw captures are kept for 90 days by default; the items extracted from them stay until you delete them.
- What we work out from it
- Events, tasks and notices, each with a date, an action and the child it belongs to. Plus an audit record of changes, so a wrong answer can be explained rather than guessed at.
Who can see it
Only the members of your household. Every query in the app is scoped to one household, and the calendar feed is protected by a secret in its address — treat that link as private. Our staff do not browse customer data; support access needs a specific reason and is recorded.
Children's information
This app exists to keep track of children, so being precise about this matters more than anything else on the page.
- What we hold about a child. Their first name, and only if you enter them: nicknames, their school, their class or year level, and their date of birth. Alongside that, whatever the school's own messages happen to say about them — that they are on the Year 5 camp list, that they need a mouthguard for House sport — because those messages are what the plan is built from. Nothing else. We do not ask for a photograph of a child, a Medicare number, a medical record or an address.
- A child has no account. They cannot sign in, we never contact them, and we do not advertise to them or profile them. Every record about a child exists because a parent put it there or forwarded a message containing it.
- It is never sold. Not to advertisers, not to schools, not to anyone, in any form — including aggregated or de-identified.
- It is never used to train a third-party model. Reading your captures means sending them to a commercial AI provider. We do that under zero-retention, no-training terms: the provider does not keep your messages and may not train on them. We do not train models on your family's data either.
- How you delete it. Remove one child from the Children screen and that child's record and their attachment to every item goes with them. To remove everything, use “Delete household” in Settings: it hard-deletes the captures, the files behind them, every item extracted from them, all the children and your own account. It happens immediately, there is no recovery window, and we cannot restore it afterwards even if you ask.
Your rights
Under the Australian Privacy Principles you can ask for a copy of your data, correct it, or have it deleted, and you can complain to us and then to the Office of the Australian Information Commissioner if we handle it badly. The copy is a phase away from being a button; the correction and the deletion are already in the app — edit anything from the item screen, or delete the household from Settings. For anything else, email privacy@ohgood.app.
What is not built yet
OhGood is early. There is no email verification or password reset yet, and no Gmail connection — you forward mail to your own OhGood address instead. When those ship, this page changes with them and the date at the top moves.