ComfortStop Privacy Policy

This Privacy Policy explains how Landform Solutions Pty Ltd (ABN 40 113 719 010), trading as ComfortStop ("ComfortStop," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you use the ComfortStop mobile app, the ComfortStop website at comfortstop.travel, and any related services (together, the "Service").

We are based in Duncraig, Western Australia, Australia. Our Service is used by travelers around the world, including in the European Union and United Kingdom, so this Policy is written to meet our obligations under the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles, the EU General Data Protection Regulation (GDPR), and the UK GDPR, as applicable.

Please read this Policy alongside our Terms of Use. If you do not agree with this Policy, please do not use the Service.

1. Information We Collect

1.1 Information you give us directly

• Account details: given name, family name, email address, and password (or, if you sign in with Facebook, the name and email address Facebook shares with us).
• Phone number — optional, collected if you choose to add it (used for select ComfortStop Plus features, such as sharing a callback number with a partner café).
• Accessibility preference — the mobility/accessibility filter you set in search, saved to your profile so you don't have to re-enter it every visit.
• Reviews, star ratings, quick-tag selections, written comments, and any photos you submit about a venue.
• Free-tier sign-up details: email address and, optionally, first name, if you use ComfortStop's free trial searches without a full membership.
• Payment-related identifiers: Stripe assigns your account a customer reference so we can manage your subscription. We do not collect or store your full card number, expiry date, or CVC — Stripe, Apple, or Google Play handle that directly (see Section 4).
• Anything you send us directly, such as a support or account-deletion email to hello@comfortstop.travel.

1.2 Information collected automatically

• Location data — with your device permission, used to find nearby bathroom stops. For free-tier searches, we also log the approximate search location and time against your free-tier sign-up, so we can see where demand exists and decide where to expand ComfortStop's coverage next.
• A hashed device identifier for free-tier accounts, used only to limit abuse of the free-search allowance (e.g. stop the same device claiming unlimited free searches). This is a one-way hash — we cannot reverse it to identify your device.
• Basic technical data such as app version, device type, and error logs, used to keep the Service running and to diagnose problems.

1.3 Cookies and local storage

The ComfortStop website and app do not use cookies. We do store a small number of items directly on your device:

• Your login session token (so you stay signed in) — this is the only one of the three that contains personal data.
• A flag recording whether you've already seen the Coverage Upsell prompt, so we don't show it to you repeatedly.
• Your voice-guidance mute preference.

None of these are used for advertising or cross-app tracking, and we do not use any third-party analytics or advertising SDKs that track you across other apps or websites.

2. How We Use Your Information

We use the information above to:

• Create and run your account, and remember your accessibility preference between visits.
• Show you nearby bathroom stops that match what you're looking for, and display your submitted reviews and photos to other travelers (attributed to your profile name).
• Process and manage your ComfortStop or ComfortStop Plus subscription, including renewals and cancellations.
• Decide where to expand ComfortStop's coverage next, using aggregated and individual free-tier search-location data.
• Send you service emails (e.g. welcome emails, receipts, password resets) and, if you've opted in, marketing emails via MailerLite. You can unsubscribe from marketing emails at any time.
• Keep the Service secure, prevent abuse of the free tier, and fix bugs.
• Meet our legal obligations, including responding to lawful requests from authorities.

3. Our Legal Bases for Processing (EU/UK Users)

Where the GDPR or UK GDPR applies to you, we rely on the following legal bases:

• Contract — to create your account, run your subscription, and provide the Service you've signed up for.
• Consent — for optional items such as marketing emails, your phone number, and photo submissions. You may withdraw consent at any time.
• Legitimate interests — to keep the Service secure, prevent free-tier abuse, and understand where to expand coverage, balanced against your right to privacy.
• Legal obligation — where we must retain or disclose information to comply with the law.

4. How We Share Your Information

We do not sell your personal information. We share it only as follows:

• Supabase — our database, authentication, and file storage provider. Your account and content data is hosted on Supabase's EU infrastructure (Frankfurt, Germany).
• Stripe — processes web/PWA subscription payments. Stripe receives your payment details directly; we never see or store your card number.
• Apple and Google — process in-app subscription payments made through the App Store or Google Play, under their own privacy policies, which we encourage you to review.
• MailerLite — our email marketing platform, used only for travelers and café partners who opt in to receive emails from us.
• Zoho Mail — hosts our business inbox (hello@comfortstop.travel); support and deletion requests sent there are handled by us directly.
• Other ComfortStop users — your profile name is shown alongside reviews and photos you choose to submit.
• Law enforcement or regulators, where we are legally required to disclose information, or to protect the rights, property, or safety of ComfortStop, our users, or the public.
• A future buyer or successor, if ComfortStop is ever sold, merged, or reorganised — your information would transfer as part of that business, and you would be notified.

None of these parties are permitted to use your personal information for their own marketing purposes.

5. Third-Party Content Shown in the App

Some information you see in ComfortStop — such as a venue's rating, review count, or photos — is fetched live from the Google Places API at the moment you view it, and is not stored by us beyond a Google place reference ID. Venue locations are primarily sourced from OpenStreetMap contributors (under the Open Database Licence) and street-level imagery may come from Mapillary, both shown with the attribution these licences require. None of this involves sharing your personal information with Google, OpenStreetMap, or Mapillary — it is one-directional content we display to you, not data we send about you.

6. International Data Transfers

Because Landform Solutions Pty Ltd is based in Australia and our database is hosted in the European Union, your information may be transferred between Australia, the EU, and other countries where our service providers operate (including the United States, for Stripe, Apple, Google, and MailerLite). Where required, we rely on our providers' standard contractual clauses or equivalent safeguards recognised under GDPR/UK GDPR for these transfers.

7. Data Retention

We keep your account and content information for as long as your account is active, and afterwards as described in Section 8 below. Reviews and photos you submit remain part of ComfortStop's community content even after your account is deleted — see Section 8 for how this works. Free-tier search logs are retained to inform coverage decisions; we may retain aggregated, de-identified versions of this data indefinitely for planning purposes.

8. Deleting Your Account

You can delete your ComfortStop account at any time from within the app, under Account → Delete Account. Deleting your account:

• Immediately cancels any active subscription (no further charges will be made).
• Immediately disables your login, so the account can no longer be used to sign in.
• Anonymizes your reviews, ratings, and photos — this content remains visible to help other travelers (consistent with the licence you grant us in our Terms of Use), but it is disconnected from your name and account.
• Permanently and irreversibly erases your remaining personal account data — including your name, email, phone number, and accessibility preference — 30 days after your deletion request, once that grace window has passed.

You can also request deletion by emailing hello@comfortstop.travel if you're unable to use the in-app option; we'll action email requests within a reasonable time and confirm once complete.

9. Your Privacy Rights

9.1 European Union and United Kingdom

If the GDPR or UK GDPR applies to you, you have the right to: access the personal information we hold about you; correct inaccurate information; request erasure; restrict or object to certain processing; request a portable copy of your data; and withdraw consent at any time where we rely on consent. To exercise any of these rights, email hello@comfortstop.travel. You also have the right to lodge a complaint with your local data protection authority.

9.2 Australia

Under the Australian Privacy Principles, you may request access to, and correction of, the personal information we hold about you. If you believe we have mishandled your information, you can contact us at hello@comfortstop.travel, or lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you're not satisfied with our response.

9.3 California

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) to know what personal information we hold about you and to request its deletion. We do not sell or share personal information for cross-context behavioural advertising. To exercise these rights, email hello@comfortstop.travel.

10. Children's Privacy

ComfortStop is not directed at, and is not intended for use by, anyone under 18 years of age, and we do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will delete it promptly. If you believe someone under 18 has provided us with personal information, please contact hello@comfortstop.travel.

11. Security

We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS) between your device and our servers, and database-level access controls (Row Level Security) that restrict who and what can read your data. No system is completely secure, and we cannot guarantee absolute security, but we work to protect your information and to respond promptly if something goes wrong.

12. Changes to This Policy

We may update this Privacy Policy from time to time, for example as the Service grows or the law changes. We'll update the "Last updated" date at the top of this page, and where a change is significant, we'll let you know in the app or by email before it takes effect.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, contact us at:

Landform Solutions Pty Ltd (ABN 40 113 719 010)
Trading as ComfortStop
Duncraig, Western Australia, Australia
Email: hello@comfortstop.travel
Web: comfortstop.travel