Privacy Policy
What FlickFuel collects, why, who we share it with, how long we keep it, and the rights you have over it.
The short version. We collect what the Service needs to work — your account, what you watch and Fuel, what you upload, and what you pay for. We do not sell your personal information, we do not run behavioural advertising, and we never collect precise location. You can export your data and delete your account from inside the app. This box is a summary; the detail is below.
1. Who is responsible for your data
Indrevo, a business name of Blackhold Group Pty Ltd (ACN 702 584 790), of Suite 17, 89–97 Jones Street, Ultimo NSW 2007, Australia, is the data controller for personal information collected through FlickFuel. Privacy enquiries, access requests and complaints go to admin@flickfuel.online.
This policy is written to meet the Australian Privacy Act 1988 and the Australian Privacy Principles, the EU and UK GDPR, the CCPA as amended by the CPRA and the other US state privacy laws, Canada’s PIPEDA, and New Zealand’s Privacy Act 2020, in each market where FlickFuel is available.
2. FlickFuel is an adults-only service
FlickFuel is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to a person under 18 we close it and delete the information held under it. Because there is no under-18 tier, we do not operate parental-consent flows and we do not process children’s data.
At sign-up we establish that you are over 18. We record only the outcome — an over-18 flag and the date — and we destroy any document, image or artefact used to reach that outcome once the decision is recorded.
3. What we collect
| Category | What it is | Why we have it |
|---|---|---|
| Account | Email address, display name, sign-in identifier from Apple, Google or email, profile text and avatar, the over-18 flag, country from your store or device locale | To create and secure your account, to apply the age rule, and to show the right Festival |
| Activity | Films you swipe, watch, save and Fuel; Q&A and Notes you post; Makers you follow; watch duration on previews | To run the deck and the Festival, to award earned Fuel, and to rank films |
| Wallet and ledger | Your earned and purchased Fuel balances and an entry for every Fuel movement | To keep the Festival honest and auditable, and to detect manipulation |
| Uploads (Makers) | Films and trailers, titles, loglines, synopses, posters, declared AI tools, originality attestations, content descriptors | To publish, moderate and judge entries |
| Payment | Subscription and purchase records, transaction identifiers, the last four digits and brand of a card. We never see or store full card numbers. | To provide what you paid for, to handle refunds, and to meet tax and accounting obligations |
| Maker payouts | For Makers receiving a Production Grant: identity and tax details collected and held by our payments provider under its own KYC obligations | To pay grants lawfully and to meet anti-money-laundering and tax rules |
| Device and technical | Device model, operating system version, app version, language, IP address, crash reports, performance traces, app-integrity attestations | To keep the app working, to fix crashes, and to stop fraud and abuse |
| Support | Messages you send us and our replies | To answer you and to keep a record of the issue |
What we do not collect: precise or background location, contacts, calendar, photos other than what you deliberately upload, health data, biometric templates, or any special-category data. We do not build advertising profiles and we do not track you across other apps or websites.
4. Why we are allowed to use it
| Purpose | Lawful basis (GDPR / UK GDPR) |
|---|---|
| Providing the Service you signed up for — account, deck, player, Fuel, uploads, purchases | Performance of a contract |
| Moderating content, preventing fraud, protecting the Festival from manipulation, securing the Service | Legitimate interests |
| Keeping the age rule, keeping tax and payment records, answering lawful requests | Legal obligation |
| Push notifications you switch on, and optional emails | Consent, withdrawable at any time |
| Product analytics and crash reporting | Legitimate interests; you can opt out in Settings |
Where we rely on legitimate interests we have weighed them against your rights, and we will explain that assessment on request.
5. Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Under the CCPA and the other US state laws, we have not sold or shared personal information in the preceding 12 months. We disclose to the following service providers, each under contract and only for the purpose listed.
| Provider | What it handles | Where |
|---|---|---|
| Google Firebase | Authentication, database, cloud functions, notifications, crash reporting, app integrity | United States |
| Cloudflare | Video transcoding, streaming and master storage | Global edge network |
| Stripe | Payments, and identity and tax verification for Maker payouts | United States, Ireland, Australia |
| Apple, Google | Billing, where you purchase inside an app store | United States |
| Sentry | Error monitoring | United States |
| Content-safety providers | Automated screening of video and text before publication; audio fingerprinting for copyright | United States |
We also disclose where the law requires it, to respond to a valid legal request, to protect someone’s safety, to report material we are obliged to report, or in connection with a sale or restructure of the business (in which case this policy continues to apply to the information transferred).
6. Information sent overseas
FlickFuel is operated from Australia and the providers above are largely in the United States and the European Union, so your information is transferred overseas. We take reasonable steps to ensure overseas recipients handle it consistently with the Australian Privacy Principles (APP 8), and for transfers out of the EEA or the UK we rely on Standard Contractual Clauses or an adequacy decision.
7. How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | While your account is open; deleted on account deletion |
| Fuel ledger entries | Anonymised on deletion; retained in anonymised form for Festival integrity |
| A film others have Fueled | Up to 30 days after deletion in anonymised form, then purged |
| Film masters after a copyright takedown | 12 months, to handle counter-notices and disputes |
| Payment and tax records | 7 years, as Australian tax law requires |
| Moderation and safety records | Up to 24 months, to enforce strikes and answer regulators |
| Crash and performance data | 90 days |
| Age-verification artefacts | Destroyed immediately once the over-18 decision is recorded |
8. Your rights
Wherever you live, you can:
- Access the personal information we hold about you, and get a copy;
- Correct anything inaccurate — much of it directly in the app;
- Delete your account and your personal information, from Settings inside the app, without contacting us first;
- Export your data in a portable, machine-readable format;
- Object to or restrict processing we base on legitimate interests;
- Withdraw consent for notifications or optional emails at any time;
- Complain without being treated differently for having done so.
We answer requests within 30 days and we do not charge for them. We may ask you to confirm your identity first. California residents additionally have the right to know the categories collected, disclosed and sold or shared (we sell and share none), the right to limit the use of sensitive personal information (we use none for the purposes that right covers), and the right not to be discriminated against for exercising any of these rights; an authorised agent may act for you.
9. Complaints
Write to admin@flickfuel.online and we will acknowledge within 5 business days and answer within 30 days. If you are not satisfied you may complain to your regulator: in Australia, the Office of the Australian Information Commissioner (oaic.gov.au); in the EU, your national supervisory authority; in the UK, the Information Commissioner’s Office (ico.org.uk); in New Zealand, the Office of the Privacy Commissioner; in Canada, the Office of the Privacy Commissioner of Canada.
10. Security, and what happens after a breach
We use encryption in transit and at rest, signed and time-limited video URLs, server-side authority over every balance and every award, app-integrity attestation, least-privilege access for our own staff, and a hash-chained ledger that makes tampering detectable. No system is perfectly secure, and we do not claim otherwise.
If an eligible data breach occurs we notify the OAIC and affected individuals as the Notifiable Data Breaches scheme requires, we notify the relevant EU or UK supervisory authority within 72 hours where the GDPR applies, and we notify under each other applicable regime on its own timetable.
11. Cookies and the website
flickfuel.online uses only what it needs to serve the page. We do not set advertising or cross-site tracking cookies, and we do not embed third-party trackers. The mobile app does not use cookies; it uses secure local storage for your session and your settings.
12. Automated decisions
Automated systems screen uploads and comments before publication, and flag unusual Fuel activity. These systems can hold content back or restrict a feature, but no award, no grant and no account termination is decided by automation alone — a person reviews it. You may ask for human review of any automated outcome by writing to us.
13. Changes to this policy
We will post any change here and update the version and effective date. Where a change is material we will give notice in the app or by email at least 14 days beforehand.
14. How to contact us
Indrevo, a business name of Blackhold Group Pty Ltd (ACN 702 584 790)
Suite 17, 89–97 Jones Street, Ultimo NSW 2007, Australia
admin@flickfuel.online