Last updated: 10 September 2026
Aeora Group Pty Ltd (ABN 95 696 733 945), trading as Flait ("Flait", "we", "us" or "our") provides an AI-powered meal-planning, grocery price comparison and nutrition app for Australian users. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it. We are committed to handling your information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Creating an account or using the app does not grant permission to share personal data with third-party AI companies. AI processing requires a separate, explicit choice in the app before information is sent. You may decline and use features that do not require AI.
We collect the following categories of information:
We do not sell your personal information. We do not use your sensitive health information for advertising.
We use service providers for the functions below. Some providers process information outside Australia. The AI recipients are named here and in the permission screen before you can enable their processing.
AI permission is off until you explicitly allow a group of named recipients. We record the selection, decision time and disclosure version. Selecting a checkbox alone does not grant permission; the choice must save successfully. You can change or withdraw it in Settings → Flait & AI. Withdrawal blocks future AI processing and does not delete information already lawfully sent. Device camera or microphone permission is separate from permission to send that input to AI companies.
AI service recipients: OpenAI, Anthropic, Google (Gemini), Groq. Their provider jurisdiction is the United States; this does not mean processing is restricted to the United States. Processing may also occur in other countries under the applicable commercial agreements.
We require AI providers receiving your personal data to protect it to the same or an equivalent standard as described in this policy, through applicable commercial service terms and data-processing agreements. These include confidentiality, appropriate security safeguards, processing for agreed purposes, and protection obligations for subprocessors. Limited retention for service operation, abuse prevention or legal requirements may still apply. Retention varies by provider and feature; we do not promise zero retention. Processing may occur internationally under the applicable agreements. Australian Privacy Principle 8 may apply. Contact us for safeguard details or deletion requests.
We keep your personal information for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or de-identify your personal and health information within a reasonable period, except where we are required to retain certain records to meet legal, security or dispute-resolution obligations. Aggregated or de-identified data that cannot reasonably identify you may be retained.
Enforcement and anti-abuse signals. Where an account is suspended or banned for breaching our terms, we record technical signals associated with that account — such as IP address, device identifier, payment fingerprint and email pattern — so that we can enforce the suspension and detect attempts to evade it. We rely on our legitimate interest in protecting the service and our users. These signals are used only for enforcing our terms and detecting evasion. They are never used for advertising, marketing, seller targeting, product analytics or to train any model. We delete them 12 months after they are recorded.
Under the Australian Privacy Act and, where applicable, the EU GDPR and the California Consumer Privacy Act (CCPA), you may have the right to:
You can update much of your profile and dietary information, or delete your account, directly from the account section of your settings page. For any other request, contact us at privacy@flait.app.
The data controller is Aeora Group Pty Ltd.
We use cookies and similar technologies to keep you signed in, remember your session, and operate essential app functionality. These are necessary for the app to work. You can control cookies through your browser settings, but disabling them may prevent you from signing in or using parts of the service.
We take reasonable technical and organisational measures to protect your information, including encryption in transit, access controls and authentication via our hosting provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach likely to cause serious harm, we will notify affected users and the OAIC as required under the Notifiable Data Breaches scheme.
Flait is intended for users aged 16 and over. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy and will revise the date above and notify you of significant changes. Continued use does not grant new AI sharing permission. Changes to the AI recipient disclosure require a new explicit decision before personal data is sent under that disclosure.
If you have questions about this policy or how we handle your information, contact us at privacy@flait.app.