Legal

CDR and Consent

Effective date being confirmed

Consent is your explicit permission for MyMoneyMedic to access your financial data. Under CDR regulations, you are the boss. You decide:

  • What data we see.
  • How long we see it.
  • What we are allowed to do with it. We will only ever use your data for the specific purposes you have agreed to.

2. What Data Are We Collecting?

When you connect your bank via our secure partner (Basiq), we request access to the following:

  • Account Details: Account names, numbers, and types.
  • Transaction History: A record of what you've spent, where, and when.
  • Balances: Your current and available funds.

Important: MyMoneyMedic never sees, stores, or asks for your banking passwords or PINs. Your login happens directly through your bank's secure portal.

3. Why Do We Need This Data?

We use your data strictly to power the "Medic" tools designed to improve your financial well-being:

  • Burn Monitor: To identify recurring leaks and "lazy" subscriptions.
  • Budget Health Report: To analyse your monthly trends and offer improvements.
  • Resilience Score: To calculate how protected you are against financial shocks.
  • Personalised Recommendations: To suggest partner services (like lower-interest loans) that fit your specific financial profile.

Your privacy has an expiration date.

  • By law, your consent is valid for up to 365 days.
  • After 365 days, Alex AI will prompt you to "re-authenticate" to keep your data flowing.
  • If you do not renew, your data feed stops automatically, and we will no longer collect new information.

You can change your mind at any time. To withdraw consent:

  • Open the MyMoneyMedic App.
  • Go to Settings > Connected Accounts.
  • Select the bank you wish to disconnect and tap "Remove Access."

What happens to my data? Once access is removed, we stop receiving new data immediately. Regarding your historical data, you have the "Right to Deletion." You can request the permanent deletion of your data by contacting support@mymoneymedic.com. If deletion is not requested, any retained data will be de-identified and used only for general platform analytics.

6. Who Else Sees My Data?

  • Our Partners: We share your data with Basiq (our Accredited Data Recipient partner) solely to facilitate the connection.
  • No Selling: We do not sell your personal data to third-party advertisers.
  • No Employer Access: We do not share your individual data with your employer, even if they sponsor your subscription.

7. Your Security is Our Priority

  • Encryption: Data is encrypted at rest and in transit using AES-256 standards.
  • Regulatory Compliance: Our practices are governed by the CDR and overseen by the ACCC/OAIC.