Privacy
Privacy policy
Who we are
TrueK is operated by Daniel McGrath, ABN 40 217 739 279. You can reach us about privacy at hello@truek.com.au.
What we collect and why
We collect your Square sales and your Xero supplier bills so we can work out the gross profit on each menu item. We collect your name, phone, email, and business name to set up and secure your account, and to send you your weekly Keep and, if you turn it on, a daily pulse; your business address and ABN are collected only if you give them, for invoicing. We also hold business figures you enter yourself, such as your weekly wage total: one aggregate number, typed in by you.
What we never access
We never access your customers' details, your staff's personal information, or your Square or Xero passwords.
Where your data lives
Your data is stored and processed in Australia. Any AI processing happens in the Sydney region. All customer business data (sales, bills, recipes, and account information) is stored and processed in Australian data centre regions (Supabase and Amazon Web Services, Sydney). The one exception is email delivery: the emails we send you are delivered via Resend, whose infrastructure is located overseas, so the content of those emails transits overseas systems. Nothing about your business is shared with other cafes, or sold.
Sub-processors
Our service providers are: Supabase (database, Sydney), Amazon Web Services including AWS Bedrock (hosting and AI processing, Sydney), Vercel (application hosting, and page-view analytics with no cookies), Resend (transactional email delivery), Cloudflare (a bot check on the sign-in and join pages), and Stripe (payments, which never sees your sales or bills). Your business data is stored and processed in Australia. Email delivery via Resend involves infrastructure located overseas, meaning the content of emails we send you transits overseas systems. Each is bound to use your data only to provide their service to us.
What the AI sees
When the AI is asked to phrase a sentence, the request contains numbers and item names only. Your cafe name, your name, your email, and your address are never in it. A check runs on every request and blocks it if identity slips in.
Benchmarking
Supplier prices from your bills go into a shared pool with no cafe attached to them: no business name, no account, no quantities and no spend, just the price, the suburb and the date, which is how we build local price benchmarks. Nothing in that pool can be traced back to you, and we never show a figure until enough different cafes stand behind it that it identifies none of them. Seeing the pool in return is opt-in, and that choice is yours.
Your control
You can disconnect Square or Xero at any time from Settings, which stops syncing immediately. You can ask us for a copy of your data or to delete it.
Marketing emails
Every email we send identifies us and carries a working unsubscribe link. Unsubscribing stops the marketing emails; essential account messages may still reach you.
Publication date
This policy is published 16 July 2026.