Privacy Policy (TPW Mobile App)

TPP Projects Pty Ltd, ACN 652 696 190, ABN 88 652 696 190, trading as The Play Way (we, us, our, or The Play Way), values the protection of your personal information.

This policy explains how we collect, hold, use and disclose personal information in connection with The Play Way mobile application (the App), its connected services through The Play Way Hub (the Hub), and support. It also explains how to access or correct your information and raise a privacy concern.

The App and Hub use connected account and profile information. Information supplied through either service may be available through the other, according to access permissions and sharing settings. Read this policy alongside our general Privacy Policy for our other services. This policy forms part of the App's End User Licence Agreement (EULA).

Information we collect and hold

Depending on how you use the services, we collect and hold:

  • Account and profile information: contact and sign-in details, names, child dates of birth, profile images, and relationships and permissions linking people to profiles.
  • Content you create or upload: text, images and other media (user-generated content), including contributions from other authorised people and information about authorship and sharing. We also collect your saved selections.
  • Communications and preferences: enquiries, support messages, feedback and communication preferences.
  • Technical information: device and notification identifiers, App and device details, usage and network information, crashes, errors and logs.

We collect information directly from you when you use the services or contact us, automatically through the App, and from your chosen sign-in provider and other people authorised to contribute to a profile. Sign-in information may be used to create or connect your App and Hub account. Third-party sign-in providers also handle information under their own privacy policies.

Children's and sensitive information

Account holders must be 18 or over. Children's profiles are managed by parents, guardians or other authorised adults. If you provide a child's information, you must be their parent or legal guardian or have permission from their parent or legal guardian. Professional users must obtain informed parental or guardian consent and explain what they and their service can see. You must also have authority and any necessary consent to provide another person's information.

Profile information and content you provide may include health, disability, developmental or other sensitive information. We collect sensitive information where reasonably necessary for our services, with the consent required by law, or where otherwise permitted or required by law. When seeking consent, we explain the purpose and sharing arrangements and consider who can give it, including a child's capacity and applicable law. Please provide only relevant information you are authorised to share.

Personal information via the App

The App stores session information, guest profiles, preferences and cached content on your device. Guest profiles and saved selections are stored locally; connected features use Hub records. Signing out does not necessarily remove cached or guest information or sign you out of other devices or services.

We use diagnostic and notification services to support App reliability and communications. These services may process technical information when the App starts, including before sign-in. Guest use is therefore not necessarily anonymous. You can manage notification permissions in your device settings, but turning off notifications or marketing does not necessarily stop diagnostic or notification-service processing.

Web pages opened from the App may use cookies or browser storage under their applicable notices. Browser cookie settings do not control the App's own storage, and identifiers may be linked to you or your account.

Your option not to provide your personal information

Where possible, you can remain anonymous or use a pseudonym, including when making an enquiry. Some information is needed for particular features, such as sign-in details for connected services and a child's first name and date of birth for a child profile. Without it, we may be unable to provide that feature.

You choose whether to create or upload content. Uploaded images may contain embedded camera or location information. Optional marketing, surveys and research are voluntary; we explain any additional information sought and its intended use at the time.

We seek specific consent where required by law. Accepting the EULA or providing information is not blanket consent to optional marketing or unrelated uses.

Use and disclosure of your personal information

We use personal information to:

  1. manage accounts, profiles and permissions and provide connected App and Hub features, including saved and shared content;
  2. respond to enquiries and maintain and improve the services' reliability and security;
  3. send necessary service communications and manage optional marketing according to your preferences; and
  4. meet legal obligations and deal with disputes or requests where permitted or required by law.

We do not sell or rent personal information. Unrelated use of identifiable child records or sensitive information for marketing or research requires an appropriate lawful basis and any necessary specific consent.

We use service providers for authentication, hosting, databases, media storage and delivery, email, support, diagnostics and notifications. They receive information relevant to their work, including content where needed to provide the service. We take reasonable steps to put appropriate privacy and security arrangements in place with them.

We may also disclose information where required or authorised by law. Where lawful and reasonable, we will direct a third party requesting your information to you and notify you before a compelled disclosure.

Sharing and access to content

Profile information and shared content may be available to authorised carers and professionals across the App and Hub, according to access permissions and sharing settings. Some features share content by default. Newly authorised people can see previously shared content.

Private settings limit what other users can see in the service's normal views; profile access alone does not give others access to private content. Your own access may depend on your continuing permission to use the relevant profile. We and our service providers still process the content for the purposes described in this policy.

Contact us for help with corrections, deletion or sharing changes unavailable through the App or Hub controls.

Security of personal information

We take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure, including sign-in checks and access controls. Staff access is limited to what they need for their work.

No system or internet transmission is completely secure. We assess suspected data breaches and notify affected individuals and regulators where required by law. Please protect your device and sign-in details and contact us if you suspect unauthorised access.

Accuracy and quality of personal information

We take reasonable steps to keep personal information accurate, up to date and complete, and relevant to the purpose for which it is used or disclosed. Information may also be supplied or changed by another authorised person. Please let us know if information about you or someone you represent needs correction.

Access to your personal information

In most cases, you have the right to access personal information we hold about you. Contact our Privacy Officer using the details below. We may need to verify your identity and your authority to act for another person.

We will respond within 30 days and explain any additional information or time needed to complete the request. We may refuse access only where the law permits or requires it. If we refuse, we will provide written reasons unless it would be unreasonable to do so, explain how to complain and consider reasonable alternative ways to provide access.

Correction of your personal information

You can update some information through profile settings or contact our Privacy Officer if information is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity and authority to act.

We will respond within 30 days and explain any further information or time needed. We do not charge for correction requests, corrections or associating a statement with information. If we refuse a correction, we will give written reasons unless it would be unreasonable to do so and explain how to complain. You may ask us to associate a statement recording your concern with the information.

If we correct information previously disclosed to another organisation or agency, you may ask us to notify them. We will take reasonable steps to do so unless impracticable or unlawful.

Overseas transfer of personal information

Our databases and primary photo storage are in Sydney, Australia. Some service providers may process information overseas, including in the United States and the Netherlands, depending on the service. Australian storage does not mean all processing or support occurs in Australia.

Before disclosing information overseas, we take the steps required by applicable privacy law, including reasonable steps to ensure recipients handle it consistently with the Australian Privacy Principles where required. Where relying on consent requires a specific explanation, we provide that explanation and seek consent separately.

Concerns and complaints about breaches

Contact our Privacy Officer with your concern and the outcome you are seeking. We will acknowledge the complaint, investigate and respond within 30 days. If more time is needed, we will explain why and when we expect to complete our response.

If you are dissatisfied with our response or we have not responded within a reasonable time, you can complain to the Office of the Australian Information Commissioner.

Disposal of personal information not required

We generally keep saved account, profile, content and media records until you request deletion, rather than on a fixed schedule. Temporary photo uploads are processed and cleaned up separately. Backups, logs and support records are retained until manual deletion or expiry under provider settings. In all cases, we take reasonable steps to destroy or de-identify information no longer needed for a lawful purpose, unless retention is required by law.

Removing a profile, signing out, cancelling a membership or uninstalling the App does not itself delete the underlying account or records. Shared contributions may remain available to other authorised people after your profile access ends; private content does not become shared. Some content-deletion controls remove content from view but retain its stored records until separately erased. Associated files may also require further removal.

Request deletion of your connected App and Hub account from Settings → Delete My Account or our public deletion page. We email a confirmation link to the verified account address. Opening that link does not close the account: you must select Confirm account deletion on the page. The link expires after 24 hours, and you can request another.

Confirmation submits your request to our team. Your App and Hub account remains active until our team processes deletion, within 30 days of confirmation. We send a receipt with the deadline and a completion email. We cancel future Hub membership renewals as part of this process; refunds are handled separately. Deletion cannot be undone through the App.

We remove your personal information, access and contributions. Child profiles remain available where another active parent or carer has confirmed access; otherwise we include the child profiles in deletion, subject to required retention. Another person's independent contributions are handled according to their rights and permissions. We may need to clarify authority over disputed or professionally managed records.

Records that must be retained for a lawful purpose are restricted. The completion email explains the retained categories, reason and applicable expiry. Backups and provider copies follow their retention schedules; account deletion is not a promise that every backup copy disappears within 30 days. We retain limited deletion-request evidence for its approved retention period. Contact our Privacy Officer at ask@theplayway.com for assistance, including if you cannot access the verification email.

Unsubscribing from our email database

Marketing emails are optional. Use the unsubscribe link in a marketing email or email ask@theplayway.com with “UNSUBSCRIBE” in the subject line. Please contact us if marketing continues after your request. We keep a record of your unsubscribe request.

App and Hub marketing preferences are currently separate. Changing the App setting does not confirm an opt-out across all our mailing lists; contact us for an all-TPW marketing request.

Opting out does not stop necessary service emails, such as requested verification codes and account, security, privacy, billing or material service-change notices. These are not used for advertising or promotions. Signing in, receiving a code or belonging to a service-contact list is not marketing consent.

Contacting us

For privacy questions, access, correction or deletion requests, or complaints, contact our Privacy Officer, the person in our team responsible for privacy:

  • Email: ask@theplayway.com
  • Phone: 1800 953 761
  • Post: Privacy Officer, TPP Projects Pty Ltd, 19 Hume Street, Yarrawonga, Victoria 3730

Amendments to this Privacy Policy

We keep this policy up to date and publish its effective date. For significant changes, we will notify you through the App at least 14 days before they take effect, unless it would be unreasonable in the circumstances. We may also notify you directly where appropriate.

If a change requires consent, we will seek it before relying on the change. Continued use of the App is not, by itself, consent to a new use or disclosure requiring specific consent.

This Privacy Policy was last updated on 2 October 2026. It is available through the App and at https://theplayway.com/pages/privacy-policy-tpw-mobile-app. Contact our Privacy Officer for a free copy. General privacy information is available at https://www.oaic.gov.au.