Privacy policy
Ruvara is a small Australian business. This page says, in plain words, what we collect, why, who else sees it, and how to get rid of it.
Last updated 24 September 2026
Who we are
Ruvara is a registered business name of Charlie St Clair, a sole trader in Queensland, Australia, ABN 89 936 168 692. You can reach us at ruvara.app@gmail.com about anything on this page.
We handle personal information under the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you are in the UK or the European Economic Area, we also honour your rights under the UK GDPR and the GDPR.
What this covers
The Ruvara mobile app, this website, and the early-access list. It does not cover Instagram, Facebook, Apple, or anyone else you deal with directly. Their policies are their own.
What we collect
When you set up the app
- Your email address and a password, so the account is yours.
- Your business name, phone number, trade or service, and the suburbs you work in.
- Your brand kit: logo, colours, tagline, website, social handles, and licence number if you add one.
- Anything you add to teach Ruvara your style, such as reference photos, files, or notes.
When you make a post
- The photos you take or choose, and the words you type, such as the job, the suburb, or a review.
- A count of posts made, so your plan and credits add up.
When you use this website
- Your email address, and your trade if you choose to give it, when you join the early-access list. That is the whole record. There is no analytics script, no advertising pixel, and no third-party tracking cookie on this site.
- Ordinary server logs kept by our hosting provider, including IP address and browser type, used to keep the site up and to stop abuse.
Where your photos live
Your photos stay on your phone. Ruvara builds the finished post on the device itself. A photo leaves your phone only when you choose to publish or share it, or when a feature you have turned on needs it.
To publish straight to Instagram, the finished post has to be hosted at a web address for a short time, because that is the only way Instagram accepts an image. We delete it once Instagram has collected it. Until you turn that on, it never happens.
What we do with it
- To make your posts: your brand kit and your photos are the raw material.
- To run your account: signing in, your plan, your credits, and support.
- To write captions: the words on the post, your tone, your trade and your suburbs are sent to an AI provider that writes the caption. Your photos are not sent for this.
- To make Ruvara sound more like you: we keep the captions you approve and the edits you make to them, and feed recent examples back to the AI so the next caption lands closer to your voice. This shapes your account only. It is not used to train the AI provider’s underlying model, and it is never pooled with other businesses. You can clear these examples at any time by asking us, and deleting your account removes them.
- To tell you the thing you asked to be told, such as when early access opens.
We do not sell your information, we do not rent it, and we do not hand it to advertisers. We do not use your photos to train anyone’s AI model.
Who else sees it
- Meta (Instagram and Facebook), but only if you connect an account, and only the post and caption you asked to publish.
- Apple, for the App Store and for payments, if you subscribe. We never see your card.
- Our hosting and database providers, who store the data on our behalf under contract.
- An AI provider, for caption writing, as described above.
- Anyone we are legally required to tell, such as a court or a regulator.
Some of these providers are overseas, including in the United States. We only use providers who commit to protecting the information to a standard comparable to Australian law.
How long we keep it
- Your account and brand kit: while your account is open, then deleted within 30 days of you closing it.
- The caption examples that teach Ruvara your voice: until you clear them or close your account.
- Posts you have made: on your device until you delete them.
- The early-access list: until Ruvara opens, or until you ask us to remove you, whichever comes first.
- Billing records: seven years, because Australian tax law says so.
Your rights
You can ask us to:
- show you what we hold about you;
- correct anything that is wrong;
- delete it;
- send it to you in a portable format;
- stop using it for a particular purpose.
Email ruvara.app@gmail.com and we will answer within 30 days, usually much sooner. There is no charge.
If you are not happy with how we handled it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Deleting your data
There is a separate page with the exact steps: how to delete your data.
Security
Traffic is encrypted in transit. Passwords are hashed, never stored as text. Access to the database is limited to what is needed to run the service. No system is perfect, and we will tell you promptly if something happens that puts your information at real risk, as the law requires.
Children
Ruvara is for businesses and is not intended for anyone under 16. We do not knowingly collect information from children.
Changes
If this policy changes in a way that matters, we will say so in the app and update the date at the top. The current version always lives at this address.