Privacy Policy.

Migration Assist is an AI-assisted mobile and web application that helps people understand their options for Australian visa pathways. This Privacy Policy explains what data the app collects, how it is processed, where it is stored and your rights over it.

• Guided assessments are saved on your device by default.
• AI-assisted assessments are also saved on your device; any documents you upload are stored in a private folder in our Supabase Storage scoped to your account.
• Document analysis runs in a server-side Edge Function. The OpenAI / LLM API key never lives in the mobile or web client.
• We do not sell your personal information and we do not use your data to train third-party models.
• You can sign in or use the app as a guest without an account.

This summary is provided for convenience; the rest of the policy is the binding text.

Migration Assist is operated by Beyond Human, an Australian AI studio (ABN 37 696 717 058), Suite 40, 5-7 / 200 Kingston Road, Slacks Creek QLD 4124, Australia. For the purposes of the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), Beyond Human is the entity responsible for personal information handled through the app.

You can contact us at support@beyondhuman.dev.

3.1 Information you provide

• Account information — if you create an account, your email address and an encrypted password (handled by Supabase Auth).
• Assessment inputs — answers to the guided questionnaire (age, occupation, English level, qualifications, work experience, family situation, etc.) used to estimate visa pathways and points.
• Uploaded documents — files you submit to the AI assistant (e.g. passports, qualification scans, employment letters) for analysis.
• Support correspondence — messages you send us by email or LinkedIn.

3.2 Information collected automatically

• Technical data — device type, OS version, app version, crash logs and diagnostic events used to keep the app working.
• Usage data — anonymous, aggregated counters such as screen views and feature usage, used to improve the product. We do not build advertising profiles.

3.3 Information we do not collect

• We do not collect precise device location.
• We do not access your contacts, photos library or microphone.
• We do not embed third-party advertising SDKs or cross-site tracking cookies.

• To generate your guided assessment and visa pathway suggestions on-device.
• To run AI-assisted document analysis when you opt in.
• To create and secure your account if you sign up.
• To diagnose crashes, fix bugs and improve the product.
• To respond to support requests and comply with legal obligations under Australian law.

Migration Assist is an information tool, not legal advice. Results should be verified with a registered migration agent, immigration lawyer, or directly with the Department of Home Affairs before acting on them.

When you use the AI assistant, the following happens:

1. Your assessment answers and any documents you upload are sent to our analyze-migration server-side Edge Function over TLS.
2. The Edge Function calls a large language model (LLM) provider (e.g. OpenAI) using a server-side API key. The key is never exposed to the app.
3. The LLM response is returned to your device and saved locally in the AI Results screen.

We have opted out of training on customer data with our LLM provider where that setting is available, and we do not use your content to train models ourselves. The LLM provider may retain prompts and responses briefly for abuse monitoring per their own policies; their current data retention terms are linked from their site.

AI outputs can be inaccurate. Do not rely on them as a substitute for advice from a qualified professional.

6.1 Where data lives

• On your device — guided assessments, AI results and app settings. You can wipe this at any time from Settings → Clear saved assessments or by uninstalling the app.
• In Supabase (Sydney, Australia region where applicable) — account credentials and any documents you upload, stored in a private bucket folder scoped to your user ID via row-level security.

6.2 Security

• All traffic is encrypted in transit via TLS 1.2+.
• Supabase Storage objects are encrypted at rest and access is mediated by short-lived signed URLs.
• Authentication uses industry-standard hashed credentials managed by Supabase Auth.

6.3 Retention

• On-device data persists until you clear it or uninstall the app.
• Uploaded documents are retained for as long as your account is active. We delete account data within 30 days of an account-deletion request, subject to any legal hold.
• Anonymous diagnostic data may be retained in aggregated form for product analytics.

We share personal information only with:

• Service providers who help operate the product, under contract and limited to the data needed for their function. Current sub-processors:
  • Supabase Inc. — authentication, database, storage, edge functions.
  • OpenAI (or the LLM provider configured at the time) — AI inference.
  • Expo / Vercel — hosting and app delivery.
• Law enforcement or regulators, where we are legally compelled to do so.
• A successor entity, in the event of a merger, acquisition or asset sale (you will be notified).

We do not sell, rent, or trade your personal information.

Under the Australian Privacy Act and the APPs, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated documents.
• Withdraw consent for AI processing and continue using the guided assessment in offline mode.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have mishandled your data.

To exercise any of these rights, email support@beyondhuman.dev from the address associated with your account. We respond within 30 days.

Migration Assist is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

The app is operated from Australia. If you access it from outside Australia, your information may be transferred to and processed in Australia and in the regions where our sub-processors operate (including the United States in the case of OpenAI). Where required, we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.

We may update this policy from time to time. Material changes will be highlighted in-app and the effective date at the top of this page will be updated. Continued use of the app after the effective date constitutes acceptance of the revised policy.

Questions, requests or complaints? Reach us at:

• Email: support@beyondhuman.dev
• Post: Beyond Human, Suite 40, 5-7 / 200 Kingston Road, Slacks Creek QLD 4124, Australia

See also our main site at beyondhuman.dev.