Privacy

Your data.
Protected.

KitLists is built on the principle that your data belongs to you. We collect only what is needed to run the service, store it securely in Australia, and never sell it to anyone.

Data storage and security

All KitLists data is stored in a secure, enterprise-grade database hosted in Sydney, Australia. Your gear lists, profile information and account details never leave Australian infrastructure.

We use industry-standard encryption for data in transit and at rest, secure authentication with hashed passwords, and role-based access controls so only you can see your data.

AI features

Where KitLists uses AI features, they exist only to help you build and manage your kit lists more efficiently. AI is never used to analyse, profile or share your personal data.

Your data is not used to train any AI models - ever. When AI features are used, only the minimum context needed to complete the task is sent, and nothing is retained beyond that interaction.

What we collect

We collect only what is needed to provide the service:

  • Name and email address to create and manage your account
  • Profile information you choose to add (phone, company, address)
  • Gear lists, lens selections and equipment notes you create
  • Usage data to improve the product (no third-party tracking)

Your rights

KitLists complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988. You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Know how your information is used and disclosed
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

For the full framework, see the Australian Privacy Principles quick reference.

Overseas disclosure

In limited circumstances, data may be processed by overseas service providers (for example, email delivery). Where this occurs, we take reasonable steps to ensure those providers meet standards consistent with the Australian Privacy Principles under APP 8.

We do not sell, rent or trade your personal information to any third party.

Data protection

KitLists co-founder Lee Whitaker holds a certified Data Protection Officer qualification. Privacy is built into how we design and operate this product - not added as an afterthought.

Dated: June 2026