Privacy Policy

1 Who We Are

Pockifi is an Australian-owned bill comparison and savings service that helps Australian households and small businesses identify better deals on electricity, gas, mobile phone, and internet services. Pockifi operates at pockifi.com.au.

In this Privacy Policy, references to “Pockifi”, “we”, “us” or “our” mean the business operating under the name Pockifi, ABN 48 528 012 575. References to “you” mean any person who accesses or uses our website or services.

This Privacy Policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained within it. Pockifi is committed to handling your personal information in accordance with these obligations.

2 Information We Collect

Pockifi collects personal information that is reasonably necessary to deliver our bill comparison and savings reporting service. This includes:

• Bill documents — PDFs, images or photographs of your utility bills that you upload or email to us for analysis
• Contact details — Your name, email address, and state or territory of residence
• Service details — Your current utility provider, plan name, usage figures and rates, as extracted from your bill documents
• Property details — Your property address, to the extent it appears on your bill or is provided by you
• Website usage data — Anonymous information about how you interact with our website, including pages visited, time spent, and device type

Pockifi does not collect payment card details, bank account numbers, government-issued identity documents, tax file numbers, or medical records. All payments for Pockifi Shield memberships are processed directly by Stripe. Pockifi does not receive or store your payment card information.

Where it is lawful and practicable to do so, you may use our website and submit a general enquiry without identifying yourself. However, the bill analysis service requires your name, email address and bill documents to function.

3 How We Use Your Information

Pockifi uses the personal information we collect for the following purposes:

• To analyse your utility bills and identify potentially better deals from Australian providers
• To prepare and deliver your personalised savings report
• To contact you regarding your savings report, recommended providers, and any follow-up questions
• To conduct quarterly bill reviews for Pockifi Shield members
• To send you transactional service communications, including membership confirmations, billing notifications and account updates
• To maintain a record of savings identified over time, for the purpose of administering the 300% savings guarantee
• To track historical pricing trends across utility categories, to improve the accuracy of our market research over time
• To respond to enquiries and complaints
• To comply with applicable Australian laws and regulations

Pockifi will not use your personal information for unrelated direct marketing without your separate and explicit consent. You may withdraw consent for marketing communications at any time.

4 How We Share Your Information

Pockifi does not sell, rent or trade your personal information to third parties for any commercial purpose. Pockifi may disclose your personal information to third parties only in the following circumstances:

• Energy and telecommunications providers — Where you have approved a switch to a new provider, Pockifi will share only the information necessary to initiate or facilitate that switch. Once your information is provided to the new provider, it becomes subject to that provider’s own privacy policy.
• Technology and service providers — Pockifi engages reputable third-party providers to assist in operating our service, including email delivery services and AI-assisted analysis tools. All such providers are engaged under confidentiality obligations and are not permitted to use your personal information for any purpose other than delivering services to Pockifi.
• Legal obligations — Pockifi may disclose personal information where required to do so by law, court order, or regulatory authority.

How your bills are analysed — AI and overseas processing disclosure

Pockifi’s bill analysis service involves a combination of human review by our team and AI-assisted processing. This means that when you upload a bill, it may be processed using reputable AI language model platforms to assist with extracting information, comparing market rates, and preparing your savings report. Our team reviews all AI-generated outputs before a savings report is sent to you.

As Pockifi develops its service, this may also include automated AI workflows and AI agent systems that process your information with reduced or no human involvement at each individual step. We are actively building these capabilities to improve the speed and accuracy of our service. Where such automated processing is used, it will be disclosed in this policy as it is introduced.

The AI platforms used by Pockifi may be operated by third-party providers based in the United States of America, the United Kingdom, or other countries outside Australia. As a result, your bill documents and personal information may be transmitted to and processed on servers located overseas. These providers are engaged under confidentiality obligations and do not store or train on your personal data beyond what is required to process your specific request.

The specific AI platforms and tools Pockifi uses may change over time as technology evolves. Pockifi will always use providers that meet appropriate security and confidentiality standards. AI is a rapidly developing area, and the laws and community expectations governing its use continue to evolve in Australia and internationally. Pockifi is committed to using AI responsibly and to updating this policy when our practices materially change.

By uploading documents and using Pockifi’s services, you acknowledge and consent to AI-assisted processing and the transmission of your bill data overseas for the purpose of analysis. If you have concerns about how your information will be processed, please contact us at hello@pockifi.com.au before uploading any documents. We will explain the current processing approach and address any specific concerns you raise.

For the purposes of this section, the countries to which your personal information may be disclosed include the United States of America and the United Kingdom. Pockifi takes reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles, including through the use of confidentiality agreements.

5 Data Retention

Pockifi retains your personal information for as long as is necessary to deliver our services and to fulfil our legitimate business purposes. Pockifi’s service involves tracking utility pricing trends and maintaining savings records over time, which means some information is retained for extended periods as part of delivering the service you have engaged us for. Specifically:

• Bill documents and savings reports are retained for the duration of your relationship with Pockifi and for a reasonable period afterwards, to support historical analysis, guarantee administration and service improvement
• Contact details, including your name and email address, are retained for the duration of your active membership and for up to 7 years after your last interaction with us, in accordance with Australian taxation record-keeping requirements
• All retained data is stored securely in accordance with the security measures described in Section 5b of this policy

You may request deletion of your personal information at any time by contacting us at hello@pockifi.com.au. We will action deletion requests within 30 days, subject to any legal obligation to retain certain records.

5b Security of Your Information

Pockifi takes the following steps to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure:

• All data transmitted between you and pockifi.com.au is encrypted using industry-standard HTTPS and TLS protocols
• Customer bill documents and personal records are stored in access-controlled cloud storage provided by reputable enterprise cloud providers operating to recognised security standards
• Access to customer data is restricted to authorised Pockifi personnel only, on a need-to-know basis
• Devices used to access customer data are protected by up-to-date security software
• Pockifi does not store payment card details. All payments are processed by Stripe, which maintains Payment Card Industry Data Security Standard (PCI-DSS) compliance
• Any third-party providers with access to customer data are engaged under confidentiality obligations

Despite these measures, no method of internet transmission or electronic storage is completely secure. Pockifi cannot guarantee the absolute security of your personal information but is committed to maintaining and improving its security practices as the business grows and as best practices evolve.

5c Data Breach Response

Pockifi complies with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). In the event of an eligible data breach, meaning unauthorised access to, unauthorised disclosure of, or loss of personal information that is likely to result in serious harm to one or more individuals, Pockifi will:

• Contain the breach and assess its likely impact as quickly as possible
• Notify the Office of the Australian Information Commissioner (OAIC) as required by law
• Notify affected individuals directly where practicable, or via a prominent notice on our website where direct notification is not possible
• Take immediate steps to prevent further unauthorised access or disclosure

Pockifi will always prioritise notifying affected customers clearly and promptly, explaining what occurred, what information was involved, and what steps are being taken in response.

If you believe your personal information held by Pockifi has been compromised, please contact us immediately at hello@pockifi.com.au with the subject line “Data Breach Report”. Pockifi will acknowledge your report within 24 hours and provide a substantive response within 5 business days.

For further information about the NDB scheme, visit oaic.gov.au.

6 Referral Commissions and Transparency

Pockifi earns a referral commission from energy and telecommunications providers when you switch to a new provider through our service. This commission is paid by the provider. It does not increase the price you pay and the deal you receive is identical to approaching the provider directly.

Referral commissions do not determine which providers or deals Pockifi recommends. Pockifi researches the available market based on your usage and circumstances and is not limited to providers who pay referral commissions. Our goal is to identify a genuinely better deal for you, not to maximise commission income.

7 Cookies and Website Analytics

Pockifi’s website uses cookies and similar tracking technologies to understand how visitors use the site. This includes Google Analytics 4, which collects anonymous data about page views, traffic sources, device types and general usage patterns. This information helps Pockifi improve its website and understand which content is most useful to visitors.

Pockifi does not use behavioural advertising cookies, tracking pixels designed to follow you across third-party websites, or any technology intended to build individual advertising profiles. Pockifi does not sell browsing data to advertisers or third parties.

Google Analytics data is processed by Google LLC, based in the United States of America, and is subject to Google’s own privacy policy, available at policies.google.com/privacy.

You may opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout, or by adjusting your browser’s cookie settings.

8 Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights in relation to the personal information Pockifi holds about you:

• Access — You may request a copy of the personal information Pockifi holds about you at any time
• Correction — If you believe any information Pockifi holds about you is inaccurate, incomplete or out of date, you may request that it be corrected
• Deletion — You may request deletion of your personal information, subject to any legal obligation to retain certain records
• Opt out of marketing — You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Note that transactional emails relating to your active membership or service will continue regardless of marketing preferences
• Complaints — You have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe Pockifi has handled your personal information in a manner that does not comply with the Australian Privacy Principles

To make an access, correction or deletion request, email hello@pockifi.com.au with the subject line “Privacy Request” and describe what you are requesting. Pockifi will acknowledge your request within 5 business days and provide a substantive response within 30 days. Pockifi may need to verify your identity before actioning a request, to ensure personal information is released or modified only at the direction of the correct individual.

If Pockifi refuses your request, Pockifi will provide written reasons and inform you of your right to escalate the matter to the OAIC.

Complaints: If you are not satisfied with how Pockifi has handled your personal information, please contact us first at hello@pockifi.com.au. Pockifi is committed to resolving privacy concerns directly and promptly. If you remain unsatisfied after contacting us, you may lodge a complaint with the OAIC at oaic.gov.au or by calling 1300 363 992.

9 Changes to This Policy

Pockifi may update this Privacy Policy from time to time to reflect changes to our services, changes in applicable law, or developments in the way we use personal information. Pockifi will notify you of material changes by posting a notice on our website or by direct email where you have provided a current email address. Continued use of Pockifi’s services after a change to this policy constitutes acceptance of the updated policy.

This Privacy Policy was last substantively updated in May 2026 to include expanded disclosures regarding AI-assisted processing, overseas data transmission, automated decision-making, data retention periods, and the Notifiable Data Breaches scheme.