1. Who handles your information

Skills Dock Pty Ltd operates Pingaling at https://pingaling.fun. Its ABN is 83 686 564 778.

Our contact address is 34 Clayson Rd, Salisbury East SA 5109, Australia.

For privacy questions or requests, email [email protected].

For support, legal notices, safety reports, or appeals, email [email protected].

In this policy, “we”, “us”, and “our” mean Skills Dock Pty Ltd. Where data protection law uses the term “controller”, we are the controller for the Pingaling uses described here. A controller decides why and how personal information is used.

This policy explains our handling of personal information. It is not a request for blanket consent. Accepting the Terms does not mean you have agreed to optional analytics or marketing.

2. The information we handle

The information depends on how you use Pingaling.

• Account details, such as your email address, account identifiers, sign-in status, and birth year used for account eligibility.
• Profile details you choose to add, such as your name, handle, image, links, and description.
• Posts, comments, uploaded media, reactions, follows, saved items, and other activity in the features you use.
• Messages and their related delivery records where messaging is available.
• Traction campaigns, testing tasks, claims, submissions, evidence, reviews, credit balances, and promotion records.
• Advertising material, booking dates, selected placements, payment references, delivery records, and ad measurements.
• Payment and refund records, including amounts, currency, provider references, and payment status.
• Support emails, privacy requests, safety reports, appeals, and the information needed to resolve them.
• Settings, notification choices, marketing choices, analytics choices, and records of agreements or withdrawals.
• Device, browser, network, session, error, and security information. This can include IP addresses or related network information handled by our infrastructure and providers.
• Site-use measurements where optional analytics is enabled with your permission.

Some information comes directly from you. Other information comes from your use of the service, other users who interact with or report content, and providers that help us operate accounts, payments, and the service.

Do not post or send passwords, API keys, payment card details, or private information that is not needed for your request. Reports and emails can contain sensitive information. Share only what is needed to explain the issue.

3. Why we use information

We use information to:

• Create and secure accounts and check eligibility.
• Provide profiles, content, social features, search, and the other features you choose to use.
• Operate Traction testing, review evidence, manage credits, and deliver in-app promotion.
• Book and serve ads, record delivery, and handle billing and refunds.
• Send service messages and notifications and apply your settings.
• Handle support, privacy requests, safety reports, and appeals.
• Detect fraud, prevent abuse, investigate faults, and protect users and the service.
• Keep records needed for accounting, legal duties, complaints, and disputes.
• Understand site use through optional analytics where you agree.
• Send Pingaling marketing where we have the required permission.

We do not treat this list as permission to use every piece of data for every purpose. The information used must fit the task and the applicable law.

4. Legal bases where EU or UK data protection law applies

A legal basis is a lawful reason for handling personal information. The basis depends on the purpose.

• Contract: information needed to provide a service you request, such as your account, a paid booking, a credit purchase, or a refund.
• Legitimate interests: necessary and proportionate steps to secure the service, prevent abuse, handle support and reports, and manage disputes. We must weigh these needs against your rights and interests.
• Legal duties: records or disclosures required by applicable law, such as tax records or a valid legal order.
• Consent: optional analytics, marketing, or another activity where consent is the required basis. You can withdraw it. Withdrawal does not change the lawfulness of earlier use based on that consent.

If information needs an additional legal condition, such as some sensitive information, a general purpose in this policy is not enough on its own. We must meet that condition or avoid the use.

You can ask us about the basis for a specific use. You can also object to uses based on legitimate interests. See section 12.

5. Public content and private areas

Public profiles, posts, comments, and other public content can be seen by people outside Pingaling. Search engines and other people may copy, index, or link to them.

Deleting something from Pingaling does not guarantee that an independent search engine or another person removes their copy at the same time.

Restricted features have their own audience controls. Do not assume that a profile setting makes all past content private.

Messaging is intended for its participants. Access may also be needed to handle a report, secure the service, or meet a legal duty. This policy does not promise end-to-end encryption or that all messages are inaccessible to the operator.

Reporting content does not make a report public. We may need to share relevant details with people involved in resolving a report, a service provider, or an authority. We should not share a reporter's identity without a valid reason. Complete anonymity cannot be promised in every legal or safety case.

6. Email and AI assistance

Our Cloudflare-based email setup handles incoming and outgoing mail.

We may use AI service providers to classify and route emails or assist with handling them. This may involve sharing relevant email content with those providers. The AI provider or model can change.

The type of data sent depends on the enabled function. Email subjects, message text, and any other information sent for that function remain personal information where they identify a person.

This is not blanket permission to use private emails, messages, or reports for unrelated model training. A different use needs its own lawful basis and any notice or permission required by law.

Do not assume that an AI system is always correct. Contact us if a message appears to have been handled incorrectly. You can ask for a person to review a privacy request or another important issue.

7. Providers and other recipients

We use providers for specific tasks. Relevant providers and tools include:

• WorkOS: account authentication and related identity services.
• Stripe: payment processing and related payment, fraud, refund, and dispute services. Card entry takes place through the payment flow. Pingaling receives payment records, rather than a copy of your full card number for its product database.
• Cloudflare: infrastructure for our incoming and outgoing email setup.
• Google Analytics 4: optional site-use analytics where you opt in.
• Google Search Console: reports about how the site appears and performs in Google Search. Search Console verification is not itself a visitor-tracking cookie.
• Hyfolio: a marketing tool also operated by Skills Dock Pty Ltd. It may help manage Pingaling's analytics, search reports, and email marketing. It is not a separate legal company for the purposes of this notice.
• AI service providers: email assistance where enabled, as described in section 6.
• Other operational providers: hosting, database, file storage, delivery, security, and technical support needed for the features in use.

A provider may handle information on our instructions. Some providers also have their own legal duties and may act independently for particular uses. Their notices explain those independent uses. Using a provider does not remove our duties for the information we control.

We may also disclose relevant information to professional advisers, authorities, or other parties where necessary to meet a legal duty, handle a claim, or protect people and the service. A business transfer may involve information if lawful safeguards and required notices are put in place.

This policy does not grant advertisers general access to account details, private messages, or our email lists. Clicking an advertiser's link takes you to another service, whose own data practices may apply.

8. Analytics, cookies, and advertising

We use storage and related tools to operate the service. Optional GA4 analytics requires your opt-in under our launch approach. Refusing optional analytics does not prevent use of core account features.

You can change your optional analytics choice through the site's privacy controls. Browser controls also let you remove or block stored data. Blocking necessary storage can affect sign-in or other functions.

Our launch setup does not include Facebook/Meta or TikTok advertising pixels. Hyfolio's support for a tool does not mean the tool is enabled on Pingaling.

See the Cookie Policy for the storage categories and choices. If we add a new tracking purpose, we must update the relevant information and obtain any required permission before starting it.

Ad booking and first-party delivery records are different from permission to track people across other sites. We do not treat a paid ad purchase or a click as consent to unrelated tracking.

9. Service emails and marketing

Service emails include messages needed for sign-in, account security, receipts, legal changes, and handling your requests. Optional notifications can have separate settings.

Marketing emails concern Pingaling news, offers, and promotions. Marketing sign-up is optional. Each marketing email includes a way to unsubscribe.

Withdrawing from marketing does not block a necessary receipt or security message.

Pingaling and Hyfolio have separate marketing audiences. Using Hyfolio as Pingaling's marketing tool does not add you to Hyfolio's own marketing list. A separate request to hear from another product has its own choice.

10. International handling

Skills Dock Pty Ltd operates from Australia. Providers and their authorised support teams may handle information in other countries. We do not promise that all information remains in Australia.

International transfers are subject to the rules that apply to the information. Where EU or UK law requires a transfer safeguard, this can involve a recognised adequacy decision or appropriate contractual safeguards, with any extra measures the situation needs. The relevant destinations and safeguards depend on the provider and transfer. You can ask us for details using the contact below.

Contact [email protected] to ask about the destinations and safeguards for information we handle. We can explain the relevant safeguards and how to obtain information about them, subject to lawful limits.

11. Retention and deletion

We keep information for the time needed for its purpose, taking account of legal duties, active disputes, safety needs, and your choices.

Different records need different treatment. Account and content data, support correspondence, payment records, consent records, and safety records do not all have one retention period.

The factors we use include whether you still need the feature, whether a transaction or report is unresolved, whether the information is needed to establish or defend a claim, and whether a law sets a period. Optional analytics also has provider-specific retention settings.

An account-deletion request first hides the account and allows 14 days to cancel that request. Some records may need to remain after the account is deleted. These can include payment and dispute records, records of agreements, safety records, and evidence linked to an unresolved Traction matter.

This account recovery period is not a reason to delay a separate privacy request beyond the time allowed by law. If your request needs different treatment, email [email protected].

Backups, copies required by law, and independent third-party copies may follow different removal schedules. We must limit retained information and access to it. We do not promise instant removal of every copy.

Ask us for the retention period or criteria that apply to a particular record. A general statement that we may retain data is not a right to keep everything forever.

12. Your rights and choices

Depending on the law that applies, you may have rights to:

• Access personal information and receive information about its use.
• Correct inaccurate or incomplete information.
• Request deletion.
• Restrict or object to certain uses.
• Receive a portable copy of eligible information.
• Withdraw consent.
• Object to direct marketing.
• Ask for safeguards concerning certain solely automated decisions with legal or similarly significant effects.
• Complain to a privacy authority.

These rights have conditions and exceptions. We will explain a refusal or limit where the law requires it. The legal rights available to you are not limited to the features in Settings.

You can use available account controls or email [email protected]. We may need a proportionate identity check before giving out or changing information. Do not send an ID document unless we explain why it is needed and provide a suitable way to send it.

We respond within the period required by applicable law. Where EU or UK rules apply, the usual starting period is one month, with only the permitted extensions and notice. We do not charge for an ordinary rights request where the law requires it to be free.

See Privacy Rights and Requests for a plain-language guide.

13. Security and incidents

Security needs technical controls, access limits, and working processes. No online service can promise that a breach will never happen.

Report a suspected account or service issue to [email protected]. Use [email protected] for a suspected personal-information issue. Do not post private evidence or credentials in a public report.

If an incident triggers a duty to notify people or an authority, we must make the required notifications within the applicable time limits. This policy is not a substitute for that process.

14. Age

Pingaling accounts are for people aged 18 or older. Do not create an account if you are under 18.

If you believe an under-18 person has an account, contact [email protected]. We must assess the report and handle the related information appropriately.

The age rule does not mean that a child can never visit a public page. It does not remove any child-safety or privacy duty that applies to the service.

15. Changes and complaints

We may update this policy to reflect the service or legal requirements. A published version will show its effective date. Important changes require a suitable notice. A new use that requires consent needs that consent; changing this page alone does not supply it.

You can complain to us at [email protected]. You do not have to give up a right to complain to an authority or seek a legal remedy.

Depending on your location and the law that applies, the relevant authority may include Australia's Office of the Australian Information Commissioner, the UK's Information Commissioner's Office, or your EU/EEA data protection authority.