Privacy policy

1. Who this policy covers

This policy covers the Escape Velocity website and web app (the “app”), run by Market Titans Group Pty Ltd (ABN 82 642 540 734, ACN 642 540 734), called “we” in this policy. We are based in Adelaide, South Australia. Contact: help@joinescapevelocity.com. Escape Velocity is for people aged 18 or older, and we do not knowingly collect information from anyone younger.

2. This website

The marketing website does not use cookies and does not ask for personal information. Our hosting provider (Vercel) keeps standard server logs. We currently run no analytics on the website.

3. The app: your numbers

The app saves your investments, values, notes, goal, forecast settings, Die with zero plan, saved reports and tags to your account, so that any device you log in on shows them. They are encrypted in your browser with AES-256-GCM before they are sent, and they are stored encrypted. We keep the key with your account so that logging in can open them, which means our systems are able to open them too. Appearance settings, such as your theme and text size, stay in the browser you use. A working copy of your numbers is kept in that browser while you are logged in and is removed when you log out. The app asks for no bank logins, sets no cookies and has no analytics.

4. The app: services you use

Account

If you create an account, we store your email address, when you created the account and last logged in, and, for each browser you are logged in on, a short description of it and when it was last used. We use your email address to run your account: to send you the link that logs you in, to tell you about a change to your account and, if you switch them on, to send your check-in reminder, your milestone emails and your monthly update. Your numbers are saved to your account as described in section 3. You can delete your account at any time from the Account page, which removes your email address, your numbers, your logins, your reminder and everything stored for your milestone emails and monthly update from our server.

Email

We send emails about your account (your log-in link, a deleted account). Every other email is off until you switch it on, and each one has an unsubscribe link. No email contains an amount.

Check-in reminder. If you ask for a reminder email, we store the day you chose and your time zone with your address. Nothing about your money is stored for the reminder. Unsubscribing deletes the stored reminder.

Milestone emails and the monthly update. You switch these on in the app under Settings → Notifications. Milestone emails are one email when your next milestone is close and one when you reach it. The monthly update is sent on the 1st of each month. After a check-in, and only while a switch is on, the app on the device you are using works out what these emails need and sends it to us. We store it with your account.

• For milestone emails: how many milestones your goal has, how many you have passed, whether the next one is close, and a random marker that tells us when you change your goal. The marker holds nothing about your goal: no amount and no date.
• For the monthly update: the last 30 days as percentages and counts. These are your net worth change as a percentage, your progress to your goal as a percentage now and 30 days earlier, the number of milestones passed, the number of investments added, the number of values updated, your check-in streak, and the percentage change for each broad asset class you have (cash, stocks, ETFs, super, property, crypto, angel investments, other).
• For both: your time zone, when the app last reported, a record of what has already been emailed so that nothing is sent twice, and a random code used in the unsubscribe links.

The app never sends an amount or a name you typed for these emails. Switching an email off, or using its unsubscribe link, deletes what was sent for that email. Our emails identify us as the sender: Escape Velocity, run by Market Titans Group Pty Ltd (ABN 82 642 540 734, ACN 642 540 734), with the contact address help@joinescapevelocity.com. Every reminder, milestone and monthly email has an unsubscribe link, and we act on it.

Sharing anonymous figures with other members

Sharing is optional. If you choose to join in, the app sends us a short anonymous set of choices: your country, a range for when you plan to stop working, your goal milestone in steps of 10%, the kinds of assets you have, your mix of assets rounded to 5%, wish-list ideas and report filters chosen from ready-made lists, and percentage changes. The server accepts only the words in the app’s own lists, so nothing you typed is stored. No name, email address, amount or investment name is attached to it. The page you join from lists what is shared before you do. Because an entry carries no name or email, we cannot tell which entry is yours. A figure is shown once one member has shared it, so while the community is small a figure can come from very few entries. When you delete your account, the app removes your entry.

Feedback and the donation wall

If you send feedback, we store your message, the kind of message it is, the page you sent it from and, only if you give one, your email address. We read every idea first. If we put it on the Feedback list, its title and wording, which we may reword, are shown to everyone with no name or email address. Your original message and your optional email address stay private. A declined idea is deleted. If you vote on an idea, we store a one-way hash of a random code kept in your browser, so that each browser votes once. If you donate, we store the amount and currency, how you paid, and the name and message you choose to write, both optional. We also store the Stripe checkout reference or the Bitcoin transaction id, and a one-way hash of a random code kept in your browser, which lets that browser ask whether its donation arrived. We do not store an email address with a donation. Card payments are taken by Stripe on Stripe’s own page, so the app never sees or stores card details. Bitcoin payments are public on the Bitcoin network. To check a Bitcoin payment, the app asks public block explorers about the address, and they see our server’s address, not yours. The name and message you write appear on the public donation wall as soon as the payment arrives. The wall shows the newest 24 messages. Older ones leave the page but stay stored. To have a feedback idea or a wall message removed, email help@joinescapevelocity.com.

Counting which pages are used

When a page of the app opens, your browser sends only the name of the page, such as reports. We add one to a count for that page and that day. Nothing that identifies you is stored with a count. That means no email address, device, IP address or cookie, and the request does not carry your login. We use the counts only to see which parts of the app are used most. The counts are close, not exact, because they come from browsers. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.

What an administrator can see

An administrator, who is the owner of Escape Velocity, can see the list of accounts: the email address, when the account was made and last used, which version of the important information was accepted, and whether a reminder is on. The administrator can suspend an account, change its email address, send it a log-in link and delete it. The administrator screens do not show your numbers. A new email address only takes effect when the owner of the new inbox opens a link, and the old address is told. Every change is written to an activity log that records who did what and when.

Your agreement to the important information

When you tick the box to accept the important information, the server records which version you accepted, when we heard it, your account email address if you are logged in, a salted hash of your IP address and the name of your browser. We keep this so that we can show, if we are ever asked, who agreed to which text. The Account page shows which version you accepted and whether we have it recorded.

Things that contact other companies only when you press a button

The Die with zero intro video loads from YouTube’s privacy-enhanced player only after you press play. The “Google Calendar” and “Outlook” buttons send the reminder text and time to Google or Microsoft. The Apple Calendar button and the downloadable calendar file are made in your browser and send nothing.

5. Service providers

Our services run on infrastructure provided by third parties: web hosting (Vercel), the database (Supabase), email delivery (Resend) and card payments for donations (Stripe). Our server functions run in Vercel’s Sydney region, and the database is in Supabase’s Sydney region. Emails are sent through Resend from its Tokyo region (Japan), so your email address and the content of the emails we send you are processed in Japan. Our providers may also process technical information elsewhere, and we do not control where. Where a provider handles information outside Australia, it may not be bound by the Australian Privacy Principles, although we remain responsible for it under the Privacy Act. We use these providers only to run Escape Velocity. We do not sell your information to them or to anyone else, and the app has no ads. If you are not comfortable with this, please do not create an account.

6. IP addresses and logs

The hosted functions do not store IP addresses in the clear. Rate limits and the record of your agreement to the important information use a salted hash instead. Vercel, Supabase and Resend also keep their own technical logs, as providers do. We do not control how long they keep them.

7. Your choices and deleting your information

• Settings → Your data → Clear all data removes your investments and values from your account and your browser.
• Log out removes your numbers from the browser you are using. They stay in your account.
• Unsubscribe from any reminder email removes the stored reminder.
• Switch off milestone emails or the monthly update (Settings → Notifications), or use the unsubscribe link in one, and what was sent for that email is deleted.
• Delete your account (Account page) removes your email address, your numbers, your logins, your reminder and everything stored for your milestone emails and monthly update.

8. Access, correction and complaints

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Access and correction. You can ask for a copy of the personal information we hold about you, and ask us to correct it, by emailing help@joinescapevelocity.com. We will check that the request comes from you, and we aim to reply within 30 days. You can also see and change most of it yourself: your numbers on the pages where you entered them, your email switches under Settings, and your account on the Account page.

Complaints. If you think we have mishandled your information, email help@joinescapevelocity.com with the details. We will look into it and reply in writing. If you are not happy with our reply, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Data breaches. If a data breach is likely to result in serious harm to you, we will tell you and the OAIC, as the law requires.

9. Changes

We may change this policy. We will update this page and the date at the bottom of it. If a change matters, we will also tell account holders by email or in the app.