Last updated 15 October 2026
RunList is run by Rent Chaser Pty Ltd ("we", "us"). This policy explains what we collect when you use RunList (the website at runlist.com.au and the RunList iPhone and Android apps), why we collect it, and your choices. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
- Account details: your name, email address, password (stored only as a one-way hash) and depot address.
- Run data: the stops you add, including the company, address, phone number, piece count, notes, pickup times and the job's status.
- Photos: pictures you take of parcel labels, handheld scanner screens and parcels.
- Location: your phone's location, only when you plan a route or start navigation and only with your permission. It's used to work out your starting point and isn't stored as a history of where you've been.
- Kilometre logbook: if you use the logbook, the odometer readings, kilometres, trip purpose and notes you save for each day, and your vehicle description if you add one. A photo you take of the dash is used to read the odometer and is not kept.
- Interest list: if you register your interest in an upcoming feature, your email address, so we can tell you when it's ready. Ask us at any time and we'll remove it.
- Voice: if you use voice input, the recording of what you say, to turn it into a stop.
- Billing: if you subscribe, Stripe handles your card. We never see or store your full card number. We keep your plan, billing status and Stripe customer reference.
- Technical: basic server logs (IP address, browser type, pages requested) used for security and fixing faults.
Label photos can show the names, addresses and phone numbers of the people you deliver to. You collect that information as part of your delivery work, and we process it only to provide RunList to you.
How we use it
- To read labels and screens, check addresses, look up business opening hours, and plan and map your route.
- To run your account, take payments and send service emails (such as receipts and password resets).
- To keep RunList secure and to fix problems.
We don't sell your information. We don't use it for advertising, and we don't track you across other apps or websites.
Who we share it with
We use a small number of service providers to run RunList. They handle data only to provide their service to us:
- OpenAI (USA) reads label and screen photos and transcribes voice input. Under OpenAI's API terms, data sent through the API isn't used to train their models.
- Google Maps Platform (USA) handles address lookup, opening hours, route planning and maps.
- Stripe (USA/Australia) handles subscription payments.
- DigitalOcean hosts our servers in Sydney, Australia.
Some of these providers process data overseas. We take reasonable steps to make sure they protect it in line with the Australian Privacy Principles.
The phone app
The RunList app for iPhone and Android is the same service in an app. A few things are particular to it:
- Camera and photos: used only when you tap to scan a label, a handheld screen, a parcel or the dash. We never read your camera roll or take pictures on our own.
- Location: asked for only when you choose Start from where I am when planning a run. The phone's position is sent once to work out the route and isn't kept. RunList never tracks you in the background.
- Microphone: used only while you hold the voice button to say a stop. The recording is turned into text and isn't kept.
- Notifications: the odometer reminders are created on your phone itself. We don't run a notification server and don't collect a push token. Turn them off in Km logbook.
- Maps: tapping Navigate hands the address to the maps app on your phone (Google Maps or Apple Maps). What happens from there is covered by that app's privacy policy.
- No tracking: the app contains no advertising or analytics software and does not read your device's advertising identifier.
Subscriptions are sold on this website, not inside the app, so the app stores hold no payment details for RunList.
How long we keep it
- Finished and rolled-over stops, and their photos, are deleted automatically after 14 days.
- Active stops stay until you finish or delete them.
- Kilometre logbook entries stay until you delete them or your account, because tax records are needed for years. They hold odometer readings and a summary of the day (for example "23 deliveries, Rockdale and Kogarah"), not your customers' names or addresses.
- Your account details stay until you delete your account.
- Nightly backups are kept for 14 days and then deleted.
- Billing records are kept as long as Australian tax law requires.
Deleting your account
You can delete your account at any time in the app: tap the account icon, then Delete account. This removes your account, all your stops, photos and logbook entries straight away and cancels any subscription. Copies in backups are gone within 14 days. You can also email privacy@runlist.com.au.
Your rights
You can ask to see or correct the personal information we hold about you. You can also complain if you think we've handled it badly. Email privacy@runlist.com.au and we'll respond within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Security
All traffic is encrypted (HTTPS). Passwords are hashed, and only our administrators can access the servers. No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you as required by the Notifiable Data Breaches scheme.
Children
RunList is a work tool for adults and isn't meant for anyone under 18.
Changes
If we make an important change to this policy, we'll tell you by email or in the app before it takes effect.
Contact
Rent Chaser Pty Ltd · privacy@runlist.com.au
Run