Privacy
What is held, and by whom.
PYFFO™ is built so that the interesting data never reaches us. This page says exactly what that means, and is honest about the small amount that does.
Last updated 27 August 2026.
The short version
Two different things, kept separate.
Your audit data
Everything you enter into the PYFFO apps — companies, friction items, hours, rates, notes, reports. It stays on your device. There is no account, no server and no copy held by us. We cannot read it, cannot reset it and cannot recover it for you.
Your data explains this in full.
Website data
If you ask to be told when PYFFO launches, we hold your email address until we have told you. Visiting the site also produces ordinary server records, the same as visiting any website.
That is the whole list. It is set out below rather than summarised away.
The apps
Nothing is collected.
PYFFO Business, PYFFO Advisor and PYFFO Family store their data locally on the device they are installed on. They do not require an account, do not sign in to anything and do not send your audit content anywhere.
Sharing is explicit: a report or export leaves your device only when you choose to send it, to a recipient you choose, using your own email or file sharing. PYFFO is not a party to that.
The consequence worth understanding:
Because we hold nothing, we cannot restore anything. If you lose the device, the audit goes with it unless you exported a copy. Support covers how to keep your own backups.
Launch notifications
The one thing we deliberately collect.
The notification form is the only place this website asks you for anything. It is entirely separate from the apps, and giving it to us is optional.
What is recorded
- Your email address — so we can send the announcement.
- Which edition you were looking at, if you arrived from an edition page — so a launch email for Family does not go to someone waiting for Advisor.
- The date and time you submitted it.
- The consent wording you were shown, stored word for word — so there is a record of what you actually agreed to, not a tick in a box with no context.
Where it goes
It is written to a file on the website's own server in Australia. Those same four items — and nothing else — are then passed to SendGrid (Twilio), the service that delivers our email. SendGrid is a United States company, so your address crosses a border at that point.
No assessment answer is ever attached to any of it, because the assessment never sends one anywhere.
How long it is kept
Until the launch announcement has been sent, after which the list is deleted. You can ask to be removed before then and we will remove you.
The consent wording is "Email me once when PYFFO launches. Nothing else, and never sold or passed on for anyone else's use." That is the whole undertaking. The list is not rented, sold, shared or used for anything other than the launch announcement.
The assessment
Find Your Friction sends nothing.
The assessment runs entirely inside your browser. The questions, your answers and the arithmetic never leave the page — there is no submission step, and no result is stored on any server, including ours.
Closing the tab discards it. That is a deliberate trade: it means we cannot show you your previous run, and it also means there is nothing about you to lose.
Cookies and server records
One cookie, and ordinary logs.
Cookies
The site sets a single cookie, named .AspNetCore.Antiforgery.*. It exists
to stop a third-party site from submitting the notification form on your behalf. It
holds no identity, is not used for tracking, and is deleted when you close your browser.
There are no advertising cookies, no analytics cookies and no third-party trackers, which is why the site has no cookie banner to dismiss.
Server records
The site runs on Microsoft Azure in Australia, and Azure records the ordinary detail of serving a page: the address requested, the time, the response code, how long it took, and the browser and operating system reported by your device. Azure's Application Insights collects this automatically at the hosting level.
IP addresses are masked rather than stored: a coarse location is derived from the address and the address itself is discarded. These records are kept for 90 days and then deleted automatically.
We would rather say this plainly than claim the site collects nothing. It collects what any hosted website collects, and no more.
What you can ask for
Getting a copy, or getting removed.
Email support@pyffo.com.au and you can ask us to:
- tell you whether your address is on the launch list;
- correct it;
- delete it.
Removal is immediate and needs no reason. Because the list is one small file, this is a genuine deletion rather than a flag on a row.
One honest limit: SendGrid keeps its own short-term record of mail it has delivered, in the way any mail provider does. We cannot reach inside that, and it expires on its own. Deleting you from our list stops anything further being sent.
We cannot act on requests about audit data, because we do not have any. That is not an evasion — there is nothing on our side to find.
Contact
A person, not a form.
Privacy questions go to support@pyffo.com.au.
If this page and the product ever disagree, the product is wrong and we want to know. Tell us and we will fix it.