StudioOS← Back to home

Privacy Policy

Effective 4 July 2026 · Last updated 4 July 2026

StudioOS is operated by Kid Neon Creative (ABN 62 857 254 488) of Geelong, Victoria, Australia ("we", "us"). This policy explains what personal information we collect through StudioOS (app.kidneon.com.au), how we use it, and the choices you have. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

Account information. Your name, email address and password (stored as a secure hash) when an account is created for you.

Studio content. Information you and your studio enter while using StudioOS: projects, tasks, timesheets, notes, clients, quotes, invoices, expenses, receipts and related records. This may include personal information about your team members and clients; your studio is responsible for having a basis to enter it.

Google Calendar data (only if you connect it). See the dedicated section below.

Technical data. Standard logs (IP address, browser type, pages accessed, times) and essential cookies used to keep you signed in. We do not use advertising or cross-site tracking cookies.

Google Calendar data

If you choose to connect Google Calendar, StudioOS requests read-only access (the calendar.readonly scope). We use it for one purpose: to display your own meetings alongside your work in your personal dashboard views (the "Pulse").

  • We sync and store a copy of your calendar events (title, time, status, attendee email addresses) so your dashboard stays fast and keeps working during outages.
  • Your calendar is visible only to you — never to other members of your studio.
  • We never create, modify or delete events in your calendar.
  • We do not use Google user data for advertising, and we do not sell it.
  • No humans read your calendar data except with your explicit permission, or where necessary for security, to comply with law, or for our internal operations where the data has been aggregated or anonymised.
  • Disconnecting your calendar in Settings deletes our synced copy of your events and stops all further access. You can also revoke StudioOS's access at any time at myaccount.google.com/connections.
  • Your Google refresh token is stored encrypted at rest.

StudioOS's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your information

To provide and operate StudioOS; to show you your own work, workload and calendar; to generate your studio's business records (quotes, invoices, BAS-relevant reports); to provide AI-assisted features (below); to secure, debug and improve the service; and to communicate with you about the service. We do not sell personal information, and we do not use it for third-party advertising.

AI features

StudioOS includes AI-assisted features (studio assistants). When you use them, relevant content (for example a project brief or a draft you're working on) is sent to our AI provider, Anthropic (Claude models, processed in the United States), to generate the response. We do not permit our AI provider to use your data to train its models. Calendar data is not sent to AI features except where you explicitly ask an assistant about your own schedule.

Where your data lives

StudioOS's primary database runs on infrastructure we control in Australia. Some service providers process data overseas: our web host Vercel (United States), our AI provider Anthropic (United States), Google (calendar API, United States) and Cloudflare (global network). Where information is disclosed overseas we take reasonable steps consistent with APP 8.

Security

Access is authenticated and role-scoped (row-level security on every table); calendar tokens are encrypted at rest; traffic is encrypted in transit (TLS). No internet service can promise perfect security, but we treat your studio's records as what they are — your business.

Retention and deletion

Studio content is retained while your studio's account is active. Disconnecting Google Calendar deletes the synced event copy immediately. You can ask us to delete your account and associated personal information at any time (some records may be retained where Australian law requires, e.g. tax records).

Access, correction and complaints

You can ask for access to, or correction of, personal information we hold about you: michael@kidneon.com.au. If you have a privacy complaint, contact us first and we'll respond within a reasonable time. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We'll post any changes to this policy on this page and update the date above. If a change is significant, we'll tell you in the app or by email.

Contact: Kid Neon Creative · Geelong VIC, Australia · michael@kidneon.com.au