How it worksFeaturesPrivacyFAQDownload on App Store
←Back to puku

Legal & Compliance

Our commitments to data protection regulations and accessibility standards.

Effective date: 1 June 2025

Company Details

puku is a product of:

  • Legal name: Aryal Technologies Pty Ltd
  • ABN: 33 692 831 459
  • Country of incorporation: Australia
  • Contact: hello@aryal.com.au

All legal notices, regulatory correspondence, and formal communications should be directed to hello@aryal.com.au.

GDPR Compliance (EU/EEA)

puku complies with the General Data Protection Regulation (GDPR) for users in the European Union and European Economic Area. We treat GDPR standards as a baseline for all users globally.

Key GDPR commitments:

  • Data minimisation: We collect only data necessary for the service to function.
  • Purpose limitation: Data is used only for the purposes described in our Privacy Policy.
  • Storage limitation: Data is retained only as long as necessary.
  • Integrity and confidentiality: We implement appropriate technical and organisational security measures.
  • Transparency: We are clear about what data we collect and why.
  • Accountability: We can demonstrate compliance with GDPR principles.

Lawful Basis for Processing

Under GDPR, we process your personal data based on the following lawful bases:

  • Contractual necessity (Art. 6(1)(b)): Account data, wardrobe data, and AI processing are necessary to provide the service you signed up for.
  • Legitimate interests (Art. 6(1)(f)): Anonymous analytics and crash reporting help us maintain and improve the service.
  • Consent (Art. 6(1)(a)): Optional features (body photo, marketing communications) are consent-based and can be withdrawn at any time.
  • Legal obligation (Art. 6(1)(c)): We may retain certain data where required by applicable law.

Data Controller

The data controller for puku is:

puku does not currently have a formal EU representative as we are an early-stage startup. If you have concerns about EU data protection rights, please contact us directly at hello@aryal.com.au and we will respond within 30 days.

As puku grows, we will appoint an EU/UK representative as required by applicable law.

CCPA Compliance (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to know: Request information about the categories and specific pieces of personal data we have collected about you.
  • Right to delete: Request deletion of your personal data (subject to certain exceptions).
  • Right to opt-out of sale: We do not sell your personal data. This right is therefore always satisfied.
  • Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, email us at hello@aryal.com.au with "CCPA Request" in the subject line.

Australian Privacy Act Compliance

As an Australian company, we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Key commitments under the APPs:

  • APP 1 – Open and transparent: This policy documents our data practices.
  • APP 3 – Collection: We collect only data necessary for our functions.
  • APP 5 – Notification: We notify individuals of collection at the time of collection.
  • APP 6 – Use: We use data only for the purposes collected.
  • APP 11 – Security: We take reasonable steps to protect personal data.
  • APP 12 – Access: Individuals may request access to their personal data.
  • APP 13 – Correction: We correct personal data that is inaccurate.

To lodge a privacy complaint, contact us at hello@aryal.com.au. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Geographic Availability

puku is currently available only in selected countries as determined by Aryal Technologies Pty Ltd. We make no representation that the Service is appropriate, lawful, or available for use in all locations.

Users who access the Service from countries where it is not officially supported do so at their own risk and are solely responsible for compliance with their local laws. We reserve the right to restrict access from any region at any time.

Our compliance commitments (GDPR, CCPA, Australian Privacy Act) apply to users in their respective jurisdictions only where we officially make the Service available.

Accessibility Statement

puku is committed to making our app and website accessible to everyone, including people with disabilities.

iOS App Accessibility

  • VoiceOver support: Core functionality is labelled for screen readers
  • Dynamic Type: Text scales with iOS accessibility settings
  • Contrast: We aim for WCAG 2.1 AA minimum contrast ratios
  • Touch targets: Minimum 44×44pt tap targets throughout
  • Reduce Motion: Animations respect iOS Reduce Motion accessibility setting

Website Accessibility

This website aims to conform to WCAG 2.1 Level AA. We are continually working to improve accessibility. Known gaps are documented internally and prioritized for resolution.

Feedback

If you experience accessibility barriers when using puku, please contact us at hello@aryal.com.au. We take accessibility feedback seriously and will respond within 5 business days.

App Store Compliance

puku complies with Apple's App Store Review Guidelines, including:

  • Permission-based access to camera and photo library
  • Biometric authentication via Apple's LocalAuthentication framework
  • No use of private APIs
  • Compliance with Apple's data safety requirements
  • Age rating: 4+ (no objectionable content)

Our App Store privacy nutrition label accurately reflects data collection as described in this Privacy Policy.

Legal Contact

For all legal enquiries, compliance questions, regulatory matters, and privacy requests:

  • Email: hello@aryal.com.au
  • Company: Aryal Technologies Pty Ltd
  • ABN: 33 692 831 459
  • Country: Australia