Drey Privacy Policy
Last updated: August 2026
Drey is a personal document app published by LIVIA CARE PTY LTD, trading as Intellova ("Intellova", "we", "us"). It exists to hold the paperwork of your life — identity documents, insurance, health records, bills — and to answer questions about it. That is unusually sensitive information, so this policy is specific rather than general: it says what we store, where it physically sits, who else touches it, and how you remove it. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy covers the Drey mobile application. Intellova's separate data-integration platform is covered by the Intellova Privacy Policy.
1. What Drey stores
- The documents you upload — PDF, JPEG and PNG files, up to 25 MB each, exactly as you provided them.
- Text read from those documents, and the facts and dates extracted from that text (for example a licence number, or an expiry date).
- Your questions and Drey's answers, kept as conversation history so you can return to them.
- Your account — email address, a display name, and your preferences.
- Who you share with — the people you invite, their role, and which items are shared rather than private.
Because you choose what to upload, these documents may contain sensitive information as defined by the Privacy Act, including health information. You provide it, and you decide what goes in.
2. What Drey does not collect
- No advertising, no tracking, no data brokers. We do not sell or share your information for advertising, and there are no third-party advertising or analytics SDKs in the app.
- No biometric data. If you turn on the app lock, Face ID, Touch ID or your device passcode is checked by your phone's operating system. Drey is told only whether the check passed. Your fingerprint or face never reaches us.
- No location, contacts, or microphone.
- No document content in crash reports. See section 6.
3. Where it is kept
All Drey data is stored in Amazon Web Services in the Asia Pacific (Sydney) region, in an AWS account dedicated to this product. Documents are encrypted at rest with AWS Key Management Service keys and in transit with TLS. Access credentials are held in your device's secure keychain, not in ordinary app storage.
4. How a document is processed
When you upload a file, in order:
- It is placed in an encrypted quarantine store.
- It is scanned for malware. Nothing is read or processed until it clears.
- Text is extracted using Amazon Textract.
- That text is sent to Amazon Bedrock (the Amazon Nova models) to propose a title, a category, key facts and any dates.
- You review and confirm what was proposed. Drey suggests; you decide.
All of this happens inside our AWS account in Sydney. Amazon Bedrock does not use your content to train its models, and Drey does not train any model on your documents.
5. Who your documents are visible to
A document is private to you by default. It becomes visible to other people in your account only when you explicitly share it. This is enforced on our servers on every request, not merely hidden in the app. Drey's assistant can only answer from documents you are permitted to open, and every answer names its source so you can check it. Intellova staff do not read your documents; access to production data is restricted to what is required to operate and repair the service.
6. Who else processes your data
| Provider | Purpose | Receives |
|---|---|---|
| Amazon Web Services (Sydney) | Storage, database, sign-in, malware scanning, text extraction, AI | Documents and account data |
| Sentry | Crash reporting | Technical error details only — no document content, no identifiers |
| Apple / Google | App distribution | Purchase and install data they collect as the store |
Crash reports are deliberately stripped before leaving your device: identity is removed, long strings and document fields are redacted, and console output is not attached. We accept less diagnostic detail in exchange for no possibility of a record appearing in an issue tracker.
7. Keeping and deleting
We keep your data until you remove it. You are always in control:
- Delete a document — removed from the app, and the stored file and every prior version of it are erased.
- Delete your account — from Settings, or at intellova.com.au/drey/delete-account. This is a hard deletion, not a flag: documents, extracted text, facts, dates, conversations, sharing records and your sign-in are destroyed. There is no grace period and it cannot be undone.
If you shared a workspace with other people and were its owner, the workspace is handed to another member so their own records survive your deletion. Backups are retained briefly for disaster recovery and then expire. We may retain limited records where law requires it.
8. Your rights
Under the Australian Privacy Principles you may ask for access to the personal information we hold about you, ask us to correct it, or complain about how we have handled it. Most of this is immediate inside the app. For anything else, contact us below. If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
9. Data breaches
If a breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
10. Children
Drey is intended for adults. It is not for anyone under 18: it holds identity and financial records, and its paid plan is a contract. An adult may store records relating to a child in their own account, as a parent or guardian.
11. Changes
If we change how Drey handles your information we will update this page and its date, and tell you in the app where the change is significant.
12. Contact
LIVIA CARE PTY LTD, trading as Intellova
Email: apps@intellova.com.au