What we know about you, and what we don't

Who we are

Blackwattle sells Google Pixel phones set up in Australia with GrapheneOS and our own privacy and anti-theft app. Contact us about anything on this page at infoblackwattle@protonmail.com.

When you visit this website

• No cookies, no analytics, no trackers, no ads. The site loads nothing from any other company: fonts and code are served from this site, and its security settings block anything else.
• We keep no visitor logs. The site is hosted by Cloudflare, which handles your connection and so sees your IP address and which pages you load, as any web host does. We don't collect or look at that information.
• The installer page works inside your browser. Your access code unlocks the app on your own computer and is never sent to us. Nothing from your phone is sent anywhere. The page only talks to the phone over the USB cable.

When you order

We collect only what we need to sell you a phone and to meet our tax obligations:

• your email address and the messages you send us;
• your name and shipping address, if we're posting something to you;
• what you ordered and what you paid;
• payment records: for a bank transfer, the payer name and reference your bank shows us; for Bitcoin or Monero, the transaction ID and amount.

We never ask for card numbers, passwords or ID documents.

Your phone and the Blackwattle app

• The app has no internet permission. It cannot send anything to us or anyone else.
• It keeps no logs of wipes, PIN attempts or messages.
• You set your PINs and wipe sentence yourself, on the phone. They are sealed in the phone's security chip. We never see them and cannot recover them.
• Phones are set up with no accounts. We don't keep a copy of anything on your phone.

Who we share it with

• The delivery company gets your name and shipping address, only to deliver your order.
• Our accountant and the tax office see order and payment records as tax law requires.
• We give information to authorities only when Australian law requires us to.

We never sell or rent your information, and we don't use it for marketing to you unless you ask us to keep you updated.

How long we keep it

Australian tax law requires business records to be kept for five years. We keep order and payment records for that long, then delete them. Emails that aren't part of an order are deleted once the conversation is finished.

Email and Instagram

• Our email is Proton Mail. Messages between two Proton Mail addresses are encrypted end to end. From any other provider, keep messages brief.
• Instagram is run by Meta, under Meta's own privacy policy. Please don't send order or personal details by Instagram message.

Your choices

Email us to see the information we hold about you, to correct it, or to ask us to delete it. We'll delete anything we're not legally required to keep. If you're unhappy with how we handled your information, tell us first. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.