FMT Pay - Privacy Policy

Last updated: 11.06.2026
Effective date: 11.06.2026

Fluid Management Technology Pty Ltd (“FMT”, “we”, “us”, or “our”) operates the FMT Pay (the “App”). This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use the App.

By creating an account or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

1. Scope

This policy applies to the FMT Pay on iOS and Android. It does not replace FMT’s general website privacy policy, but it is the primary policy for App-specific data practices.

2. Who we are and how to contact us

Data controller: Fluid Management Technology Pty Ltd
Website: https://fmtweb.com
Support: https://fmtweb.com/au/fmt-pay/support
Privacy enquiries: https://fmtweb.com/au/fmt-pay/privacy-policy

3. Information we collect

3.1 Information you provide

When you register and use the App, we may collect:

  • Account details: name, email address, mobile phone number, password (stored in hashed form on our servers), and country (Australia or United States).

  • Verification data: one-time passwords (OTP) sent by SMS or email for signup, login, or password reset.

  • Payment-related information: payment method details you add (e.g. card alias, masked card details, receipt email if provided). Full card numbers are handled by our payment processor, not stored in full by the App.

  • Transaction information: fuel payment amounts, station and pump details, transaction status, date/time, and receipts.

  • Support / issue reports: problem type, description, and related transaction ID when you report an issue from transaction history.

3.2 Information collected automatically

When you use the App, we may collect:

  • Authentication tokens and basic account/session data needed to keep you signed in.

  • App preferences stored on your device (e.g. last selected fuel type, biometric login preference).

  • Technical/log data such as device type, operating system, app version, and API request metadata needed to operate and secure the service.

3.3 Information from device permissions (only if you allow)

The App may request access to:

Permission

Permission

Purpose

Purpose

Collected by FMT

Collected by FMT

Location (while using the App)

Location (while using the App)

Show nearby fuel stations, distances, and your approximate address on the map

Show nearby fuel stations, distances, and your approximate address on the map

Coordinates may be sent to our servers to find stations; not used for unrelated tracking

Coordinates may be sent to our servers to find stations; not used for unrelated tracking

Camera

Camera

Scan station QR codes (FMT Pay)

Scan station QR codes (FMT Pay)

No images or video are stored or uploaded; the camera is used only to read QR codes on your device

No images or video are stored or uploaded; the camera is used only to read QR codes on your device

Biometric login (Face ID / Touch ID)

Biometric login (Face ID / Touch ID)

Optional unlock of an existing login session

Optional unlock of an existing login session

No face or fingerprint data is collected (see Section 6)

No face or fingerprint data is collected (see Section 6)

The App does not request access to your photo library, microphone, or contacts.

4. How we use your information

We use personal information to:

  1. Create and manage your account

  2. Authenticate you (password, OTP, optional biometric unlock)

  3. Let you find stations, select pumps, and pay for fuel

  4. Process payments through our payment partners

  5. Show transaction history and receipts

  6. Respond to support requests and reported issues

  7. Improve reliability, security, and fraud prevention

  8. Comply with legal obligations

We do not use camera or biometric data for advertising, profiling, or sale to data brokers.

5. Camera and QR codes

The App uses the device camera only to scan FMT payment QR codes at fuel stations.

  • QR codes use URLs in this format: FMT Pay

  • The App reads the QR content to identify the station (and pump if included).

  • We do not capture, store, or transmit photos, video, or camera recordings.

  • If you deny camera access, you can still find stations using the map and station list (location permission may be required for nearby results).

The App uses the device camera only to scan FMT payment QR codes at fuel stations.

  • QR codes use URLs in this format: FMT Pay

  • The App reads the QR content to identify the station (and pump if included).

  • We do not capture, store, or transmit photos, video, or camera recordings.

  • If you deny camera access, you can still find stations using the map and station list (location permission may be required for nearby results).

6. Biometric authentication (Face ID / Touch ID) — Face data

The App offers optional biometric login using your device’s Face ID or Touch ID.

Important:

  • Biometric verification is performed locally on your device by Apple or Google’s operating system.

  • FMT does not collect, receive, store, process, or share facial images, facial geometry, face maps, fingerprint images, or other biometric templates.

  • The App only receives a success or failure result from the device.

  • If you enable biometric login, the App may store on your device:

    • your preference to use biometrics, and

    • a login identifier (email or phone) and session token after you have signed in with your password — not biometric data.

  • You can disable biometric login at any time in Settings within the App.

  • Disabling biometric login or signing out removes related stored credentials according to our logout flows.

Retention of face data: Not applicable — we do not collect or retain face data.

Sharing of face data: Not applicable — we do not share face data with third parties.

7. Location information

If you grant location permission:

  • We use your location while you use the App to show nearby stations and distances.

  • Location coordinates may be sent to FMT servers to retrieve station lists.

  • We do not use location for background tracking.

  • You can deny or revoke location access in device Settings; some features (e.g. nearby station sorting) may not work without it.

During signup, location may optionally be used once to suggest your country (Australia or United States).

8. Payments and third-party processors

Payments are processed using third-party payment services, including:

  • TNS / Webbank (card tokenisation and payment processing)

  • Apple Pay (on supported iOS devices)

  • Google Pay (on supported Android devices, where enabled)

When you pay:

  • Card and wallet details are handled according to the processor’s and wallet provider’s terms and security standards.

  • FMT receives transaction results, tokens, and limited card metadata needed to complete payments and show receipts — not your full card number.

  • Map display may use Mapbox (and on some platforms map-related services), which receive location/map data necessary to render the map.

We do not sell your payment information.

9. How we store and protect information

• On our servers: Account, transaction, and payment-related records are stored on secured systems operated or controlled by FMT.

  • On your device: Session tokens, account profile cache, and preferences may be stored locally (including encrypted storage for sensitive login identifiers used with biometric unlock).

  • We use reasonable technical and organisational measures to protect data against unauthorised access, loss, or misuse.

  • No method of transmission or storage is 100% secure; you use the App at your own risk to the extent permitted by law.

• On our servers: Account, transaction, and payment-related records are stored on secured systems operated or controlled by FMT.

  • On your device: Session tokens, account profile cache, and preferences may be stored locally (including encrypted storage for sensitive login identifiers used with biometric unlock).

  • We use reasonable technical and organisational measures to protect data against unauthorised access, loss, or misuse.

  • No method of transmission or storage is 100% secure; you use the App at your own risk to the extent permitted by law.

10. How long we retain information

We retain personal information only as long as needed for the purposes in this policy, including:

  • Account data: while your account is active and for a reasonable period after closure, unless a longer period is required by law.

  • Transaction and payment records: as required for accounting, dispute resolution, and legal compliance (which may include minimum retention periods under applicable law).

  • Device-stored session data: until you sign out, disable biometric login, uninstall the App, or clear app data.

  • Face/biometric data: not retained by FMT (we do not collect it).

11. Disclosure of information

We may share personal information with:

  • Payment processors (e.g. TNS / Webbank, Apple, Google) to process transactions

  • Infrastructure and service providers that help us host and operate the App (under confidentiality obligations)

  • Regulators, courts, or law enforcement when required by law or to protect rights, safety, and security

We do not sell your personal information.

12. International use

The App is intended for users in Australia and the United States. If you use the App from another country, your information may be processed in Australia, the United States, or where our service providers operate.

13. Your choices and rights

Depending on your location, you may have rights to:

  • Access or correct your personal information

  • Request deletion of your account (subject to legal retention requirements)

  • Withdraw consent for optional features (camera, location, biometrics) via device or App settings

  • Opt out of marketing communications (if applicable)

To exercise these rights, contact us using the details in Section 2.

14. Children

The App is not intended for children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

15. Links and deep links

The App may open links to FMT websites (e.g. support, terms, this policy) and handle deep links such as FMT Pay . Third-party websites have their own privacy practices.

16. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. Continued use of the App after changes means you accept the updated policy.