Personal information
We are authorised by the Taxation Administration Act 1953 to collect personal information.
We will collect your mobile number and email address for the purposes of registering your device, associating it with your ATO record and confirming your identity. If we do not collect this information, you will not be able to register your device or access personalised ATO app features as these require access to your ATO record.
We will also collect internet protocol address (IP address) for security purposes to detect and prevent fraudulent activity. The IP address may indicate your general location. If you do not wish for us to collect your IP address, do not sign into the ATO app and we will not be able to offer you personalised ATO app features.
If you use the myDeductions tool for recording deductions and choose to upload these records, we will collect this data and use it to prefill your tax return. We may also use your uploaded records to verify the information in your tax return for the purposes of administering taxation and superannuation laws, and for analytical purposes. If you choose to record personal or sensitive information (for example, add GPS trips, information about any professional or trade association), then we will collect this personal or sensitive information when you upload. Upload does not include any photographs. If you do not wish for us to collect your myDeductions data, do not upload and we will not prefill your tax return.
The collected personal information is unlikely to be disclosed to any other entities, bodies or persons, or to overseas recipients.
Information about your device
Your ATO app usage data and crash reports will be sent to the ATO to help us improve our service. None of the collected data identifies you personally.
Your device and ATO app installation information will be recorded for security purposes as part of ensuring safe interactions using the ATO app. This may include:
- your device type and operating system
- your IP address which may indicate your general location
- the date and time of use of the authentication service
- the method you used to sign in
- successful and unsuccessful attempts at authenticating.
This information may also be used to:
- compile statistics and reports using de-identified data to improve ATO systems and services
- identify and respond to issues that may indicate ATO system integrity is at risk.
ATO access to myGov
myGov is run by Services Australia on behalf of the Australian Government. You sign in to myGov to let linked services – such as the ATO – know who you are and to access online services. This happens when you link the ATO to your myGov account.
For information on how myGov collects, hold, uses and discloses your personal information, see the myGov privacy noticeExternal Link. Also refer to ATO access to myGov terms and conditions and privacy notices.
myID
myID system is a secure digital environment for individuals to establish and verify their identity. For information on how myID collects, uses and discloses your personal information, see the myID privacy policyExternal Link.
Our privacy policy
Our privacy policy contains important information about your privacy, including information about:
- how you can access and seek correction of information we hold about you
- how you may complain about a breach of the Australian Privacy Principles
- how we deal with privacy complaints.