Security Policy & Intellectual Property & Governance

Intellectual Property & Governance HabiFood is an original work protected under Australian copyright law (Copyright Act 1968) from the date of creation. The platform name, logo, database schema, and methodology are proprietary. Trade mark registration is in progress with IP Australia (Class 42 and Class 45). Access is restricted to current, active wildlife rehabilitation permit holders. HabiFood provides admin access controls to DEECA Wildlife Licensing for permit verification and account management. The platform is not affiliated with any wildlife organisation, agency, or government department.

Use this section to tell people about which versions of your project are currently being supported with security updates.

Use this section to tell people how to report a vulnerability.

Tell them where to go, how often they can expect to get an update on a reported vulnerability, what to expect if the vulnerability is accepted or declined, etc.

Privacy by design — the non-negotiable What is never shared with other carers ❌ How long an individual animal is in care ❌ Care methods, feeding protocols, or treatment approaches ❌ Individual animal outcomes ❌ Shelter throughput, capacity, or activity level ❌ Any data that describes how a specific carer operates This isn't a technical limitation — it's a deliberate design decision. The wildlife rehabilitation sector carries structural tensions between carers, organisations, and agencies. Data that profiles individual practice can be used with malicious intent regardless of how it was intended. HabiFood does not provide those tools. It never will.

What is shared — and why it's safe ✅ Rescue density — species, approximate location, cause. Nobody knows who logged it. ✅ Release density — species, location grid, habitat type. Nobody knows whose animal it was. ✅ Browse stage — private to the carer only. Never leaves your device. ✅ Government data — burns, chemicals, clearings. Nobody logged it — it flows automatically. The two shared data points — rescue and release density — are anonymous by default, location-gridded (not exact address), and contain nothing about the carer. What they build, in aggregate, is a picture of where animals are and where they're going that benefits every carer in the network equally — including the ones who contributed nothing.