myPath Wealth Pty Ltd
myPath Wealth Pty Ltd | ABN 78 681 154 674
Privacy Policy
Last updated: September 2026
myPath Wealth Pty Ltd (“myPath Wealth”, “MPW”, “we”, “us”, “our”) provides financial education, awareness and literacy services. We are part of the myPath Group, which also includes HY Accounting (HYA), a registered tax agent practice, and myPath Financial Planning (HYFP).
As part of our educational services, we aggregate information about your financial position – which may span superannuation, investments, insurance, entity and trust structures, tax position, property and other assets – into a single coordinated view. The purpose is educational: to help you understand your own financial position clearly, and to make it easier for you to present a complete picture to the licensed professionals you engage.
myPath Wealth is not a financial services provider, does not hold an Australian Financial Services Licence, and does not provide financial advice, recommendations, or personalised financial guidance. Where you want advice, we introduce you to appropriately licensed or qualified professionals, who contract with you directly.
Nothing in this policy, and nothing in any report, dashboard, summary or communication produced by myPath Wealth, constitutes financial product advice, tax advice, or legal advice, or a recommendation to acquire, dispose of, or hold any financial product. Our materials are educational. Before acting on anything you learn through our services, you should obtain advice from an appropriately licensed or qualified professional.
This policy explains what personal information we collect, why, how we protect it, how we use AI tools, and how you can access, correct or query it. It applies alongside our Terms and Conditions, which govern our engagement with you.
Because our role is to help you see your whole financial position in one place, the range of information we hold is broader than a single-service provider would typically hold. This may include:
● Identity information: name, date of birth, contact details, residential address, and identity verification documents.
● Financial information: banking details, income, assets and liabilities, superannuation fund details and balances, investment holdings, insurance policies and cover, and property holdings.
● Entity and structure information: details of companies, trusts, partnerships and SMSFs, including directors, shareholders, beneficiaries and trustees.
● Family and succession information: where you participate in family council sessions or succession-related education, information about family members and intended arrangements (see section 4).
● Information received from third parties you have authorised – superannuation funds, platforms, brokers, financial institutions, accountants or other advisers.
● Technical information where you access any myPath Wealth portal, dashboard or tool: device identifiers, IP address, and usage data.
We do not seek out health, biometric, or similar sensitive information, and do not require it to provide our services.
We collect personal information directly from you – where you connect accounts, upload documents or statements, complete a form, participate in a session, or otherwise provide information to us.
We also collect information from third parties where you have authorised it – for example, where you ask a superannuation fund, platform, broker, accountant or adviser to provide information so we can build or maintain your coordinated view. We only receive information from a third party where you have authorised that specific sharing.
Some of our services involve more than one person – for example, family council sessions where family members discuss shared financial goals and succession intentions.
In these settings, information one participant shares may be heard by other participants. We facilitate these sessions but cannot control what participants do with information disclosed in them. Where a session involves your information being shared with family members, we will make that clear beforehand. If you would prefer certain information not be raised in a group setting, tell us in advance and we will respect that.
Separately, the HeirWealth platform described in section 7 operates a “Family Group” function. If you are set up as part of a Family Group, your account information – including personal and financial information – is shared with the other members of that group, and you will likewise be able to see theirs. Each Family Group nominates a Primary Controller, and may nominate an Alternate Controller and an Account Administrator, who can access account information within the group and permit other members to view it. This is how the platform is designed to work for families managing wealth together.
Before you are added to a Family Group, we will explain what will be visible to whom. You can withdraw your consent to sharing your account information with a Family Group through your profile settings in the platform, or by asking us. If you would prefer your position not be visible to other family members, tell us and we will structure your set-up accordingly.
We collect, hold and use your personal information to:
● build and maintain the coordinated view of your financial position that supports our educational services;
● produce educational summaries, reports, roadmaps or dashboards presenting that view to you, or to a professional you have authorised to receive it;
● facilitate introductions to licensed or qualified professionals where you want advice we do not provide;
● track and follow up on matters you have asked us to help coordinate across your professional team;
● carry out internal administration, record-keeping and quality assurance; and
● meet our legal obligations.
We do not sell your personal information, and we do not provide it to any third party so that party can market to you. Some platforms we use hold their own relationship with you and may market their own services to you directly under their own terms – see section 7. We receive no commission, incentive or financial benefit from any professional we introduce you to.
myPath Wealth is a separate legal entity from HY Accounting and myPath Financial Planning. We do not treat information as freely shared across the group. Two situations apply:
● Where you came to us through HY Accounting – information already held by HYA in the course of that engagement may form part of your coordinated view, consistent with the authority you gave HYA.
● Where you came to us directly – we do not share your information with HY Accounting or myPath Financial Planning unless you ask us to or authorise it.
Separately, there are times when a question arising in your coordinated view would benefit from a technical eye – for example, a tax structuring question suited to HY Accounting, or an insurance question suited to myPath Financial Planning. We will ask your permission before sharing your information with either for that purpose. If you decline, we will simply note the question as one for you to raise with a professional of your choosing.
Each myPath Group company remains separately responsible for the information it holds and the services it provides. Nothing in this section makes myPath Wealth responsible for advice given by another myPath Group company, or makes them responsible for our educational services.
We use third-party platforms to deliver our services. Our own service providers – including Microsoft 365 for document storage, email and collaboration, and the AI tools described in section 8 – are selected and contracted having regard to their data security and privacy standards, and are required to use your information only to provide services to us.
HeirWealth is different, and it is worth being clear about why. HeirWealth is the wealth dashboard and document vault platform used to consolidate and display your financial position and store your key documents. It is operated by Morpheus Wealth Pty Ltd (ACN 653 517 394), which handles information under its own terms and privacy policy as well as under its arrangement with us. Under those terms, Morpheus Wealth acts as a data controller for information collected directly from you through the platform, and as a data processor where it handles information on our behalf. In practice this means:
● Where you hold your own HeirWealth account, your relationship with Morpheus Wealth is direct, and it may use your information for its own purposes under its privacy policy, including improving its services.
● Requests to access, correct or delete information held within HeirWealth can be directed to Morpheus Wealth at [email protected], as well as to us.
● Information held in HeirWealth may be stored or processed in Australia and the United States.
● Morpheus Wealth states that it maintains information security controls aligned to the ISO/IEC 27001:2022 standard.
We encourage you to read the HeirWealth terms and privacy policy, available on its website. We chose the platform having regard to its security standards, but Morpheus Wealth's own handling of information is governed by its agreement with you and is not something we control.
We may also disclose your information to licensed professionals, brokers, superannuation funds or platforms you have authorised; to regulatory or government bodies where required by law; and to a party to whom our business or assets may be transferred, subject to equivalent privacy protections.
We use AI tools to help process, organise, analyse and summarise your financial information as part of building your coordinated view and preparing educational materials. AI supports our team; it does not replace human judgement. Every AI-assisted output is reviewed by a qualified team member before it is used or provided to you.
The AI tools we have sanctioned for use in delivering our services are:
● Claude (Anthropic PBC, United States) – our primary AI tool, operated under commercial terms. Your data is never used to train Anthropic's AI models. Inputs and outputs are automatically deleted from Anthropic's systems within 30 days. A Data Processing Agreement is in place, which is how we meet our obligations under Australian Privacy Principle 8 when your information is disclosed to this overseas recipient.
● Microsoft 365 – in delivering our services, our systems may access documents, correspondence and records held within our Microsoft 365 environment that are relevant to your engagement.
No other AI tool is sanctioned for use with client data. This includes AI features that may be available within platforms we use for other purposes – those features are not approved for client work. We do not use free or consumer-grade AI tools with client data, and government identifiers such as Tax File Numbers are never entered into any AI tool under any circumstances.
By engaging us, you consent to our use of AI tools as described. If you would like specific elements of your engagement conducted without AI assistance, you may tell us in writing and we will consider this case by case. We will notify you of any material change to the AI tools we use that affects how your personal information is handled.
We do not use AI tools to generate financial advice or recommendations, and our AI tools do not make autonomous decisions about your financial position. AI is used as a processing and organisational tool only, consistent with our non-advisory, educational role. The Privacy Act 1988 (Cth) introduces new transparency obligations for automated decision-making from December 2026, and we will update this policy ahead of that date to the extent it applies to any of our processes.
Some of our service providers, including the AI and cloud providers referred to above, may store or process personal information on servers located outside Australia, including in the United States.
Where personal information is disclosed to an overseas recipient, we take reasonable steps consistent with Australian Privacy Principle 8 to ensure that recipient handles it in a manner consistent with the Australian Privacy Principles – principally through binding contractual obligations, including the Data Processing Agreement referred to in section 8.
You should be aware that information handled overseas may not receive the same statutory protections it would in Australia, notwithstanding the steps we take.
Given the concentrated nature of the information we hold, we apply the following protections: access is restricted on a need-to-know basis; information is held on secure, access-controlled systems with encryption applied by our platform providers; devices used to access client information are secured and managed; and third-party providers are selected and contracted with regard to their data security and privacy standards.
No system can be guaranteed completely secure, and we cannot guarantee the security of information transmitted electronically, including over the internet.
If a data breach occurs that is likely to result in serious harm to affected individuals, we will assess our obligations under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988) and notify affected clients and the Office of the Australian Information Commissioner where required.
We retain personal information for as long as necessary to provide our services and to meet our legal obligations. If you end your engagement with us, we will retain your information only as long as we have a lawful reason to, after which it is securely destroyed or de-identified. You can ask us about deletion at any time using the details in section 14.
You may request access to the personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete or misleading, by contacting us using the details in section 14. We may need to verify your identity before actioning a request, and will respond within a reasonable timeframe. If we cannot provide full access – for example, where doing so would unreasonably affect another person's privacy – we will explain why.
If you have a concern about how we have handled your personal information, please raise it with us first using the details in section 14 so we can try to resolve it directly. We will investigate and respond within a reasonable timeframe, and in any event within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.
For privacy questions, access and correction requests, or complaints, please contact us at [email protected].
We may update this Privacy Policy from time to time to reflect changes in our practices, the services we provide, our use of AI tools, or legal requirements. The updated policy will be posted on our website with a revised “last updated” date.