Privacy Policy

1) Personal information we collect

• Account & profile data: name (if provided), username, email, password (hashed), preferences, support messages.
• Usage & device data: pages viewed, approximate location (e.g., city/country from IP), device/browser info, identifiers, referral/UTM data, log data.
• Cookies & analytics: cookie IDs and similar technologies for functionality, security and measurement.
• Payment / in-app purchase metadata (where applicable): transaction IDs, timestamps, amounts, product/plan, and billing status from payment processors/app stores. We do not intentionally store full card numbers; payment details are handled by the provider.

2) How we use your information

• Provide and operate the site, create/maintain accounts, and deliver requested features.
• Security, fraud prevention, troubleshooting, and enforcing our terms.
• Analytics to understand performance and improve content and user experience.
• Communications: service notices, responding to requests, and (where permitted) marketing you can opt out of.
• Billing and records for purchases/subscriptions where applicable.

3) How we share information

We may share personal information with trusted service providers (e.g., hosting, analytics, customer support, email delivery, payment processors) who process it on our instructions. We may also disclose information where required or permitted by law, to protect rights/safety, or in a business transaction (e.g., merger). We do not sell personal information.

4) Cookies & analytics choices

We use cookies/local storage for essential functions (e.g., login), security, and measurement. You can control cookies through your browser settings and may delete existing cookies; some features may not work if you disable essential cookies.

5) Storage, retention & security

We store information using reasonable security safeguards (access controls, encryption in transit, and monitoring). We keep personal information only as long as needed for the purposes above, to meet legal/accounting requirements, resolve disputes, and enforce agreements, then delete or de-identify it where practicable. If we become aware of a notifiable privacy breach, we will notify affected individuals and the Office of the Privacy Commissioner (OPC) as required.

6) Overseas disclosures

Some service providers may store or process data outside New Zealand. Where this occurs, we take steps to ensure the recipient protects the information in a way that, overall, provides comparable safeguards to the Privacy Act 2020 (for example, contractual protections and provider due diligence).

7) Your rights (access & correction)

You can request access to, or correction of, your personal information. If we refuse a request, we will explain why (as required by law). To make a request, contact us using the details below.

8) Children

Our services are not intended for children who cannot provide consent under New Zealand law. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

9) Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date.