Privacy Policy

PawPoints is a mobile application operated from Auckland, New Zealand, that lets dog walkers earn rewards at participating local shops and cafés. This policy explains what personal information we collect, how we use it, and your rights under the New Zealand Privacy Act 2020 and, where applicable, the Australian Privacy Act 1988.

Contact for any privacy enquiry: support@pawpoints.co.nz.

When you use PawPoints we collect:

• Account data: email address, name, phone number (optional), and your profile photo if you upload one.
• Dog information: dog name, breed, and age — used to set breed-appropriate walk targets.
• Walk data: GPS location, distance, duration, and a verification photo taken at the end of each walk.
• Nearby cafés (on your device only): the Rewards screen uses your device's current location to sort cafés and partner businesses by distance. This matching happens entirely on your device — your location is never sent to our servers, stored, or shared for this feature.
• Device data: a push notification token tied to your device, used to deliver in-app notifications.
• Contacts (optional): if you choose to find friends from your phone's contacts, we send the contacts' phone numbers to our server only to check who already uses PawPoints. The numbers are used for matching at that moment, are not stored on our servers, and your contacts' names stay on your device.
• Crash and diagnostic data: if the app crashes or hits an error, we collect a crash report (including device model, operating system version, and a technical stack trace) through our crash-reporting provider, Sentry, so we can fix the problem.
• Redemption history: which rewards you redeemed at which partner business, and when.
• Social activity: friend connections within the app and any comments you post on shared walks.

• To run the core service — track walks, award points, generate redemption codes, and confirm them at partner businesses.
• To match your dog's walks to a breed-appropriate target (using the breed and age you provide).
• To send push notifications about friend requests, accepted friendships, and shared walk photos. You can disable these in your device settings at any time.
• To show cafés and partner businesses near you, sorted by distance — computed on your device; your location does not leave your phone for this.
• To detect and prevent fraudulent redemptions.
• To improve the app (aggregated and de-identified usage data only).

We do not sell your personal information to third parties.

We use Supabase as our backend provider. Your data is stored on Supabase's infrastructure (currently in their default region, which may be outside New Zealand). Supabase is a third-party processor bound by their own privacy commitments — supabase.com/privacy.

Push notifications are delivered via Expo's push service. Walk photos are stored in Supabase Storage. Crash and diagnostic reports are processed by Sentry (sentry.io/privacy). These providers may store data outside New Zealand and Australia.

• You: can see all of your own data inside the app at any time.
• Friends (within PawPoints): can see your name, dog name, and any walks/photos you share with them.
• Partner businesses: see only your redemption code and the reward being claimed — not your account, walk history, or any other personal information.
• PawPoints administrators: can access account and redemption records for fraud review and customer support.

Our mascots, Hugo & Daisy, are the founder's own fur babies — playing as the faces of PawPoints to celebrate happy, healthy walks for dogs and their humans. With the founder's consent, their walk photos are featured publicly on our website.

This applies only to accounts we specifically designate as mascots. Your photos are never made public — your walk photos stay private to you and the friends you share them with, as described above.

Under the New Zealand Privacy Act 2020 you can:

• Request a copy of the personal information we hold about you.
• Ask us to correct anything that's wrong.
• Ask us to delete your account and personal data.
• Withdraw consent at any time by uninstalling the app and emailing us to confirm deletion.

To exercise any of these rights, email support@pawpoints.co.nz. We'll respond within 20 working days.

If you use PawPoints in Australia, the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs) also apply to how we handle your personal information. You have rights equivalent to those described above, including the right to access and correct your information and to make a complaint.

If we cannot resolve a privacy complaint to your satisfaction, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

We keep your account data for as long as your account is active. If you request deletion, we remove your personal data within 30 days, except where we are legally required to retain certain records (such as financial transactions linked to partner business redemptions).

PawPoints is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided information to us, please contact us immediately so we can delete it.

We may update this policy from time to time. Material changes will be announced in the app and via email. The "Last updated" date at the top reflects the most recent version.

If you're not satisfied with how we handle a privacy concern, you can complain to New Zealand's Office of the Privacy Commissioner at privacy.org.nz.