Privacy Policy

PawPoints is a mobile application operated from Auckland, New Zealand, that lets dog walkers earn rewards at participating cafés. This policy explains what personal information we collect, how we use it, and your rights under the New Zealand Privacy Act 2020.

Contact for any privacy enquiry: support@pawpoints.co.nz.

When you use PawPoints we collect:

• Account data: email address, name, phone number (optional), and your profile photo if you upload one.
• Dog information: dog name, breed, and age — used to set breed-appropriate walk targets.
• Walk data: GPS location, distance, duration, and a verification photo taken at the end of each walk.
• Device data: a push notification token tied to your device, used to deliver in-app notifications.
• Redemption history: which rewards you redeemed at which partner café, and when.
• Social activity: friend connections within the app and any comments you post on shared walks.

• To run the core service — track walks, award points, generate redemption codes, and confirm them at cafés.
• To match your dog's walks to a breed-appropriate target (using the breed and age you provide).
• To send push notifications about friend requests, accepted friendships, and shared walk photos. You can disable these in your device settings at any time.
• To detect and prevent fraudulent redemptions.
• To improve the app (aggregated and de-identified usage data only).

We do not sell your personal information to third parties.

We use Supabase as our backend provider. Your data is stored on Supabase's infrastructure (currently in their default region, which may be outside New Zealand). Supabase is a third-party processor bound by their own privacy commitments — supabase.com/privacy.

Push notifications are delivered via Expo's push service. Walk photos are stored in Supabase Storage.

• You: can see all of your own data inside the app at any time.
• Friends (within PawPoints): can see your name, dog name, and any walks/photos you share with them.
• Partner cafés: see only your redemption code and the reward being claimed — not your account, walk history, or any other personal information.
• PawPoints administrators: can access account and redemption records for fraud review and customer support.

Under the New Zealand Privacy Act 2020 you can:

• Request a copy of the personal information we hold about you.
• Ask us to correct anything that's wrong.
• Ask us to delete your account and personal data.
• Withdraw consent at any time by uninstalling the app and emailing us to confirm deletion.

To exercise any of these rights, email support@pawpoints.co.nz. We'll respond within 20 working days.

We keep your account data for as long as your account is active. If you request deletion, we remove your personal data within 30 days, except where we are legally required to retain certain records (such as financial transactions linked to café redemptions).

PawPoints is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us immediately so we can delete it.

We may update this policy from time to time. Material changes will be announced in the app and via email. The "Last updated" date at the top reflects the most recent version.

If you're not satisfied with how we handle a privacy concern, you can complain to New Zealand's Office of the Privacy Commissioner at privacy.org.nz.