Last updated: March 2026 · Version v1.0-2026-03

This Privacy Policy explains how [Business Name] ("we", "us", "our") collects, uses, stores, and protects your personal information when you use Shiphasbolted.

We are committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020.

1. Who we are

[Business Name], [Address], New Zealand. Contact: [contact@email.com]

2. What information we collect

We collect information you provide directly:

• Account information — your name and email address when you register
• Property information — details about your property including materials, location (suburb), appliances, and garden features
• Usage data — task completions, notes, and maintenance logs you create
• Device information — browser type, device type, and push notification tokens (if you enable notifications)

3. How we use your information

We use your information to:

• Provide and operate the Shiphasbolted service
• Generate your personalised maintenance schedule
• Send push notifications and reminders (only if you consent)
• Improve the app based on usage patterns (aggregated, non-identifiable)
• Respond to support requests

We do not sell, rent, or trade your personal information to third parties.

4. Data storage and security

Your data is stored securely using Supabase (hosted on AWS in the US). Data is encrypted in transit (HTTPS) and at rest. Access controls ensure only you can access your data. We apply row-level security policies to all database tables.

While we take reasonable steps to protect your information, no system is completely secure. We will notify you promptly in the event of a breach that affects your personal data, as required under the Privacy Act 2020.

5. Third-party services

We use the following third-party services to operate Shiphasbolted:

• Supabase — database and authentication
• Vercel — hosting and infrastructure
• Open-Meteo — weather data (no personal data is shared)
• Stripe — payment processing (if you subscribe to a paid plan)
• Resend — transactional email delivery

Each of these services has its own privacy policy. We encourage you to review them.

6. Push notifications

If you enable push notifications, your device's push token is stored in our database and used solely to send you maintenance reminders. You can disable notifications at any time from your device settings or from the app settings screen. Disabling notifications will remove your push token from our database.

7. Your rights under the Privacy Act 2020

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate information
• Deletion — request deletion of your account and all associated data
• Data portability — export your data at any time from the Settings screen

To exercise any of these rights, contact us at [contact@email.com].

8. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days, except where we are required to retain it by law.

9. Cookies

Shiphasbolted uses session cookies for authentication only. We do not use tracking, advertising, or analytics cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or email. Continued use of the app after changes take effect constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your rights, contact us at:
[Business Name] · [Address] · [contact@email.com]