This notice explains how Nabbd collects, uses, stores and shares personal information when people use the Nabbd app or contact Nabbd.
1. Who we are
Nabbd operates the Nabbd app. Nabbd is not currently a registered company. In this notice, “Nabbd”, “we”, “us” and “our” refer to the operator of the app. The Privacy Act 2020 applies to personal information handled through the app regardless of Nabbd’s registration status.
For privacy questions, requests or complaints, contact nabbd.nz@outlook.com.
2. Information we may collect
Account information
- Name and email address.
- An account identifier generated by our authentication provider.
- Account creation, update and privacy-notice acceptance information.
Points and check-in information
- Points balance, check-in count and check-in history.
- The deal, venue, area, category, date and time associated with a check-in.
- Whether the app’s proximity check passed and the number of points awarded.
Location information
When a person chooses to check in, Nabbd temporarily accesses the device’s location to assess whether the device appears to be near the venue. Nabbd does not intentionally store the device’s precise latitude or longitude in the check-in record.
Preferences and communications
- Notification preferences and selected notification areas and categories.
- A device notification token if push notifications are enabled.
- Deal reports, deal submissions, feedback, support requests and communications with Nabbd.
Saved venues and usage analytics
- Venues a signed-in personal account chooses to save.
- For signed-in personal accounts, whether the person views a listing, opens its details or requests directions, together with the listing category and the Auckland date and broad time period.
- The Auckland dates on which a signed-in personal account uses Nabbd, to measure return rates after account creation.
- A limited history of the first three distinct venues saved during the account’s first seven Auckland calendar days. This analytics history remains if the person later unsaves a venue.
- A pseudonymous account key used to count unique customers and prevent the same action being counted repeatedly. Venues do not receive this key.
Usage analytics are on by default for signed-in personal accounts. Admin, venue and internal accounts are excluded. Usage events are stored under a pseudonymous identifier and venues receive aggregated statistics rather than customer-level records. Venues are not given customer names, email addresses, precise locations, pseudonymous account keys or individual activity histories.
A signed-in personal account can choose “Manage usage analytics” under Privacy & Account in the app. This stops future listing-interaction, daily-activity and first-week-save analytics for that account and deletes its existing individual usage-analytics records. Saved venues are controlled separately and are not removed by this choice.
Technical information
We may collect limited technical, diagnostic and security information needed to operate, protect and troubleshoot the app.
We collect this information directly from people who use the app. We do not currently collect personal information about users from third-party sources. If that changes, we will update this notice and provide any notification required under the Privacy Act 2020.
3. Why we use information
We use personal information to:
- create, authenticate and maintain accounts;
- keep points and check-in history connected to the correct account;
- process venue check-ins and reduce duplicate point awards;
- provide requested notifications and remember preferences;
- receive and review deal reports, submissions and feedback;
- provide personal accounts with saved venues;
- measure return rates and whether early venue-saving is associated with later app use;
- produce privacy-protected, aggregated venue and listing performance statistics;
- operate, secure, improve and troubleshoot Nabbd; and
- respond to privacy requests, complaints and legal obligations.
4. Service providers and overseas processing
Nabbd uses service providers, including Google Firebase, for account authentication, database storage and supporting app functions. Service providers may process or store information outside New Zealand. We may add or change service providers as Nabbd develops and will update this notice where appropriate.
We do not sell personal information.
If an authorised venue or administrator requests an AI analytics summary, Nabbd may send aggregated statistics to OpenAI to generate that summary. Names, email addresses, precise locations, account identifiers and individual activity records are not included in that request.
5. When information may be shared
We may share personal information with service providers where necessary to operate Nabbd, with professional advisers where reasonably required, or where disclosure is required or permitted by law. We do not provide a user’s personal details to venues merely because the user views or checks in to a deal.
Venues receive only aggregated analytics about their own listings. Small audience and location groups are suppressed to reduce the risk that a person could be identified.
6. Storage and security
We use reasonable technical and organisational safeguards designed to protect personal information from loss, unauthorised access, misuse or disclosure. No online service can guarantee absolute security.
Passwords are handled by our authentication provider. Nabbd does not intentionally store account passwords in its app database.
7. Retention
We keep personal information only for as long as reasonably needed for the purpose for which it was collected, to operate an account, resolve disputes, prevent misuse, meet legal obligations or maintain necessary business records. When information is no longer needed, we will take reasonable steps to delete or anonymise it.
Detailed listing-interaction, daily-activity and first-week-save analytics are designed to expire after approximately 13 months and are deleted when a person uses “Manage usage analytics” and confirms the deletion. Saved venues remain connected to an account until the user removes them or the account is deleted. Aggregated, non-identifying statistics may be retained for longer where they cannot reasonably identify an individual.
8. Privacy breaches
If a privacy breach involving personal information occurs and is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, in accordance with Part 6 of the Privacy Act 2020.
9. Access and correction
A person may ask for access to personal information Nabbd holds about that person, or ask for it to be corrected. Email nabbd.nz@outlook.com with the subject “Nabbd privacy request”. We will respond as soon as reasonably practicable and within the timeframe required by the Privacy Act 2020, which is generally 20 working days. We may need to verify the requester’s identity before providing or changing account information.
10. Account deletion
A signed-in user may permanently delete a Nabbd account through the account controls after confirming their password, or ask for help by emailing nabbd.nz@outlook.com. The deletion process removes the login identity, profile, saved venues, check-ins, individual analytics activity, deal submissions, venue applications, venue access and account-owned venue images. Reports and listing audit history that Nabbd needs for safety, dispute resolution and accurate business records may be retained, but the account identifier, name and email are removed from those retained records. An anonymous completion receipt is kept so Nabbd can verify that the deletion finished without retaining the deleted account identifier or email address.
11. Notifications
Push notifications are optional. A user can change Nabbd notification preferences in the app when those controls are available and can also disable notifications through device settings.
12. Privacy concerns and complaints
Contact nabbd.nz@outlook.com if there is a privacy concern or complaint. A person may also contact the New Zealand Office of the Privacy Commissioner at privacy.org.nz.
13. Changes to this notice
We may update this notice as Nabbd’s features, service providers or legal obligations change. The effective date at the top will identify the current version. If a change is significant, we may also notify users in the app or ask users to accept the updated notice.