Privacy Policy

How Keen handles your personal information.

1. Who we are

Keen (CONFIRM: legal entity name, NZBN, registered address) operates the Keen app and website. Contact: support@keen.example. Privacy officer: CONFIRM: name/role.

2. Information we collect

• Account details: CONFIRM: name, email, phone, password/sign-in method (e.g. Apple/Google)
• Profile information: CONFIRM: photo, preferences, if applicable
• Booking information: appointments you make, providers, times and status.
• Precise or approximate location: only if you grant permission (see section 3).
• Payment information: CONFIRM: confirm whether payments exist and which processor handles card data; Keen should not store full card numbers
• Provider information: CONFIRM: business name, services, availability, pricing, address, staff details
• Device and usage data: CONFIRM: device type, OS, app version, crash logs, analytics, push notification token
• Messages you send us through support.

3. Location

The app asks for location permission to show appointments near you. CONFIRM: Confirm: "while using the app" only? Precise or approximate? Background location? Location is optional: CONFIRM: confirm the app still works with a manually entered suburb/city. You can change this at any time in your device settings (iOS: Settings → Privacy & Security → Location Services). CONFIRM: Confirm whether location is stored on servers or used on-device only, and for how long.

4. Why we use your information

• To create and manage your account.
• To show nearby appointments and process bookings.
• To share necessary booking details with the provider you book.
• To provide support and send service messages.
• To keep the service secure and prevent fraud.
• CONFIRM: Marketing, analytics, product improvement — list only what is actually done, and the consent basis

5. Who we share it with

We share information with the providers you book and with service providers (processors) who help us run Keen:

• Database/authentication hosting: CONFIRM: Supabase — confirm project region and data processing agreement
• Payments: CONFIRM: processor name, or "none"
• Email/SMS/push: CONFIRM: provider names
• Analytics/crash reporting: CONFIRM: provider names, or "none"
• Website hosting: CONFIRM: e.g. Cloudflare

We do not sell personal information. CONFIRM: Confirm. Information may be stored or processed overseas, including CONFIRM: countries. CONFIRM: Confirm how overseas disclosure meets NZ Privacy Act 2020, IPP 12.

6. How long we keep it

CONFIRM: Define retention for: active account data, booking history, support emails, logs, and any records we must keep for tax or legal reasons.

7. Account deletion

You can request deletion of your account and associated data at any time. See Account Deletion for the process. CONFIRM: Confirm exactly what is deleted, what is retained and why, and the timeframe.

8. Your rights

Under the New Zealand Privacy Act 2020 you can ask to access and correct your personal information. Email support@keen.example. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz).

9. Security

CONFIRM: Describe actual measures, e.g. encryption in transit, access controls. Do not overstate.

10. Children

CONFIRM: Confirm minimum age for using Keen.

11. Changes

We will update this page when our practices change. Last updated: CONFIRM: date.