Privacy Policy

1. About this policy

This policy applies to the Oynk website, app, and membership service, operated by SPR Rewards Limited (NZBN 9429053656957), which trades as Oynk, in Auckland, New Zealand. It covers how we act as the agency responsible for your personal information under the Privacy Act 2020 and its thirteen Information Privacy Principles.

2. Information we collect

We collect information you give us and information created as you use Oynk:

• Account details: your name, email address, date of birth, and any profile details you add, such as an avatar or short bio.
• Membership and payment: the plan you choose and your subscription status. Card payments are handled by Stripe. We receive confirmation of payment and limited details such as the card brand and last four digits, but we never see or store your full card number.
• Usage: how you use the service, such as the brands you favourite, your points activity, and which deals you view, so we can run features and improve the product.
• Offers and codes: a record of the deals you redeem, and of any single-use discount code we issue you for a partner’s online store — when it was issued, and, where the partner tells us, whether it has been used.
• Optional website analytics: only if you choose “Allow all”: how you arrived at Oynk (such as a campaign link or referring website, and the page you landed on) and selected actions on our website, as described in section 4. If you choose “Refuse all”, none of this is collected.

3. How we use your information

• to create and run your account and membership;
• to process payments and manage renewals and cancellations through Stripe;
• to send you the service messages you need, such as sign-up confirmation, password resets, and billing notices;
• to issue discount codes for partner online stores and email them to you;
• to provide, secure, and improve the service;
• to meet our legal obligations and protect against fraud or misuse.

We currently send only service and account emails that are part of running your membership. We do not send marketing or newsletter emails. If we introduce optional marketing messages in future, we will ask for your consent and give you an easy way to opt out.

4. Cookies and analytics

Essential sign-in cookies are separate from optional website analytics. Refusing analytics does not change your access to Oynk.

• Essential cookies: when you sign in, our authentication provider (Supabase) sets a secure session cookie so we can keep you logged in and protect your account. The service cannot work without it, so it does not require consent.
• Optional analytics: we ask before collecting campaign context (how you arrived at Oynk) or selected actions such as viewing a brand, saving it, joining the waitlist, starting signup or clicking an enabled app-store link. Searches include length and result counts, never the search text. Names, email addresses, birth dates, auth links, precise location, passwords and redemption codes are excluded. Automatic page tracking, session recordings and automatic click capture are disabled.
• Your choice and identity: we store your analytics preference locally when your browser permits it. After permission, a secure cookie links campaign visits; if you sign in, an internally verified account ID can link permitted events and campaign summaries. No email address is used to join identities. The optional SDK keeps its browser identity in memory and resumes the same consented visitor from the secure cookie on later pages. The browser never receives the cookie proof through JavaScript. If storage is unavailable, your preference lasts only while this page remains open.

One choice covers both optional purposes: “Allow all” or “Refuse all”. Analytics records the selected actions above under a random ID kept in this browser's local storage (not a cookie, not derived from your device), never joined to campaign data. Marketing adds the campaign cookie. You can change your mind at any time with “Privacy choices”, which is in the site footer and at the bottom of the waitlist page. Choosing “Refuse all” stops both purposes, deletes the analytics ID, resets their browser identity and requests revocation of the campaign cookie; it does not claim that previously held records have been erased. These controls apply to this website, not previously installed versions of our mobile apps.

Optional analytics are recorded by Oynk in our own database, hosted by Supabase. We do not send them to a third-party analytics service, and Vercel Analytics and Speed Insights are not loaded on this website.

5. Who we share information with

We do not sell your personal information. We share it only with trusted service providers who help us run Oynk, and only as far as they need it:

• Stripe for payment processing and billing;
• Supabase for our database, secure sign-in, and file storage;
• Resend for sending account and service emails;
• Partner online stores, including stores running on Shopify, where an offer is redeemed online. We create the discount codes inside the partner’s store, but we do not send them your name, email address, or any other detail that identifies you — the code alone marks an order as an Oynk one;
• Vercel for hosting the website;
• Google and Apple if you choose to sign in using their accounts, only to verify your identity.

We may also disclose information where the law requires it, to protect our rights or the safety of others, or as part of a business sale or restructure, in which case we will protect your information as described here.

6. Where your information is stored

Some of our providers store data on servers outside New Zealand, including our database, which is hosted in Sydney, Australia. Where information is held overseas, we take reasonable steps to ensure it has protection comparable to that required under the Privacy Act 2020.

7. Your rights

Under the Privacy Act 2020 you have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if it is wrong. To make a request, email support@oynk.co.nz. We may need to verify your identity first, and we will respond within the timeframes the Act requires.

8. How long we keep it

We keep your personal information for as long as you hold an account, and after that only for as long as we need it to meet legal, accounting, or fraud-prevention obligations. When we no longer need it, we delete or anonymise it.

Discount codes and redemption records are kept while the offer they belong to is running, and for a limited period afterwards so we can help with a query about an order and settle things with the partner.

9. Deleting your account

You can delete your Oynk account and the personal information attached to it at any time. In the Oynk app, open your profile, then Settings, then Delete account. If you cannot sign in, email support@oynk.co.nz from the address on your account and ask us to delete it.

Deleting in the app takes effect straight away. Email requests are completed within 30 days. Deletion removes your profile, saved favourites, pig, coins, redemption history, and notification settings, and cancels any active membership. Payment records held by our payment providers, and any records we must keep to meet legal, accounting, or fraud-prevention obligations, are kept for as long as the law requires and then deleted or anonymised. A deleted account cannot be restored.

10. How we protect it

We use technical and organisational measures to protect your information, including encrypted connections, access controls, and database row-level security. Card data is handled by Stripe under its own strict security standards. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.

11. Children

Oynk is a paid membership intended for adults and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a child has given us their information, contact us and we will remove it.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed. If we make a material change, we will take reasonable steps to let you know.

13. Contact and complaints

Questions or concerns about your privacy? Email us at support@oynk.co.nz and we will do our best to help. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz.