Privacy Policy

1. About this policy

This policy applies to the Oynk website, app, and membership service, operated by SPR Rewards Limited (NZBN 9429053656957), which trades as Oynk, in Auckland, New Zealand. It covers how we act as the agency responsible for your personal information under the Privacy Act 2020 and its thirteen Information Privacy Principles.

2. Information we collect

We collect information you give us and information created as you use Oynk:

• Account details: your name, email address or phone number, the age range you select, and any profile details you add, such as an avatar or short bio. Older accounts may still have a date of birth recorded; new registration asks for an age range instead.
• Sign-in and account security: the methods linked to your account, code delivery and verification results, and records needed to prevent misuse and help you recover access. If you choose Google or Apple sign-in, we receive the account identifier and any profile details you permit that provider to share. Apple may give us a private relay email address. A passkey uses a public-key credential; your fingerprint, face scan or device PIN stays with your device. Existing accounts may still use a password during the changeover.
• Eligibility and legal choices: your age range, the version and time of any Terms acceptance and Privacy Policy acknowledgement, and your separate, changeable optional analytics choice.
• Membership and payment: the plan you choose and your subscription status. Stripe handles website card payments; Apple or Google may handle purchases made in their app stores. We receive payment and subscription status needed to run your membership, but do not store your full card number.
• Usage: how you use the service, such as the brands you favourite, your points activity, and which deals you view, so we can run features and improve the product.
• Offers and codes: a record of the deals you redeem, and of any single-use discount code we issue you for a partner’s online store: when it was issued, and, where the partner tells us, whether it has been used.
• Optional website analytics: only if you choose “Allow all”: how you arrived at Oynk (such as a campaign link or referring website, and the page you landed on), selected actions on our website, and permitted summaries of whether a signup or membership purchase followed, as described in section 4. If you choose “Necessary only”, this optional website tracking is not collected. This choice does not cover the campaign record described below. The Oynk app on iPhone asks separately, through Apple’s tracking permission and its own privacy card, before it collects campaign details or app analytics, as described in section 4.
• Website visit and speed measurement: which pages of our website are visited, how fast they load, the referring website, and the browser, device type and country a visit comes from. We use Vercel Web Analytics and Speed Insights for this, as described in section 4. It uses no cookies and is not linked to your account.
• Campaign link or advert you arrived through: when you arrive at Oynk through one of our campaign links or adverts (for example, a QR code at an event or one of our social media ads), we record which link or advert it was, its campaign tags, the page you landed on and the type of browser (such as an in-app browser), and keep that record for up to 90 days under a small cookie that holds only a random code; if you create an account within 7 days, we attach the record to your account so we know which campaign brought you. We do this without asking for your consent, whichever cookie choice you make, because it records which of our links or adverts you used, not what you do. We do not keep your IP address, a device or browser identifier, or details of what you did on the site. For up to 60 minutes after your visit we also keep a network hash: a scrambled code made from the network part of your internet address, which cannot be turned back into that address. We use it only to match a signup in the Oynk app to the visit just before it, and delete it after 60 minutes. We delete the record when you ask us to or when you delete your account, and the cookie expires by itself after 90 days.

3. How we use your information

• to create and run your account and membership;
• to process payments and manage renewals and cancellations through Stripe;
• to send sign-in or recovery codes and other service messages, such as account-security and billing notices. Existing password users may still receive password-recovery messages during the changeover;
• to issue discount codes for partner online stores and email them to you;
• to provide, secure, and improve the service;
• to meet our legal obligations and protect against fraud or misuse.

We currently send only service and account emails that are part of running your membership. We do not send marketing or newsletter emails. If we introduce optional marketing messages in future, we will ask for your consent and give you an easy way to opt out.

4. Cookies and analytics

Essential sign-in cookies are separate from optional website analytics. Accepting the Terms and acknowledging this policy does not grant permission for optional analytics. Choosing “Necessary only” does not change your access to Oynk.

• Essential cookies: when you sign in, our authentication provider (Supabase) sets a secure session cookie so we can keep you logged in and protect your account. The service cannot work without it, so it does not require consent.
• Optional analytics: we ask before linking how you arrived at Oynk to a consented visitor identity (the campaign record in section 2 needs no consent), or collecting selected actions such as viewing a brand, saving it, joining the waitlist, starting signup or clicking an enabled app-store link. Searches include length and result counts, never the search text. Names, email addresses, phone numbers, birth dates, sign-in codes, passkey credentials, auth links, precise location, passwords and redemption codes are excluded. Automatic page tracking, session recordings and automatic click capture are disabled.
• Your choice and identity: we store your analytics preference locally when your browser permits it. After permission, a secure cookie links campaign visits; if you sign in, an internally verified account ID can link permitted events, campaign summaries and a membership outcome. Operational account and payment records are still needed to provide the service when you refuse optional tracking. No email address is used to join identities. The optional SDK keeps its browser identity in memory and resumes the same consented visitor from the secure cookie on later pages. The browser never receives the cookie proof through JavaScript. If storage is unavailable, your preference lasts only while this page remains open.
• Website visit and speed measurement: our host, Vercel, counts visits to our website (Vercel Web Analytics) and measures how quickly pages load and respond (Vercel Speed Insights). These tools set no cookies and store nothing in your browser. Vercel tells visits on the same day apart with a short-lived value derived from the request, which it resets daily, so the results are totals, such as page views by page, country, device type and referring website, not a record of you. Before a page address is sent, we remove search text, sign-in and reset codes, invitation links and account or record IDs, keeping only campaign tags (such as “utm_source”). This is not linked to your account or to the optional analytics above. Because it identifies no one, it runs whichever privacy choice you make.
• Short link counts and campaign links on signup: we keep a plain count of how many times each campaign short link is opened. The count holds a link code, a date and a number, with no cookie, ID or address, so it is not linked to you and is kept whichever choice you make. If you then create an account, we also note on your signup record which campaign link you arrived through. That note holds only the link code. It uses no ID; the only cookie involved holds that same code for 30 minutes and nothing else, and is deleted when you sign in or sign out. It helps us understand which campaigns bring members to Oynk. If you allowed campaign tracking, the campaign cookie is used instead, as described above.
• Campaign record cookie: the cookie behind the campaign record in section 2 holds only a random code, lasts 90 days, and cannot be read by the website’s scripts. It is set whichever choice you make, and it is not used for optional analytics or linked to the analytics ID.

One choice covers both optional purposes: “Allow all” or “Necessary only”. Analytics records the selected actions above under a random ID kept in this browser's local storage (not a cookie, not derived from your device), never joined to campaign data. Marketing adds the campaign cookie. You can change your mind at any time with “Privacy choices”, which is in the site footer and at the bottom of the waitlist page. Choosing “Necessary only” stops both purposes, deletes the analytics ID, resets their browser identity and requests revocation of the campaign cookie; it does not claim that previously held records have been erased. These controls apply to this website; the Oynk app on iPhone has its own, described below. “Necessary only” does not stop the campaign link note on signup described above, its 30-minute link-code cookie, or the campaign record and its 90-day cookie (section 2), because they record only which of our links or adverts you used, not what you do.

Optional analytics are recorded by Oynk in our own database, hosted by Supabase. When consented product analytics is enabled, selected allowlisted events may also be sent to PostHog. Vercel Web Analytics and Speed Insights receive only the visit and speed measurements described above.

The Oynk app on iPhone has its own privacy controls, separate from this website’s:

• Apple’s tracking permission: the first time the Oynk app opens on an iPhone, before any screen of ours, iOS shows Apple’s alert “Allow Oynk to track your activity across other companies’ apps and websites?”. Our reason in that alert reads: “This lets Oynk see which of our posts, ads or links brought you here, so we know what’s working.”
• What tracking means for Oynk: campaign attribution only. The app reads the campaign details carried in the Oynk link you opened (a link code and campaign tags such as “utm_source”), so we can tell which of our own posts, ads or partner links brought you to the app. We do not read Apple’s advertising identifier (IDFA), we use no advertising networks or advertising SDKs, and we do not collect what you do in other companies’ apps or websites.
• When it happens: only if you choose “Allow” in Apple’s alert and also leave “Marketing” on in Oynk’s privacy card, which the app shows right after the alert. The card’s buttons are “Accept all” and “Save choices”, and closing it keeps only necessary data. If you choose “Ask App Not to Track”, or switch Marketing off, the app records no campaign details (including when you create an account), deletes any it is still holding, and works exactly the same. As the card says, “Marketing stays off while tracking is off in iOS Settings.”
• Where it goes: to Oynk’s own servers only (attribution.oynk.co.nz, which passes it to our database hosted by Supabase). Nobody else receives it. It is recorded under a random visitor credential our server issues to the app, which expires after about three months. If you sign in or create an account while Marketing is on, that credential is linked to your account so the campaign can be credited with the signup or membership that followed, the same as the campaign cookie on this website.
• Optional app analytics: the same card has an “Analytics” switch, off by default. If you turn it on, selected in-app actions are sent to PostHog under a random ID, which is linked to your Oynk account ID once you are signed in. Names, email addresses, phone numbers, sign-in codes, precise location and redemption codes are excluded, the same rule as this website’s optional analytics.
• Changing your mind: tap “Privacy preferences” on the app’s Welcome screen or, when you are signed in, in your profile under Legal. Turning Oynk off under iPhone Settings, then Privacy & Security, then Tracking switches Marketing off automatically the next time the app opens. As on this website, switching off stops collection; it does not claim that records we already received have been erased.
• Deleting your account: deleting your account in the app (section 9) also deletes the visitor credential linked to it. Campaign records tied to your account are handled under the retention rules in section 8.

5. Who we share information with

We do not sell your personal information. We share it only with trusted service providers who help us run Oynk, and only as far as they need it:

• Stripe for payment processing and billing;
• Supabase for our database, secure sign-in, and file storage, including email or phone code verification and passkey credentials where those sign-in methods are available;
• Resend for sending account and service emails;
• TNZ, our SMS delivery provider, to send sign-in and recovery codes to the phone number you provide;
• Partner online stores, including stores running on Shopify, where an offer is redeemed online. We create the discount codes inside the partner’s store, but we do not send them your name, email address, or any other detail that identifies you: the code alone marks an order as an Oynk one;
• Vercel for hosting the website, and for the visit and speed measurement described in section 4;
• Google and Apple if you choose to sign in using their accounts, to authenticate you. They may process the sign-in under their own privacy notices;
• PostHog only when you permit optional product analytics, on this website when that service is enabled or with the “Analytics” switch in the Oynk app on iPhone, for the limited event data described in section 4.

We may also disclose information where the law requires it, to protect our rights or the safety of others, or as part of a business sale or restructure, in which case we will protect your information as described here.

6. Where your information is stored

Some of our providers store data on servers outside New Zealand, including our database, which is hosted in Sydney, Australia. Where information is held overseas, we take reasonable steps to ensure it has protection comparable to that required under the Privacy Act 2020.

7. Your rights

Under the Privacy Act 2020 you have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if it is wrong. To make a request, email support@oynk.co.nz. We may need to verify your identity first, and we will respond within the timeframes the Act requires. You can change your optional analytics and marketing choices at any time, on this website with “Privacy choices” and in the Oynk app on iPhone with “Privacy preferences” (section 4).

8. How long we keep it

We keep your personal information for as long as you hold an account, and after that only for as long as we need it to meet legal, accounting, or fraud-prevention obligations. When we no longer need it, we delete or anonymise it.

A sign-in record may be created before you complete registration. It does not by itself activate a membership. An incomplete account becomes eligible for deletion after 30 days. Before deletion, we check whether it is linked to payment, administrator or partner access, security activity, consented referral or campaign attribution, or records we need to keep for legal reasons. Those records are held for review instead of automatic deletion. We retain evidence of Terms acceptance and security changes for as long as needed to administer the account and resolve legal or security issues.

Discount codes and redemption records are kept while the offer they belong to is running, and for a limited period afterwards so we can help with a query about an order and settle things with the partner.

9. Deleting your account

You can delete your Oynk account and the personal information attached to it at any time. In the Oynk app, open your profile, then Settings, then Delete account. If you cannot sign in, email support@oynk.co.nz from the address on your account and ask us to delete it.

Deleting in the app takes effect straight away. Email requests are completed within 30 days. Deletion removes your profile, saved favourites, pig, coins, redemption history, and notification settings, and cancels any active membership. Payment records held by our payment providers, and any records we must keep to meet legal, accounting, or fraud-prevention obligations, are kept for as long as the law requires and then deleted or anonymised. A deleted account cannot be restored.

10. How we protect it

We use technical and organisational measures to protect your information, including encrypted connections, access controls, and database row-level security. Card data is handled by Stripe under its own strict security standards. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.

11. Children

Oynk is a paid membership and is not directed at children under 13. We ask for an age range to check eligibility, and someone who selects under 13 cannot activate a membership. Members aged 13 to 17 need the permission of a parent or legal guardian to join. We may briefly hold that eligibility answer and a provisional sign-in record so the attempt can be handled and removed. If you believe a child has given us other information, contact us and we will review and remove it as appropriate.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed. If we make a material change, we will take reasonable steps to let you know.

13. Contact and complaints

Questions or concerns about your privacy? Email us at support@oynk.co.nz and we will do our best to help. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz.