Privacy Policy

Last updated 14 October 2026

Sweeet follows the New Zealand Privacy Act 2020. We only collect what we need to run the app, we don't sell your information, and you can see, correct or delete it.

1. Who we are

Sweeet is based in New Zealand. For privacy requests and questions, email hello@sweeet.co.nz.

2. What we collect

Your account

• Your email address, to send you sign-in codes. There are no passwords.
• The name you choose, and your profile photo if you add one.
• When you joined, and when you agreed to the Terms of Use.

Your listings

• The plate, odometer, price, region and suburb, photos and description you enter, and the vehicle type.
• The vehicle details we look up from the plate: make, model, year, engine, fuel, gearbox, colour, WOF or COF expiry, road user charges and whether money is owing.

What you do in the app

• Vehicles you save.
• Your chats and messages, including earlier versions of messages you edit or delete.
• Reports you make, people you block, and whether you share read receipts.
• A record of each plate lookup: the plate, when, and the result. We use it to stop overuse and to see what lookups cost.

Your phone

• A notification token, only if you turn on message notifications. It's deleted when you turn them off or sign out.
• We don't collect your location, contacts or advertising ID.

Crash reports

If the app crashes or hits an error, it sends a report with the error, your phone model, operating system, app version and the last few screens you used. It doesn't include your name, email, messages, what you typed or your internet address.

Your internet address

To limit plate lookups and stop fake ad counts, we use your internet address in scrambled (one-way) form, and delete it within 2 days.

Ads

We count how many times each sponsored ad is shown, opened and clicked, without linking those counts to you or your device. How often you have seen each ad today, and the region you choose for local ads, stay on your phone.

3. Why we use it

• To run the app: sign you in, show listings, fill in vehicle details from the plate, and deliver messages and notifications.
• To keep people safe: review reports, spot scams, enforce daily limits, and ban people who break the Terms.
• To fix problems and improve the app.

We don't use your messages, searches or listings for advertising, we don't use third-party ad networks, and we don't track you across other apps or websites. Advertisers only get totals (how many times their ad was shown, opened and clicked).

4. Who can see it

• Everyone: your listings, including the region and suburb (never your address).
• Signed-in people: your name and photo, and when you joined.
• The person you're chatting with: your messages, and "Seen" if you share read receipts.
• Nobody else sees your email, saved vehicles, blocks or reports. If you report someone, they aren't told who reported them.

5. Services we use, and where your data is stored

We use these companies to run the app. Each only gets what it needs for its job.

• Supabase stores the database, sign-in and photos, in Sydney, Australia.
• Resend sends the emails with your sign-in codes, from Tokyo, Japan. It gets your email address and the code.
• Expo, with Apple (iPhone) or Google (Android), delivers notifications, from the United States. They get your notification token and the alert, such as "New message about your 2014 Honda Fit". The alert never contains the message itself.
• Sentry receives crash reports, in the European Union.
• CarJam, a licensed New Zealand vehicle data provider, gives us the vehicle details for a plate. Our server sends it only the plate, never anything about you.
• Netlify hosts this website.

So some of your information is stored outside New Zealand. We choose providers with protections comparable to the Privacy Act.

We may share information with the Police or other authorities when the law requires it, or to prevent serious harm.

6. How long we keep it

• Most information is kept while your account is open, and deleted when you delete your account.
• Earlier versions of edited or deleted messages: 6 months, for safety reviews.
• Reports and the evidence attached to them: 12 months after the report is closed. A report you made stays, but is no longer linked to you.
• Records of bans and admin actions: up to 2 years, so banned people can't simply rejoin.
• Plate lookup records: 13 months. When you delete your account they are no longer linked to you.
• Your scrambled internet address and daily limit counters: 2 days.
• Ad totals (shown, opened, clicked, by day): up to 25 months, with nothing about who saw them.
• Vehicle details we have looked up are kept by plate, so we don't pay for the same lookup twice. They aren't linked to you.
• Backups held by our database provider are overwritten within a few days.

See how to delete your account.

7. Your rights

• You can see and change your name and photo in the app, and delete your account (and everything linked to it) in Settings.
• You can ask for a copy of your information, or ask us to correct it, by emailing hello@sweeet.co.nz. We'll reply within 20 working days.
• If you're not happy with how we handle your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

8. Security

Your data is protected with access rules on every table, encrypted connections, and sign-in codes instead of passwords. If a privacy breach is likely to cause serious harm, we'll tell you and the Privacy Commissioner.

9. Children

You must be at least 16 to use the app (see the Terms of Use).

10. This website

This website has no cookies, analytics, ads or tracking, and no forms. Our web host may keep short-term technical logs, such as internet addresses and the pages requested, to run and protect the site.

11. Changes

We'll update this policy when anything changes, and tell you in the app if a change is important.

12. Contact

Privacy requests and questions: hello@sweeet.co.nz.