Privacy Policy

This policy explains what data WiseMe collects, why we collect it, and what we do with it. We aim to be clear and honest — no dark patterns.

Who we are

WiseMe is operated by Supreme Holdings Limited, registered in New Zealand. For privacy questions, contact hello@wiseme.co.nz.

What we collect

When you sign up

• Your name and email address
• Your password (stored securely, we never see it in plain text)
• Your region (auto-detected or manually chosen)

When you use the app

• Quiz answers you give (correct or wrong, timing)
• Categories you've played, questions you've seen (to avoid repeats)
• Your level progress, streak days, total points
• Events you've RSVPed to or joined
• Custom questions you create if you host an event

Device data

• An anonymous device ID (used to remember guests who join without an account)
• Basic diagnostic info (crashes, errors) to help us fix bugs

Location data (optional)

If you allow location access, we use your approximate location to auto-detect your region for showing relevant Quiz Nights. We don't store your precise coordinates. You can decline location access and set your region manually.

Payment data

When you buy an event pass, our payment providers (Stripe on web, Apple/Google on mobile) handle your card details. We never see or store your full card number. We only see enough to identify your purchase (like the last 4 digits of your card).

How we use it

We use your data to:

• Run the app and its features
• Personalize your experience (levels, streaks, avoiding repeated questions)
• Show you the right Quiz Nights for your region
• Send you emails about events you've RSVPed to (like reminders)
• Fix bugs and improve the platform
• Detect and prevent misuse
• Comply with legal obligations

Who we share it with

We share the minimum amount of data needed to run the platform. We don't sell your data.

We work with:

• Supabase — our backend database and authentication
• Vercel — our website hosting
• Stripe — payment processing (coming)
• Apple and Google — mobile app distribution and in-app payments
• Anthropic (Claude) — AI question generation (coming, when enabled)
• SendGrid — sending transactional emails (coming)

Each of these providers has its own privacy policy and data protection commitments. We choose providers that meet strong privacy standards.

Your rights

Under NZ's Privacy Act 2020 (and equivalent laws like GDPR if you're in the EU), you can:

• Ask what data we hold about you
• Request corrections to inaccurate data
• Ask us to delete your account and data
• Request a copy of your data in a portable format
• Opt out of promotional communications

To exercise any of these rights, email hello@wiseme.co.nz. We'll respond within 20 working days.

How long we keep data

We keep your data as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're legally required to keep records (e.g., payment records for tax purposes).

Children

WiseMe is not for children under 13. We don't knowingly collect data from children. If you believe we have, please email us and we'll delete it.

International transfers

Our providers (like Supabase and Vercel) may store data in servers located outside New Zealand. We choose providers with strong data protection standards.

Data security

We use industry-standard measures to protect your data: HTTPS everywhere, encrypted database connections, hashed passwords, access controls. Nothing is 100% secure, but we take this seriously.

Changes to this policy

If we make significant changes, we'll notify you by email or in-app. Continued use of WiseMe after changes means you accept the updated policy.