Privacy Policy
1. Introduction
QueerSpace is a safety and inclusivity mapping application for queer and trans communities in Aotearoa New Zealand, operated by Robinsight Limited ("we", "our", or "us"). We understand that privacy is especially important for our community. For many queer and trans people, exposure of personal information, including location data, identity details, or community affiliations, can create real safety risks. This Privacy Policy explains how we collect, use, store, and protect your information, and your rights under the New Zealand Privacy Act 2020.
We have designed QueerSpace with privacy as a foundational principle, not an afterthought. Every technical and design decision prioritises your safety and privacy.
2. Our Privacy-by-Design Commitments
These commitments are non-negotiable design principles embedded in our platform:
- Suburb-level location only: Your location is never stored more precisely than suburb level. We do not record, log, or persist GPS coordinates.
- GPS used only in real-time: GPS coordinates are used solely for real-time map display on your device. They are never transmitted to or stored on our servers.
- Review locations reference businesses, not users: When you submit a review, the location recorded is the business address, not your position.
- No advertising, ever: We will never carry advertising. This means we never share your data with advertisers or ad networks.
- No third-party data sharing for commercial purposes: Your data is never sold, rented, or shared with third parties for their commercial benefit.
- Aggregate data for advocacy, not surveillance: We may publish and share anonymised, aggregated trends and insights with research organisations, government agencies, local councils, health boards, and community advocacy groups. This supports our mission of making Aotearoa New Zealand the most trans-friendly country on Earth. Individual reviews, ratings, user identities, or any information that could identify a specific person are never included in published or shared data.
- Anonymous participation supported: You can use QueerSpace and submit reviews without providing your real name or identifying information.
3. Information We Collect
3.1 Information You Provide
- Account information: Email address (or social login credentials), display name (which may be a pseudonym), and optional profile details.
- Reviews and ratings: The content of reviews you submit, including ratings across our safety, respect, competence, environment, and overall inclusivity dimensions, and any free-text commentary.
- Reports and feedback: Content you submit through our reporting, feedback, or support channels.
- Subscription information: If you subscribe to premium features, payment is processed by Stripe and/or RevenueCat. We do not store your credit card details. We receive only a transaction reference and subscription status.
3.2 Information Collected Automatically
- Suburb-level location: If you grant location permission, we determine your suburb for local search results. The precise GPS coordinate is discarded immediately after suburb determination and is never stored.
- Device information: Basic device type and operating system version for app compatibility purposes.
- Usage data: Aggregated, non-identifying usage patterns (e.g., which features are most used) to improve the platform. This data cannot be linked to individual users.
- Crash and performance data: Technical error reports to maintain app stability, collected in de-identified form.
3.3 Information We Never Collect
- Precise GPS coordinates (beyond momentary real-time display)
- Your sexual orientation, gender identity, or any demographic information (unless you voluntarily include it in your profile)
- Biometric data
- Contact lists or address books
- Browsing history outside QueerSpace
- Any information from other apps on your device
4. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and operate QueerSpace, including displaying the interactive map, reviews, and safety information.
- To authenticate your account and manage your subscription.
- To moderate content, including using AI-assisted tools to detect potential harassment, doxxing, or harmful content before human review.
- To communicate with you about your account, reviews, or platform updates.
- To improve the platform based on aggregated, de-identified usage patterns.
- To compile and share anonymised, aggregated insights about inclusivity across Aotearoa New Zealand, such as which types of businesses or regions score well, and where gaps exist. We share these trends with research organisations, government agencies, local councils, health boards, and advocacy organisations to help close the data gaps that queer and trans communities face and to support evidence-based policy development. No individual reviews, ratings, or identifying information are ever included.
- To comply with legal obligations, including responding to lawful requests from New Zealand authorities.
We will never use your information for advertising, profiling for commercial purposes, or any purpose not listed above.
5. Third-Party Services
QueerSpace uses the following third-party services to operate. Each has been selected with privacy as a primary consideration:
Supabase (Database and Authentication)
Our database and authentication infrastructure is provided by Supabase. Your account data and reviews are stored in a PostgreSQL database with Row Level Security ensuring that users can only access their own personal data. Supabase processes data in accordance with their privacy policy and our data processing agreement.
Mapbox (Maps)
We use Mapbox for map display. Mapbox was selected over alternatives (such as Google Maps) specifically for its superior privacy practices. Mapbox receives map tile requests but does not receive your precise location from QueerSpace. Map tiles are loaded based on the visible area, not your GPS position.
Stripe / RevenueCat (Payments)
Subscription payments are processed by Stripe (payment processing) and RevenueCat (subscription management). These services handle payment card details directly. QueerSpace never receives or stores your payment card information. We receive only confirmation of subscription status.
Claude / Anthropic (AI Moderation)
Review content may be processed by AI moderation tools to detect potential harassment or harmful content. This processing uses the text of reviews only and does not include any user-identifying information. AI moderation is a first-pass filter; all significant moderation decisions are made by human community moderators.
6. Data Storage and Security
- Your data is stored in Supabase-managed PostgreSQL databases with encryption at rest and in transit.
- Row Level Security (RLS) policies enforce data access controls at the database level, ensuring users can only access their own personal data.
- Aggregate ratings and review content are publicly accessible by design (this is the core function of the platform), but are never linked to identifying information beyond your chosen display name.
- We use industry-standard security practices including HTTPS for all communications, secure authentication tokens, and regular security reviews.
- We do not currently store data exclusively within Aotearoa New Zealand, as Supabase infrastructure is cloud-hosted. We will update this policy if data residency options become available and are implemented.
7. Your Rights Under the Privacy Act 2020
Under the New Zealand Privacy Act 2020, you have the following rights:
- Access: You can request a copy of all personal information we hold about you (Information Privacy Principle 6).
- Correction: You can request correction of any personal information that is inaccurate, incomplete, or misleading (Information Privacy Principle 7).
- Deletion: You can request deletion of your account and associated personal data. Upon deletion, your reviews will be anonymised (attributed to "Deleted User") rather than removed, to maintain the integrity of community safety information.
- Data portability: You can request an export of your data in a standard, machine-readable format.
- Withdrawal of consent: You can withdraw consent for optional data processing at any time (e.g., location permissions).
To exercise any of these rights, contact us at privacy@queerspace.nz or privacy@robinsight.com. We will respond within 20 working days as required by the Privacy Act 2020.
8. Special Privacy Considerations for Our Community
We recognise that queer and trans people face unique privacy risks. Information about a person's gender identity, sexual orientation, or use of a platform like QueerSpace could, if exposed, lead to discrimination, harassment, or harm. We take the following additional precautions:
- We will never disclose that a person is a QueerSpace user to any third party, including in response to informal requests. Formal legal requests will be assessed carefully with legal advice before any disclosure.
- We design our notification systems (emails, push notifications) to avoid revealing the nature of the platform to anyone who may see a user's device or inbox. Notifications use neutral language.
- We support anonymous account creation and review submission. You are never required to provide your real name or any identifying information.
- We do not use your data to infer or record your gender identity, sexual orientation, or any other personal characteristic.
- In the event of a data breach, we will notify affected users promptly and directly, with clear information about what data was involved and what steps to take.
9. Children and Young People
QueerSpace is designed for users aged 16 and over. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will delete that information promptly. We recognise that young queer and trans people may particularly benefit from safety information, and we are committed to finding age-appropriate ways to serve this community in the future.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app and, where possible, by email. We will never reduce your privacy protections without your explicit consent. The "Last Updated" date at the top of this policy indicates when it was last revised.
11. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, contact us at:
Privacy Officer
Robinsight Limited
Email: privacy@queerspace.nz
If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner at www.privacy.org.nz.
12. Governing Law
This Privacy Policy is governed by the laws of Aotearoa New Zealand, including the Privacy Act 2020 and its Information Privacy Principles.