Privacy Policy

1. Information We Collect

We collect the information you give us directly when you use Finly:

• Account details: email address, name, username, region
• Profile content: avatar photo, bio, aquarium interests, tank parameters (pH, ammonia, nitrite, temperature)
• Content you create: posts, photos, comments, reactions, marketplace listings
• Communications: private messages you send to other users
• Device information: if you enable push notifications, a device subscription token

2. How We Use Your Information

We use your information to: operate and personalise the Platform; show your profile, posts and listings to other users; enable local buying, selling and messaging; send you service emails (e.g. password resets, activity notifications); and, if you opt in, send push notifications to your device. We do not sell or rent your personal data to third parties.

3. Third-Party Services and Data Transfers

We use trusted third-party providers to run Finly, each of which only receives the data needed to perform its function:

• Supabase — database, authentication and file storage
• Vercel — web hosting
• Resend — delivery of account emails (e.g. password resets)
• Google Analytics — anonymised usage statistics
• Sentry — technical error monitoring

These providers may process and store data on servers located outside New Zealand. Each is bound by its own privacy and security terms.

4. Cookies and Local Storage

Finly uses your browser's local/session storage to keep you logged in and remember app preferences (such as theme). Google Analytics may set cookies or use similar technology to measure anonymised site usage. You can clear these at any time via your browser settings, though this may sign you out or reset preferences.

5. Data Retention and Security

We retain your information for as long as your account is active. When you delete your account, we remove your personal data within a reasonable period, except where retention is required by law. We use reasonable technical and organisational measures to protect your data, but no online service can be guaranteed 100% secure.

6. Children's Privacy

Finly is not directed at children under 13, and we do not knowingly collect personal information from anyone under that age. Accounts found to belong to a user under 13 will be closed.

7. Your Privacy Rights

You can access, correct, or delete your personal information at any time from your account Settings, including full account deletion. If you believe your privacy has been breached, you may contact us, or the New Zealand Office of the Privacy Commissioner (privacy.org.nz).

8. Changes to This Policy

We may update this Privacy Policy from time to time; the "Last updated" date above will reflect the latest revision. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

For any privacy questions or requests, contact us at privacy@finly.online.