Privacy Policy

1. Who is responsible

Greg Harrison operates OneLifeAppsNZ and is the contact for privacy requests about this website. Email onelifeappsnz@gmail.com, marked “Privacy”. This policy covers the OneLifeAppsNZ website and its own member features. Linked apps and embedded providers may handle information separately under their own policies. Where AI Greg collects a meeting request for Greg, the handling described below also applies to that request.

2. Information you give us

Depending on the feature you use, information can include your name and email address; optional demographic answers (age range, gender, country, region, work situation, industry and household), consent records, membership points and award history; selected topics; saved tips and notes; calendar items and completion history; saved prompts and AI inputs; game activity and scores; forum posts, replies and likes; and advertising applications, images, dates, billing details, invoices and review correspondence. Only provide information needed for the task. Advertising images and approved campaign content are intended for public display.

3. Sign-in and technical information

Member sign-in uses ChatGPT authentication. The website receives an account identifier, email address and, where provided, your name from the sign-in service. We do not receive your ChatGPT password through that flow. Hosting and embedded services may process IP addresses, browser and device information, request times, page requests, error records and security logs. These records support delivery, authentication, troubleshooting and protection against misuse. Providers may also use information under their own policies.

4. Why information is used

Information is used to create and operate your membership, save choices and content, deliver requested AI functions, run community and game features, manage advertising and invoices, answer enquiries, arrange meeting requests, investigate problems and meet legal obligations. We should use personal information only for the purpose collected, a directly related purpose or another purpose permitted by law. Optional demographic answers help us understand the member community and inform relevant tools and services. The administrator sees summaries; other members cannot see your answers. You can remove these answers on your Profile & Points page. Providing them does not earn points, affect points eligibility or opt you into marketing emails. Points history records the activity type, points and time, not a copy of your note or post. Providing optional information is your choice. Without details required by a feature, we may be unable to provide it; you can still use public pages that do not require sign-in.

5. AI processing and meeting requests

When you choose Scan a document in My calendar and confirm analysis, your PDF or photograph is sent to OpenAI to suggest a task, date and explanatory notes. The site does not keep the original uploaded document. Only the entry, filename and notes you choose to save are retained in your private member calendar. The AI request disables response storage, but provider logs and safety retention may still apply. Review the draft before saving and upload only documents you have permission to share.

Prompt Lab sends the prompt and selected mode information to OpenAI to generate its response. Its API request asks OpenAI not to store the generated response through the response-storage setting; this is not a promise that no provider logs or safety retention apply. Saved prompts are held separately when you use the save feature. AI Greg runs as a separate Floot app embedded in a popup. Your conversation is processed by that app and its AI provider. When you submit a meeting request, the app saves your name, email, phone number, reason, optional availability and recent conversation context, together with delivery status. The notification is addressed to Greg at gregmhnz@gmail.com through Gmail. A failed email can still leave a saved request. General chatbot conversation storage and any voice processing are subject to the AI Greg app and its providers. Do not include confidential or sensitive information unnecessarily.

6. Who can see information

Other members can see content you choose to post in the forum and information shown by shared game features. Visitors can see published advertisements. Site administration and relevant service providers can handle information needed to operate, support or secure the service; private member content should not be treated as public simply because an administrator can access operational records. We may disclose information to comply with a lawful requirement, investigate misuse, protect rights or safety, or with your authority, subject to applicable law. Our policy is not to sell member contact lists or provide them to advertisers for their own marketing.

7. Service providers and overseas processing

The site uses ChatGPT Sites and Cloudflare-based hosting and storage. AI functions use OpenAI; AI Greg uses Floot and Gmail. Videos and market widgets use YouTube/Google and TradingView. Linked apps may use other platforms, including Base44 and Lovable. Processing or storage may occur outside New Zealand. We do not promise a New Zealand-only storage location. Where overseas disclosure is subject to the Privacy Act, we must have an appropriate basis and safeguards; using a service provider solely to process information on our behalf is assessed according to its actual role. Contact us before submitting information with special residency requirements.

8. Cookies, browser storage and embedded content

Sign-in and hosting services can use cookies or similar technologies to maintain sessions and protect the service. Embedded players, market widgets and chat apps may contact their providers when loaded and may use their own cookies, identifiers or browser storage. A provider can receive technical information even if you do not create an account with it. You can manage cookies and site permissions in your browser and decline microphone access. Blocking storage or third-party content may stop sign-in, chat or playback from working. Opening a provider directly remains subject to its policy; it does not avoid that provider’s data collection.

9. Retention and deletion

Our policy is to retain personal information only while it is needed for the purpose collected or a lawful related need, such as accounts, disputes or financial records. There is no single automatic deletion period across all features and providers. Saved member content remains until removed or otherwise deleted under an applicable retention process. Removing a repeating calendar tip may stop recurrence while keeping notes and completion history; it is not necessarily erasure. You can request account or data deletion by email. We will explain any information that must be retained and why. Backups, logs, email copies and provider records can follow separate retention schedules; immediate erasure from every copy cannot be promised.

10. Access, correction and privacy complaints

You can ask whether we hold personal information about you, request access and seek correction. Email onelifeappsnz@gmail.com with enough detail to identify the relevant account and information. We may verify your identity without asking for unnecessary documents. Requests are handled within applicable statutory timeframes; if an extension or lawful refusal applies, we will explain it and your options. If a correction is not made, you can ask for a statement of the correction sought to be attached where the law provides. You may raise a complaint with us or the New Zealand Privacy Commissioner.

11. Information about others and children

Do not upload another person’s personal information unless you have a lawful reason and any required authority. Where we collect personal information indirectly, our policy is to give the notice required by applicable law unless a lawful exception applies. Parents or guardians can contact us about information concerning a child. Please avoid including children’s personal details in public posts or AI conversations.

12. Security, incidents and changes

See the Data page for safeguards, reporting and incident response. No internet service is risk-free. If a privacy breach causes or is likely to cause serious harm, we must notify the Privacy Commissioner and affected people as soon as practicable, subject to lawful exceptions. We will update this policy when material handling practices change and give additional notice where appropriate. The date below identifies this version.