Privacy Policy
1Introduction
-
1.1This Privacy Policy explains how Keewe Tech Limited collects, uses, holds, discloses, and protects personal information in connection with the KeeWe application.
-
1.2This Privacy Policy applies to personal information collected through our mobile application, our website, online forms, communications, and other services we provide.
-
1.3This Privacy Policy is intended to address both:
-
(a)the general privacy matters that apply to our collection and use of personal information; and
-
(b)the advance notification requirements relating to indirect collection of personal information, including the requirements introduced by Information Privacy Principle 3A.
-
-
1.4This Privacy Policy applies from 06 September 2026.
2Definitions
-
2.1In this Privacy Policy, unless the context requires otherwise:
-
(a)Act means the Privacy Act 2020, including any amendment to that Act and any Act in substitution for that Act.
-
(b)KeeWe, we, us, and our mean Keewe Tech Limited.
-
(c)Platform means the KeeWe mobile application, the KeeWe website, and our related online services from time to time.
-
(d)User means a person who accesses or uses the Platform, and includes a prospective User.
-
(e)Flat Provider means a User interacting with us in their capacity as a person offering residential accommodation, whether as an owner, occupier, head tenant, or otherwise.
-
(f)Flat Seeker means a User interacting with us in their capacity as a person seeking residential accommodation or a flatmate.
-
(g)Listing means an advertisement published by a User through the Platform offering residential accommodation.
-
(h)Match means the connection created between two Users where each has indicated interest in the other through the Platform.
-
(i)Message means a communication sent by one User to another through the messaging function of the Platform.
-
(j)Identity Provider means a third party through which a User authenticates to the Platform, being Apple or Meta.
-
(k)Viewing means an inspection of accommodation arranged or booked through the Platform.
-
3Scope and Acceptance
-
3.1By providing personal information to us, whether directly or indirectly (including through the Platform, by email, or otherwise), you acknowledge that your personal information may be handled in accordance with this Privacy Policy.
-
3.2This Privacy Policy applies to personal information collected from or about:
-
(a)Flat Seekers;
-
(b)Flat Providers;
-
(c)persons who authenticate to the Platform but do not complete a profile; and
-
(d)other persons interacting with us in connection with the Platform.
-
-
3.3This Privacy Policy does not apply to:
-
(a)the use another User makes of information disclosed to that User through the Platform;
-
(b)the privacy practices of an Identity Provider, application store, device manufacturer, or telecommunications provider; or
-
(c)the privacy practices of any landlord, property manager, flatmate, or other person with whom a User deals following an introduction made through the Platform.
-
4What Personal Information We Collect
-
4.1We may collect and hold personal information including:
-
(a)identification and contact information, such as name, display name, age, gender, email address, and telephone number;
-
(b)an identifier issued by the Identity Provider through which a User authenticates;
-
(c)profile information, including occupation, biographical description, stated interests, smoking status, whether a User has children and how many, whether a User has pets and of what type, intended move-in date, intended length of stay, and whether a User is seeking accommodation as an individual, a couple, or a group;
-
(d)photographs uploaded by a User to a profile or a Listing;
-
(e)accommodation information, where a User publishes a Listing, including the address of the property, the rent and bond, additional costs, property and room type, the number of bedrooms, bathrooms and occupants, inclusions, availability, and any conditions or preferences specified;
-
(f)preference information, including the distance, rent, age, and length-of-stay ranges specified by a User, and the language selected;
-
(g)location information, being the geographic coordinates of a User's device;
-
(h)interaction information, including the profiles in which a User has indicated interest, Matches, the content and timing of Messages, and Viewings created or booked;
-
(i)safety information, including reports made by a User concerning another User, reports made concerning that User, and the Users a User has blocked;
-
(j)technical and usage information, including device make, model and type, an identifier used to deliver notifications, internet protocol address, application and operating system version, and diagnostic and error information; and
-
(k)information provided when making an enquiry, corresponding with us, or otherwise using the Platform.
-
-
4.2We may collect certain identifiers, such as email addresses and identifiers issued by an Identity Provider. We take reasonable steps to protect such identifiers from misuse, unauthorised access, or disclosure.
-
4.3We do not collect information as to ethnicity, race, iwi affiliation, religious or ethical belief, political opinion, health, or sexual orientation.
-
4.4We do not collect financial account information, payment card information, credit history, or tax identification numbers. No payment is processed through the Platform.
-
4.5We do not collect advertising identifiers, and we do not track User activity across other applications or websites.
5Purposes for Which We Collect Personal Information
-
5.1We collect, use, hold, and disclose personal information for purposes including:
-
(a)establishing and authenticating a User account;
-
(b)displaying a User's profile or Listing to other Users;
-
(c)identifying accommodation and Users relevant to a User, including by reference to distance and stated preferences;
-
(d)enabling Users to indicate interest in one another and to form Matches;
-
(e)enabling Users who have Matched to exchange Messages;
-
(f)enabling Users to create, publish, and book Viewings;
-
(g)delivering notifications relating to Matches, Messages, and Viewings;
-
(h)receiving and assessing reports concerning a User, giving effect to blocks, and detecting and responding to misrepresentation, fraud, harassment, and other conduct that may present a risk to Users;
-
(i)responding to enquiries and complaints;
-
(j)operating, maintaining, improving, and securing the Platform and our business systems;
-
(k)meeting legal, compliance, risk management, and record-keeping obligations; and
-
(l)any other purpose authorised by law or otherwise notified to the individual concerned.
-
-
5.2We will only collect personal information where it is necessary for a lawful purpose connected with our functions and activities, and will not collect personal information by unlawful means or in a manner that is unfair or unreasonably intrusive.
-
5.3Information as to gender, occupation, and family circumstances is collected because it is relevant to the shared accommodation arrangements the Platform facilitates. Section 53 of the Human Rights Act 1993 restricts discrimination in the disposal of accommodation on prohibited grounds, subject to the exception in section 54 for accommodation that is to be shared with the person disposing of it. The obligations of Users in this respect are set out in our Terms of Use.
6How We Collect Personal Information
-
6.1Direct collection
-
6.1.1We try to collect personal information directly from the individual concerned wherever practicable.
-
6.1.2For Users, this includes collection through:
-
(a)profile creation and profile editing;
-
(b)the publication of a Listing;
-
(c)the setting of search and notification preferences;
-
(d)the upload of photographs;
-
(e)the messaging function and the creation or booking of a Viewing;
-
(f)the reporting and blocking functions;
-
(g)communications with our staff or representatives; and
-
(h)general use of the Platform.
-
-
-
6.2Indirect collection
-
6.2.1In some circumstances, personal information may be collected about an individual from a source other than that individual.
-
6.2.2This may occur where:
-
(a)identification and contact information is received from an Identity Provider when a User authenticates to the Platform;
-
(b)another User submits a report concerning that User through the reporting function; or
-
(c)another User blocks that User.
-
-
-
6.3Automatic collection
-
6.3.1Technical and usage information is generated automatically in the course of a User's use of the Platform.
-
7Information Privacy Principle 3A (IPP 3A) Advance Notice for Indirect Collection
-
7.1This clause is intended to notify Users, in advance, of the indirect collection activities that may occur in connection with their use of the Platform.
-
7.2Information received from an Identity Provider
-
7.2.1Where a User authenticates to the Platform, identification and contact information relating to that User may be received by us from the relevant Identity Provider rather than from the User.
-
7.2.2The information that may be received is limited to an identifier issued by the Identity Provider, the User's name, and the User's email address. Where an Identity Provider offers an email relay facility and the User elects to use it, only a relayed address is received.
-
7.2.3The purpose of that indirect collection is to establish and authenticate the User's account and to enable us to communicate with the User.
-
7.2.4The intended recipients of that information are us and our service providers described in clause 10.2.
-
-
7.3Information received from other Users
-
7.3.1Where another User submits a report concerning a User, we collect personal information about the User who is the subject of the report from a source other than that User. That information may include the stated reason for the report, any details provided by the reporting User, and the identity of the profile reported.
-
7.3.2Where another User blocks a User, we collect the fact of that block.
-
7.3.3The purpose of this indirect collection is to:
-
(a)assess the report and determine whether our Terms of Use have been breached;
-
(b)give effect to the block;
-
(c)protect the safety of Users; and
-
(d)manage risk associated with continued use of the Platform.
-
-
7.3.4The intended recipients of that information are our authorised personnel and, where relevant, the recipients described in clause 10.2.
-
7.3.5A report is not disclosed to the User who is the subject of it. Access to information collected under this clause may be limited or refused where disclosure would involve the unwarranted disclosure of the affairs of another individual, or would be likely to endanger the safety of any person.
-
-
7.4Collecting and holding agencies
-
7.4.1The collecting agency and holding agency is:
-
Keewe Tech Limited
-
-
-
7.4.2The holding agency may also include a service provider described in clause 10.2 that holds personal information on our behalf.
-
-
7.5Access and correction rights
-
7.5.1Individuals have the right to request access to, and correction of, their personal information in accordance with the Act.
-
7.5.2Those rights apply to personal information collected directly and indirectly, subject to clause 7.3.5 and clause 20.
-
8Location Information
-
8.1The Platform may collect the precise geographic coordinates of a User's device.
-
8.2Location information is collected only while the Platform is in use. Location information is not collected when the Platform is not running.
-
8.3Location information is used to identify accommodation and Users within the distance range specified by a User, and to display an approximate distance between Users.
-
8.4A User's coordinates are not disclosed to any other User.
-
8.5The collection of location information is subject to the permission granted through the User's device. A User may decline or revoke that permission at any time. Where permission is declined or revoked, the Platform will continue to operate, although distance-based functionality will be unavailable.
9Information Visible to Other Users
-
9.1The Platform operates by displaying certain personal information to other Users.
-
9.2The following information may be visible to any User able to view a profile:
-
(a)display name, age, gender, and occupation;
-
(b)biographical description and stated interests;
-
(c)photographs;
-
(d)smoking status, and information as to children and pets;
-
(e)intended move-in date, intended length of stay, and whether the User is seeking accommodation as an individual, a couple, or a group; and
-
(f)an approximate distance from the viewing User.
-
-
9.3Following a Match, Messages exchanged between the Users and any shared Viewing may also be visible to the other User.
-
9.4Where a User publishes a Listing, the information in that Listing, including the property address, may be visible to Users able to view it. A User may wish to consider whether to publish a full street address, or to identify only the street and suburb until a Match has been made.
-
9.5The following information is not visible to any other User:
-
(a)email address and telephone number;
-
(b)geographic coordinates;
-
(c)any identifier issued by an Identity Provider;
-
(d)reports made by that User; and
-
(e)the identity of Users that User has blocked.
-
-
9.6A User is responsible for the personal information that User elects to disclose to another User through the messaging function.
10Disclosure of Personal Information
-
10.1We may disclose personal information where that disclosure is connected with the purposes for which the information was collected, is otherwise authorised by law, or has been notified to the individual.
-
10.2Recipients may include:
-
(a)our employees, officers, contractors, agents, and professional advisers;
-
(b)other Users, to the extent described in clause 9;
-
(c)IT providers, software providers, cloud storage providers, hosting providers, notification delivery providers, email service providers, and system administrators. These providers may include cloud-based platforms used to store, process, and communicate personal information;
-
(d)government agencies, courts, tribunals, or enforcement bodies where required or authorised, including where disclosure is necessary to prevent or lessen a serious threat to the life, health, or safety of any person;
-
(e)the Approved Agency under the Harmful Digital Communications Act 2015, in connection with a complaint made under that Act;
-
(f)other persons or entities authorised by the individual or permitted by law; and
-
(g)a purchaser, successor, or assignee of all or part of our business or assets, including in connection with any merger, sale, restructuring, or transfer of our business.
-
-
10.3Personal information is not sold, rented, or traded, and is not disclosed for the purpose of advertising.
11Overseas Disclosure
-
11.1Some recipients of personal information, including software or service providers, may be located outside New Zealand.
-
11.2Where personal information is disclosed to a foreign person or entity, we will not do so unless we believe on reasonable grounds that:
-
(a)the recipient is required to protect the information in a manner that, overall, provides comparable safeguards to those in the Act, by reason of the law in force in the recipient's jurisdiction; or
-
(b)the recipient is required to protect the information in that manner under binding contractual terms agreed with us.
-
-
11.3Information relating to the safeguards applicable to a particular disclosure may be requested from us using the contact details in clause 21.
-
11.4Personal information held outside New Zealand may be subject to lawful access by authorities in the jurisdiction concerned.
12If Personal Information Is Not Provided
-
12.1An individual is not obliged to provide personal information to us.
-
12.2However, if relevant personal information is not provided, or if the individual restricts our ability to collect, use, hold, or disclose that information, this may affect our ability to provide the Platform or carry out the purposes described in this Privacy Policy. In particular:
-
(a)a profile that does not contain the information described in clause 4.1 may not be displayed to other Users;
-
(b)where location permission is declined or revoked, distance-based functionality will be unavailable; and
-
(c)where notification permission is declined or revoked, notifications relating to Matches, Messages, and Viewings will not be delivered.
-
13Storage and Security
-
13.1We take reasonable steps to protect personal information against loss, unauthorised access, misuse, modification, disclosure, or other misuse.
-
13.2Those steps include the encryption of personal information in transit and at rest, the restriction of access to authorised persons and authorised service providers acting for legitimate business purposes, the logging of access to production systems, the application of security updates, and the imposition of security obligations on our service providers.
-
13.3We do not publish the technical details of our security arrangements, as to do so may itself create a security risk.
-
13.4Messages are stored on our systems and are not encrypted end to end. We do not routinely review Messages. We may access Messages where we reasonably consider it necessary to assess a report, to comply with a legal obligation, or to respond to a risk to the safety of any person.
-
13.5No system of information security is impenetrable, and we do not warrant that personal information will not be subject to unauthorised access.
14Privacy Breaches
-
14.1Where a privacy breach has occurred that it is reasonable to believe has caused, or is likely to cause, serious harm to an affected individual, we will notify the Privacy Commissioner and the affected individuals as soon as practicable, in accordance with Part 6 of the Act.
15Retention
-
15.1We retain personal information only for so long as it is required for the purpose for which it was collected, or as otherwise required or permitted by law.
-
15.2When personal information is no longer required, and retention is no longer necessary or lawful, we will take reasonable steps to destroy or de-identify it.
16Accuracy of Personal Information
-
16.1We take reasonable steps to ensure that the personal information we collect, use, hold, or disclose is accurate, up to date, complete, relevant, and not misleading, having regard to the purpose for which it is collected or used.
-
16.2A User may correct most profile information directly through the Platform. A display name may not be changed once set.
17Notifications and Electronic Messages
-
17.1The Platform may send notifications relating to Matches, Messages, and Viewings. These notifications form part of the Platform.
-
17.2A User may disable notifications through the settings of that User's device. Disabling notifications does not otherwise affect the operation of the Platform.
-
17.3Where permitted by law, we may send electronic messages relating to the Platform or related offerings.
-
17.4Individuals may opt out of receiving promotional or marketing electronic messages by using the unsubscribe facility provided or by contacting us using the details set out in clause 21. Opting out does not affect notifications sent under clause 17.1.
18Cookies and Website Analytics
-
18.1Our website may use cookies and similar technologies to improve user experience, analyse traffic, remember preferences, and support functionality.
-
18.2Individuals may choose to accept or decline cookies through their browser settings, although this may affect the functionality of the website.
-
18.3The mobile application does not use advertising cookies or third-party advertising technologies.
19Persons Under 18
-
19.1The Platform is available only to persons aged 16 years or over. We do not knowingly collect personal information from a person under that age.
-
19.2Where we become aware that a person under the age of 16 has provided personal information to us, we will take reasonable steps to close the account and destroy the information.
-
19.3Where a User is aged 16 or 17, we recommend the involvement of a parent, guardian, or other responsible adult before that User discloses photographs or location information, attends a Viewing, meets another User in person, or enters into any accommodation agreement.
-
19.4A person who believes that a person under the age of 16 is using the Platform may notify us using the details set out in clause 21.
20Access to and Correction of Personal Information
-
20.1An individual may request confirmation of whether we hold personal information about them, and may request access to that information.
-
20.2An individual may also request correction of personal information held by us.
-
20.3Requests for access or correction may be made to:
-
Email: [PRIVACY EMAIL]
-
-
20.4We may require reasonable evidence of identity before processing a request.
-
20.5We will respond to a request as soon as reasonably practicable, and in any event within 20 working days of receipt, in accordance with section 48 of the Act. Where an extension is necessary and permitted, we will notify the individual within that period.
-
20.6In some circumstances permitted by law, we may charge a reasonable fee for providing access to personal information or for making corrections. Any such charge will be notified in advance.
-
20.7In some circumstances permitted by law, access may be refused or limited, including where disclosure would involve the unwarranted disclosure of the affairs of another individual, or would be likely to prejudice the maintenance of the law or endanger the safety of any person. Where a request is refused, we will give reasons and advise the individual of their right to complain to the Privacy Commissioner.
-
20.8Where a correction is requested but not made, the individual may request that a statement of the correction sought be attached to the information.
-
20.9An account may be deleted at any time through the settings of the Platform.
21Complaints
-
21.1If an individual has any concerns or complaints about the handling of their personal information, they may contact our Privacy Officer.
-
21.2Complaints may be made to:
-
Email: [PRIVACY EMAIL]
-
-
21.3We will endeavour to consider and respond to complaints promptly, and will acknowledge a complaint within 5 working days.
-
21.4An individual who is not satisfied with our response may complain to the Office of the Privacy Commissioner:
-
Office of the Privacy Commissioner
-
PO Box 10094, Wellington 6143
-
Freephone 0800 803 909
-
Email: enquiries@privacy.org.nz
-
-
21.5In respect of a harmful digital communication, an individual may also contact the Approved Agency under the Harmful Digital Communications Act 2015.
22Changes to This Privacy Policy
-
22.1We may amend this Privacy Policy from time to time.
-
22.2The current version of this Privacy Policy will be made available through the Platform.
-
22.3Any updated version will apply from the date it is published, unless otherwise stated.
-
22.4Where an amendment materially affects the manner in which we use or disclose personal information, we will give notice through the Platform or by electronic communication before that amendment takes effect.
About this document
This Privacy Policy sits alongside our Terms of Use and should be read with them. It is written to meet the information privacy principles in the Privacy Act 2020, and it describes our practices at the level of categories rather than naming individual suppliers or systems.
If something here is not clear, or you want to access or correct the information we hold about you, email privacy@keewe.co.nz. You can also raise a privacy concern directly with the Office of the Privacy Commissioner at privacy.org.nz.