Legal
Privacy policy
Last updated 22 October 2026
GiveWayGo is run by a New Zealand sole trader. This policy explains what personal information we collect and how we handle it under the Privacy Act 2020. Questions? Email support@kiwico.online.
What we collect
- Your email address, to create your account and send your sign-in codes.
- Purchase records: the Stripe payment and checkout ids, the amount, the currency and the date.
- Your test answers and results: which questions you've seen, your answers and your scores, so we can show your progress and bring back questions you got wrong.
- Sign-in events, with your IP address and device information (your browser's user agent), for security: to limit sign-in requests, spot misuse and show you your recent sign-ins. These records are deleted automatically after 90 days.
Card details: payments are handled by Stripe. We never see or store your card number. Stripe's own privacy policy applies to the payment.
We don't use advertising or analytics trackers. The app keeps your sign-in session in your browser's storage so you stay logged in.
Where your information is stored
Your information is stored overseas, in the United States, on Oracle Cloud servers in San Jose, California. We tell you this under information privacy principle 12 of the Privacy Act 2020. US privacy law may not give the same protection as New Zealand law. We protect the data with encrypted connections, access controls and encrypted backups.
Backups are kept for 14 days and then deleted.
Who we share it with
- Stripe, to take payments and handle refunds.
- Our email delivery provider, to send your sign-in emails.
- Oracle Cloud, which hosts our servers and stores the data for us.
We don't sell your information or share it with anyone else unless the law requires it.
Emails
We only send transactional emails: sign-in codes and links, and messages about your purchase. Stripe may email your receipt. We don't send marketing emails. If we ever do, we will only send them to people who opt in, and every one will have an unsubscribe link.
How long we keep it
- Sign-in events with IP address and device information: 90 days.
- Your account, answers and results: while you have an account, until you ask us to delete it.
- Purchase records: as long as the law requires us to keep business records.
Your rights
You can ask to see the information we hold about you, ask us to correct it, or ask us to delete your account and data. Email support@kiwico.online from the address you used to buy. We will reply within 20 working days. If you're not happy with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).