What is collected, in plain terms
- A random session ID: a 12-character string in your URL that points to your row in the database. Knowing it lets you come back; not knowing it means no one can.
- A name you pick (optional): used only to greet you. You can pick from a curated list, type any name, or skip it.
- Your path: whether you chose "I'm starting again" or "Someone I love is starting again."
- Your region (optional): a NZ region label like "canterbury" so Tīmata can point you at services close to you. Never a street, never a postcode, never coordinates.
- Your checklist progress: which of the 30-day steps you've marked done, marked later, or left for now.
- A hash of your IP address: a scrambled version, made with a secret code only the server holds. It isn't your IP address, but Tīmata can check whether an address matches it. It is saved when you send feedback, when the app sends a crash report, and when anyone tries the admin login. It is used to slow down spam. The IP address itself is not stored. The hash is deleted after one year, or sooner with a crash report.
- Crash reports: if the app crashes, it sends a short error report on its own. It holds the page path, the error message and technical details of the error (a stack trace), your browser type (the "user agent") and an IP hash. Session IDs, emails and long numbers are scrubbed out first. Crash reports are deleted after 90 days.
- Feedback you send (optional): if you use the form on the Transparency page, Tīmata keeps what you wrote, the page or task you named, your email if you gave one, your browser type and an IP hash. Feedback isn't deleted automatically. The IP hash is deleted after one year.
- An anonymous page-view count through Vercel Web Analytics. It records that someone opened a page, using a daily-rotating one-way hash of your IP plus browser User-Agent so the same visitor isn't counted twice in one day. No cookies. No persistent identifier across days. No individual journey is reconstructed. Only aggregate totals are seen ("X people opened /intro this week").
Phone numbers: not collected
Tīmata used to offer text reminders and a text with your saved link. To send those, Tīmata kept your phone number, encrypted, and a scrambled hash of it in a text log. To protect your privacy, texts were switched off on 20 October 2026.
On 20 October 2026 every phone number held and every hash made from one was deleted. The website no longer asks for your number, and the server no longer accepts one.
What is NOT collected
- Your real name, unless you typed one in (and even then, it's never linked elsewhere).
- Your phone number. Tīmata stopped collecting phone numbers on 20 October 2026.
- Your address, postcode, or location coordinates.
- Your email address, unless you type it into the optional feedback form. The app itself never asks for one.
- Any government identifier, such as an IRD number, birth certificate number, RealMe ID or passport number. None of these touch the servers.
- An individual record of which pages you read, in what order, or how long you spent on each one. The page-view counter described above is aggregate only.
- Cookies of any kind. None are set.
- Ad-network tracking, third-party fingerprinting, or cross-site profiles.
How long it is kept
- Your session (name, path, region and progress): until you use "Start fresh" or ask for it to be deleted. Quiet sessions aren't deleted automatically.
- Phone numbers, their hashes and the text log: none are kept any more. They were deleted on 20 October 2026.
- Feedback: what you wrote isn't deleted automatically. The IP hash is deleted after one year.
- Admin login records: one year.
- Crash reports: 90 days.
If you want your session deleted right now, open the app via your saved link and use the "start fresh" option, or email privacy@timata.co.nz with the URL of your session and the row will be deleted.
Third parties used
- Vercel (US) hosts the website you are reading and runs the aggregate page-view counter (Vercel Web Analytics). Receives standard web request logs (IP, user agent, URL) and computes the daily-rotating visitor hash described above. Only aggregate totals are seen; individual journeys are not reconstructed.
- Neon hosts the Postgres database that holds everything on this page that is stored.
- GitHub is where problems and feedback are tracked, privately. The "where in the app" location you type into the feedback form, and short, scrubbed samples of crash messages, are copied into private GitHub issues that only Tīmata's operator can see.
Text messages
No texts are sent any more, so there is nothing to opt out of and nothing you need to do.
Your rights under the Privacy Act 2020
You have the right to:
- Ask what is held about you. Open your link to see your progress. For anything else, such as feedback you sent, email Tīmata.
- Ask for it to be corrected or deleted.
- Complain to the Office of the Privacy Commissioner if you believe your information has been mishandled.
For any of these, contact the Privacy Officer at privacy@timata.co.nz.
Privacy Officer
Sant Limited. privacy@timata.co.nz. Designated under Privacy Act 2020 s 201.
Changes to this policy
If anything material changes, the date at the bottom will be bumped and, where it affects existing users, the change will be surfaced inside the app the next time you open your link.
- 20 October 2026: Tīmata stopped collecting phone numbers and stopped sending texts. The phone numbers and phone-number hashes held were deleted, and no text-message service is used any more.