PRIVACY
Privacy Policy for Demand Aggregation Technology Limited (myFetu App)
1. Introduction
Demand Aggregation Technology Limited (“we,” “our,” or “us”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and how we protect it. We follow the New Zealand Privacy Act 2020 as well as the rules of the Apple App Store and Google Play Store.
2. No Government Affiliation
The myFetu App and Demand Aggregation Technology Limited are not part of any government. We operate independently and are not controlled, endorsed, or funded by any government agency.
3. Information We Collect
3.1 Personal Information (Information You Give Us)
When you use the App, you may provide information such as:
- Your name
- Your email address and contact details
- Your age
- Your ethnicity
- Your gender
3.2 Information We Collect Automatically
When you use the App, we collect certain information automatically, including:
- Information you submit when reporting issues or giving feedback
- Device ID: A unique number linked to your device, used for security and session management.
- IP Address: Collected for security, fraud prevention, and analytics.
- Conversation History: If you use AI features, we may store some interactions to improve responses.
- App Usage Data: Information about how you use the App, such as login times and feature usage.
4. How We Use Your Information
- Ensure the App works properly.
- Improve App services and resolve issues.
- Send notifications and updates (if you opt in).
- Enhance AI-generated summaries and features.
- Comply with legal and security requirements.
5. Individual Data vs. Collective Data
- Individual Data: Your personal details (e.g., name, email, age, gender, ethnicity) will not be shared outside our company without your permission.
- Collective Data: We may generate anonymous reports based on overall user activity. These reports do not include personal details and may be shared with research groups, industry partners, or policy makers to improve decision-making.
6. Third-Party Services
We utilize third-party companies to help operate the App. These companies may process some of your data:
- Supabase: Hosts our database and API services.
- OpenAI API: Manages our AI-powered features securely.
- Cloudflare: Protects the App from bots and ensures overall security.
Each of these companies has its own privacy policy. We do not control how they manage their data.
7. Sharing Your Information
We do not sell or rent your personal data. We only share data:
- With service providers (see Section 6).
- With law enforcement if required by law.
- With third parties if you agree, or if the data is part of collective reports that exclude personal details.
8. AI Processing and Automated Summaries
The App uses AI to summarize user-reported issues. The AI processes submitted data but does not make final decisions about individual users. AI-generated summaries may be stored to improve services.
9. AI-Generated Content Disclaimer
Content generated by AI within the App may not always be accurate. AI models can sometimes produce incorrect, misleading, or nonsensical information (often referred to as “hallucination”). Users should verify important information and not rely solely on AI-generated content for critical decisions.
10. Notifications and User Control
We may send optional notifications about trends, updates, and issues. You can turn notifications on or off in the app settings.
11. Data Retention and Security
We take security seriously and protect your data. We retain your data only as long as necessary to support App functions and comply with legal requirements.
12. User Rights and Controls
- Access and Correction: Request access to your personal data and correct any inaccuracies.
- Data Deletion: Ask us to delete your data, subject to legal and operational constraints.
- Withdraw Consent: Revoke previously given consent for data processing.
- Opt-Out of Data Sharing: Choose to opt-out of non-essential data collection or sharing via the app settings.
13. Data Security Measures
We implement strict security measures, including:
- Encryption: To protect sensitive information.
- Access Controls: Ensuring only authorized personnel can access your data.
- Breach Notification: In the event of a data breach, we will notify affected users and the relevant authorities as required by law.
14. Compliance with Platform Policies
We comply with the privacy requirements set by:
- Apple App Store: Our privacy practices align with Apple’s App Privacy guidelines.
- Google Play Store: We meet Google’s Data Safety requirements.
- New Zealand Privacy Act 2020: We adhere to all applicable privacy laws in New Zealand.
15. Age Assurance and Parental Controls
- Age Verification: The App is intended for users above a specified age, and users may be required to verify their age.
- Parental Controls: Parents or guardians can manage app access and data collection for minors, where applicable.
16. Changes to This Policy
We may update this Privacy Policy from time to time. If we make important changes, we will notify you within the App or by email.
17. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Demand Aggregation Technology Limited
info@myfetu.com
Privacy Policy for Demand Aggregation Technology Limited (myFetū App)
This policy explains how Demand Aggregation Limited Partnership (DALP) collects, uses, and protects personal information across the myFetū products:
- The myFetū App (“the App”): available on the Google Play Store and the Apple App Store, used directly by whānau members for AI-assisted conversations and self-service features.
- The myFetū Navigator Portal (“the Portal”): used by navigators, provider staff, and admins (“Portal Users”) to manage referrals and record services provided to whānau.
These are currently two separate products with separate data. In future, a Portal User’s organisation and a whānau member using the App may be able to optionally link their accounts, with the whānau member’s consent, so information can be shared between the two systems. That feature does not exist yet. When it is built, this policy will be updated to explain exactly what is shared and how consent is obtained.
Read the section below that matches how you use myFetū. Sections 3 onward apply to everyone.
1. If you're a whānau member using the myFetū App
Information we collect
Information you give us:
- Your name
- Your email address
- Your age
- Your ethnicity
- Your gender
Information we collect automatically:
- A device identifier
- Your IP address
- Your conversation history with the App
- App navigation data, such as which buttons you tap, used to troubleshoot bugs and improve the product
- General app usage data
- Any feedback or issue reports you submit
- GPS location data, only if you choose to turn location on
AI features
The App uses AI to power conversations and features. AI-generated responses may sometimes be inaccurate or incomplete, so please use your own judgement, especially for anything important.
Age restrictions
The App is age-restricted through the Google Play Store and the Apple App Store, and those store-level restrictions are the age gate at present. The App itself does not currently carry its own separate age-verification step.
2. If you're a Portal User (navigator, provider, or admin staff)
Information we collect about you
- Your name
- Your email address
- Your phone number
- The provider organisation you work for
- Your role
- Your login and session activity
Information you enter about the whānau members you serve
The Portal is where you record your work with the whānau and whānau members your organisation supports. The information you enter can include:
- Identity and contact details, including name, date of birth, address, phone, gender, ethnicity, iwi, and language
- Government identifiers, including NHI, NSN, and IRD numbers, where relevant to the services being delivered
- Health, wellbeing, and safety information, including case notes, risk and safety assessments, and hauora (wellbeing) goals
- Consent records, signed forms, and file attachments
- Voice or video recordings and their transcripts, for example Smart Capture notes
This information is entered and used on behalf of your provider organisation. DALP does not collect it directly from the whānau members it relates to. Your organisation, not DALP, is responsible for telling whānau members how their information will be used. This policy explains what myFetū (the software) does with that information once it has been entered.
Children and young people
The Portal can hold information about children and young people if a Portal User enters it, for example as a whānau member. DALP does not verify the age of anyone whose information is entered this way. That responsibility sits with the Portal User and their organisation.
3. We are not affiliated with any government agency
myFetū, the App, and the Portal are provided by Demand Aggregation Limited Partnership (DALP), a private company. We are not part of, endorsed by, or affiliated with the New Zealand Government, any government department or agency (including Oranga Tamariki, the Ministry of Social Development, or the Ministry of Health), or any other government body, in New Zealand or elsewhere.
4. Who we share information with
4.1 Organisations and people
Who | Product | What they receive | Why |
Other navigators and providers | Portal | Information about a whānau member in their care | Coordinated support across the people involved in someone’s care |
Funders and commissioning agencies | Portal | Only what they need for their role | Reporting on commissioned services |
Researchers and policymakers | App and Portal | Anonymised, aggregated data only, which cannot identify an individual | Supports research and policy work on community wellbeing |
4.2 Technology services we use
These are companies that process information on our behalf so the products can work. They may only use it to provide their service to us.
The myFetū App
Service | What it receives | Why |
OpenAI | Your conversation messages | Powers the App’s AI conversation features |
LangChain | Conversation context and search queries | Runs the AI workflow behind features such as responsible party searching. This is a hosted service, so your conversation content is processed on LangChain’s systems |
Tavily | Search queries generated from your conversation | AI-based web search, so the App can look things up for you |
Firebase Cloud Messaging (Google) | Your device push token and the notification content | Delivers push notifications to your device |
Jira (Atlassian) | The content of feedback and issue reports you submit, and your contact details if you include them | Lets our team track and respond to feedback and bugs |
SMTP2GO | Your email address and the message content | Sends emails to you, such as account emails |
Land Information New Zealand (LINZ) | Your GPS coordinates | Turns your coordinates into location information, and provides map data and pin drops |
Supabase | Your account and App data | Hosts our database and handles sign-in |
Cloudflare | Network traffic data | Security and bot protection |
The myFetū Navigator Portal
Service | What it receives | Why |
SMTP2GO | Recipient name, email address, and referral or service details | Sends emails, such as referral and welcome emails |
NZ Post AddressChecker | The address text entered | Verifies addresses and adds location data |
AssemblyAI | Uploaded voice and video recordings | Transcribes recordings for Smart Capture. AssemblyAI’s own copy is deleted once myFetū has retrieved the transcript |
OpenAI | Transcript text and uploaded images | Summarises transcripts into case notes, and reads uploaded images such as handwritten notes |
Supabase | All Portal data | Hosts our database and handles sign-in |
Vercel | No personal data beyond what is needed to serve the application | Hosts the Portal application |
5. When the law requires us to share information
New Zealand law allows, and sometimes requires, personal information to be shared without consent in limited situations. These include where sharing is:
- Necessary to avoid prejudice to the maintenance of the law, including the prevention, detection, investigation, and prosecution of offences
- Necessary for court or tribunal proceedings that have started or are reasonably expected
- Necessary to prevent or lessen a serious threat to public health or public safety, or to someone’s life or health
- Compelled by a court order, search warrant, or other legal process
We share only what is necessary in these situations, and we keep a record of what was shared.
For the App: we assess any request ourselves and disclose only what the law permits or requires. Where we are allowed to tell you about a request, we will.
For the Portal: records about whānau members are held on behalf of the provider organisation, and under the Privacy Act that organisation is responsible for them. If we receive a request for those records, we refer the requester to the provider organisation, which decides as the responsible agency. We comply directly only where we are legally compelled to, and we let the provider organisation know when that happens unless the law prevents us.
Safety concerns: where there is a serious concern about someone’s safety, information may need to be shared with agencies such as Police or Oranga Tamariki. For Portal records, those decisions are made by the provider organisation under its own safeguarding obligations, not by DALP.
6. How we protect information
- Our database is encrypted while stored, using industry-standard encryption (AES-256 encryption at rest).
- Some especially sensitive fields carry a second layer of encryption applied before they are stored (AES-256-GCM).
- Information travels between your device and our systems over an encrypted connection (TLS).
- Cloudflare provides network-level security and bot protection.
- Access to information in the Portal is restricted by role, so Portal Users can generally only see information relevant to their own provider organisation.
- Actions taken in the Portal, including viewing, creating, editing, and deleting records, are logged for audit purposes.
- We commission penetration testing and carry out regular security reviews.
7. How long we keep information
We retain information only as long as necessary to support the App and the Portal’s functions, and to comply with our legal obligations.
8. Your rights
Under the New Zealand Privacy Act 2020, you have the right to access and correct personal information held about you.
- Whānau members using the App: contact us to access, correct, or delete your information.
- Portal Users: contact us to access or correct your own account information.
- Whānau members whose information is held in the Portal: please contact the navigator or provider organisation who supports you. They can contact us for platform-level support.
You can reach us at privacy@myfetu.com.
9. Cookies and local storage
The App uses local caching to keep you logged in and to make the App run more efficiently. No advertising cookies are used.
The Portal uses one cookie, which keeps you signed in. We do not use tracking or advertising cookies.
10. Questions or complaints
If you have a question or a concern about how your information is handled, please contact us first at privacy@myfetu.com.
If you are not satisfied with our response, you can also contact the Office of the Privacy Commissioner at privacy.org.nz.
11. Changes to this policy
We may update this policy from time to time. If we make a significant change, we will let whānau members and Portal Users know through the product itself or by email.