Privacy Policy

1. Who we are

Broski is operated by Broski App Limited (NZBN 9429053334664), a company based in Wellington, New Zealand (“Broski”, “we”, “us”). We are responsible for your personal information (the “controller” under the GDPR, and the “agency” under the New Zealand Privacy Act 2020). You can contact our Privacy Officer at calebjmadgwick@gmail.com.

2. Summary

• We collect the information you put in your profile, your availability, trips, events, messages and requests, and your location only if you choose to share it.
• Your profile, photos, availability and trips are visible to other Broski users. Your email address and exact location are not shown to other users in the app.
• We don’t sell your personal information, show ads, use advertising identifiers, or use analytics or tracking tools.
• We use a small number of service providers to run Broski, including Amazon Web Services (in Australia) and Stream (for chat).
• You can access, correct or delete your information, and delete your account in the app at any time.

3. Information we collect

Information you give us

Information collected when you use the app

• Location, only if you choose to share it. See Location.
• Push notification token, if you allow notifications, so we can send you notifications.
• Technical information that our service providers process when your device connects to them, such as your IP address and the time of the request. They use it to deliver the service and keep it secure.
• Information stored on your device, such as your settings, map visibility choice, filters, users you’ve blocked, and cached data and messages so the app works quickly and offline.

Information from other people

Other users may send you requests, message you, add you to chats, or report you. Sign-in providers (Apple or Google) send us the details described above when you use them to sign in.

What we don’t collect

We don’t use analytics, crash-reporting, advertising or tracking tools. We don’t collect your device’s advertising identifier, and we don’t track you across other companies’ apps or websites.

4. How we use your information

We only use your information where we have a lawful reason to. If you’re in the EU or UK, the legal bases we rely on are shown below.

We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. Features like filters and “what you have in common” simply compare the information riders have added to their profiles.

5. What other people can see

Other Broski users can see:

• your name, age (not your full date of birth), nationality, photos, bio and prompts;
• your home resort, resorts you’re riding this season, season pass, ski or snowboard and ability, seasons riding, job title, interests and languages;
• your Instagram, TikTok and Slopes links if you add them, and when you joined Broski;
• your availability calendar and upcoming trips;
• if you share your location: an approximate pin on the map and a rounded distance on your profile, such as “Less than 1 km away”;
• events you host, and messages you send in chats to the other people in that chat;
• what you have in common with them, such as shared resorts, days or interests.

Your email address, gender and exact location aren’t shown to other users in the app. Profile and event photos are stored on a content delivery network, so anyone who has a photo’s link can view it.

6. Location

Broski only accesses your device’s location while you’re using the app, never in the background, and only if you give permission. In Settings, under Map Visibility, you choose to:

• Share my live location: your current location (accurate to around 100 metres) is saved to your profile when you open the map;
• Choose a static location: you pick a spot on the map, and your device’s GPS isn’t used;
• Stay hidden: your saved location is deleted and you don’t appear on the map, but you can still see other riders.

The location we store is your real location (or the spot you picked). Other users are only shown a pin that is offset by 250 metres to 1 kilometre in a direction that changes daily, and a rounded distance. When you look at an event, we send the event’s location (not yours) to a weather service to show the forecast. When the map looks up your home resort, the resort name is sent to Apple’s map search.

7. Who we share information with

We don’t sell your personal information, and we don’t share it for advertising. We share it only as follows.

Service providers

These companies process information on our behalf to run Broski, under contracts that require them to protect it:

Other situations

• Other users, as described in What other people can see.
• Legal and safety reasons: if we believe in good faith it’s necessary to comply with the law or a lawful request, to protect someone’s safety, to prevent or investigate fraud or abuse, or to enforce our Terms.
• Business changes: if Broski is involved in a merger, acquisition or sale of assets, your information may be transferred, and we’ll tell you before it becomes subject to a different privacy policy.
• With your permission, for example when you tap a link to someone’s Instagram, TikTok or Slopes profile, which opens that service.

8. International transfers

We’re based in New Zealand, our main servers are in Australia, and some providers process data in the United States and other countries. Privacy laws in these countries may differ from where you live. When we transfer personal information overseas, we take steps to make sure it stays protected to standards comparable to the New Zealand Privacy Act. For information from the EU, UK or Switzerland, we rely on adequacy decisions (the EU and UK recognise New Zealand as providing adequate protection) and on Standard Contractual Clauses (and the UK Addendum) included in our providers’ data processing terms. Contact us for more information about these safeguards.

9. How long we keep information

We keep your information for as long as your account is active. When you delete your account in the app, we delete:

• your profile and the photos currently on it;
• your availability;
• contact requests you’ve sent and received;
• for email and password accounts, your sign-in account.

Some information isn’t yet removed automatically: trips, events you hosted, messages you sent in chats (stored by Stream), photos you previously replaced, and for Apple or Google sign-ins, the sign-in record. Email us at calebjmadgwick@gmail.com and we’ll delete this information within 30 days. See Delete Your Account.

We may keep some information for longer where needed:

• deleted database records can remain in our systems for up to 30 days before they’re permanently removed;
• reports and related information, for as long as needed to keep users safe and handle disputes, and to prevent banned users from returning;
• support emails, for as long as needed to help you and keep a record of what we’ve agreed;
• anything we must keep to comply with the law or respond to legal claims.

10. Security

We use encryption (HTTPS) to protect information sent between your device and our services, and our providers encrypt stored data. We keep strengthening our security, but no service can be completely secure. Please use a strong, unique password.

If a privacy breach is likely to cause serious harm, we’ll notify you and the relevant regulators (such as the New Zealand Privacy Commissioner) as required by law.

11. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy;
• correct information that’s wrong (you can edit most of your profile in the app);
• delete your information and account;
• receive your information in a portable format and have it sent to someone else;
• object to or ask us to restrict certain uses of your information;
• withdraw consent at any time, for example by choosing Stay Hidden or turning off notifications, without affecting what we did before;
• complain to a privacy regulator (see below).

To make a request, email calebjmadgwick@gmail.com from the email address on your account. We may need to confirm your identity. We’ll respond within 20 working days (or sooner if your local law requires, for example within one month under the GDPR). We won’t charge you or treat you differently for using your rights.

12. Information for your country or state

New Zealand

We comply with the Privacy Act 2020 and its Information Privacy Principles. You can ask to access and correct your information. If you’re not happy with how we’ve handled a privacy concern, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Australia

We handle personal information in line with the Australian Privacy Principles. You can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

European Economic Area, United Kingdom and Switzerland

You have the rights listed in section 11 under the GDPR, UK GDPR or Swiss law, including the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office at ico.org.uk). The legal bases we rely on are set out in section 4.

Canada

You can access and correct your information and withdraw consent under PIPEDA and applicable provincial laws, and complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

California and other US states

Where US state privacy laws (such as the CCPA as amended by the CPRA) apply, this section also applies to you. In the last 12 months we have collected these categories of personal information: identifiers (name, email address, user ID); characteristics of protected classifications (age, gender, nationality); geolocation data (if you share your location); audio and visual information (photos and voice messages); and other information you choose to add to your profile. The sources, purposes and recipients are described above.

• We do not sell or “share” (for cross-context behavioural advertising) personal information, and have not done so in the last 12 months.
• We only use sensitive personal information (such as precise location and account login) to provide the service you ask for, so the right to limit its use doesn’t apply.
• You have the right to know, access, correct and delete your personal information, and not to be discriminated against for using these rights. You can use an authorised agent, and we may need to verify your request.

To make a request, email calebjmadgwick@gmail.com.

13. Children

Broski is only for people aged 18 and over, and you must confirm your date of birth when you sign up. We don’t knowingly collect information from anyone under 18. If we learn that someone under 18 is using Broski, we’ll delete their account. If you think a child is using Broski, please tell us at calebjmadgwick@gmail.com. See our Child Safety Standards.

14. Our website

Our website (broski.app) is hosted by Vercel, which processes technical information such as IP addresses to deliver the site and keep it secure. The website doesn’t use cookies, analytics or tracking. If you join our Android waitlist, the form is provided by Google Forms, and what you enter is handled under Google’s privacy policy and shared with us so we can contact you when the app launches. Links to other sites, such as Instagram or our sticker shop, are covered by those sites’ own policies.

15. Changes to this policy

We’ll update this policy when our practices change. We’ll change the “last updated” date above and, if the changes are significant, tell you in the app or by email before they take effect.

16. Contact us

Privacy Officer, Broski App Limited
NZBN 9429053334664
Wellington, New Zealand
Email: calebjmadgwick@gmail.com