Privacy

Version 2026-11-08. Last updated 2026-11-08. This policy covers the Mapish app for iPhone and Android, the Mapish web app, the business console and this website.

Who we are

Mapish is run by APPSTECH LIMITED (New Zealand company number 6340573, NZBN 9429046246547). We are the agency responsible for your personal information under the New Zealand Privacy Act 2020. You can reach us at [email protected].

What we collect and why

You can look at the map, prices and specials without an account. Reporting prices, saving fill-ups and trips, alerts, deals and business tools need one.

• Your account. Your email address, display name, home country and language, and the sign-in identifier from our sign-in provider. If you sign in with Google or Apple, we get the name and email address they share (Apple may give a private relay address). We also record which version of our terms and this policy you agreed to, and when. If you turn on two-step sign-in, we email you one-time codes; we store them only in scrambled (hashed) form and they expire after 10 minutes. We use this to run your account and keep it secure.
• Business owners. If you add or claim a business: a contact email (we send a link to confirm it) and your mobile number, confirmed with a text-message code. Also the business details you enter (name, address, the NZBN record you pick from the New Zealand business register, opening hours, phone, website, description, photo and logo), the email addresses of team members you invite, the prices and specials you publish, your plan, and the country your request came from (to help us check claims). Your contact email and mobile number are not shown publicly; the business details you enter for customers are.
• Location for nearby prices. When the app is open and you allow location, your phone’s position is sent to our servers to find nearby stations, shops and specials, and to show where you are on the map. We use it to answer the search; it is not saved to your account. You can also move the map or pick a place instead.
• Price reports. The station, fuel type, price and time, how accurate your location was and how far you were from the station (to check you were there, not your exact position), whether you were inside or outside, your country and the app version. Where reporting a shop item’s price is available, we also keep the position you reported from.
• Trips. When you plan a trip: the start and destination you choose, the route, the vehicle and fuel figures used, and the price and savings estimates. Only when you start a trip, the app records your route (GPS points with times), distance and the places you stop for about a minute or more (and the station or shop there, if any), to work out your fuel use and cost and show offers along the way. While that trip is active it keeps recording in the background, for example while your navigation app is on screen; on Android you see a “Mapish is recording your trip” notification and on iPhone the location indicator. Recording stops when you finish the trip, and a trip left running is closed automatically after a few hours. The trip, its route and stops are saved to your trip log.
• Deals near me (off unless you turn it on). Your approximate location, rounded to about 1 km, so specials from businesses nearby can reach you. Each update replaces the last, a location older than 24 hours is not used, and turning the switch off deletes it. Businesses only see how many people an alert reached.
• Photos. When you photograph a price board (or choose a photo), take check-in photos of your dashboard or the pump display, or add a photo of your vehicle, the photo is uploaded to our private storage. Our servers remove the location and other hidden data (EXIF) from it shortly after upload. Google Cloud Vision reads the text in it (such as prices or the odometer) and checks it isn’t inappropriate. Price-board photos are seen only by our moderators, and your vehicle photo only by you. Please keep people’s faces and number plates out of photos.
• QR codes and specials. When you scan a store’s special QR code, or staff scan your deal pass, we record the redemption: the special, the store, the price, saving and quantity, the time, and any points you earned. It counts towards your savings. The business sees the sale (item, quantity, amount and time), not your name or account. We also keep the specials you save, your lists and any reminders you set.
• Vehicles, fill-ups and check-ins you enter. Vehicle details (name, make, model, year, fuel, tank size and fuel use), fill-ups (station, fuel, litres, price and date), check-ins (odometer, range and pump figures) and the savings worked out from them.
• Car Bluetooth link. If you link a car, the name of its Bluetooth device. When your phone connects to it while the app is open, we record the drive’s start and end time and distance. On Android this needs the Bluetooth permission.
• Alerts and notifications. Price alerts you set (fuel, target price, area and brand), the notifications in your in-app inbox and, if you allow notifications, your device’s push token (from Apple or Google, through Firebase Cloud Messaging), the device type and your sound or vibrate choice.
• Favourites. The places and items you save with the heart or bookmark. Without an account they stay on your device; when you are signed in they are also saved to your account so they show on your other devices. From them we work out a taste profile (for example how many of your favourites are food, shops, stays, sights or events), shown to you on your Favourites page and used to suggest places you may like.
• Picks near me (off unless you turn it on). Your approximate location, rounded to about 1 km, and the distance you chose, so we can tell you about a place that matches your favourites nearby. Each update replaces the last, a location older than 24 hours is not used, and turning the switch off deletes it.
• Reviews and reports. Reviews you write, and the problems you report to us about prices, photos or businesses.
• Reports about reviews, and blocking. If you report a review, we keep your account id, which review it was, the reason you chose and any note, and the time. If you block someone, we keep who blocked whom and when. We keep these so we can look into the report, hide or remove content, act on repeat abuse, keep a record of what we decided and why, and so a blocked person’s reviews stay hidden from you. If we hide a review, we keep a copy of it for the same reasons.
• Invites and points. If you invite a friend or a business, who invited whom and any reward. For a business invite we keep a scrambled (hashed) form of the business’s phone number, not the number itself. On Android, the first time you open the app it reads the Google Play install referrer, so a friend’s invite code applies without typing it.
• Crash reports. If the app crashes, a report of the error, your device model, system version and the app version is sent to Sentry under a random id that is not linked to your account. We don’t send your name, email address, IP address or location with it. Errors on our servers are reported the same way, with personal details removed.
• Logs. Our API records each change made through it (what kind of change, when, the account id and the result, never the content) for 90 days, for security and to fix problems. We keep a record of the emails we send (to whom, the subject and whether it was sent) for 90 days. Our web servers keep ordinary request logs (such as IP address, the address requested, which can include the map area you searched, and the time). If our security system blocks an IP address for abusive traffic, we keep that address and the reason as a security record, and delete it 90 days after the block ends. Old web server request logs are deleted automatically.

No advertising, no tracking

• The app shows no ads and has no advertising software, and it doesn’t use your device’s advertising ID. The specials you see come from the businesses themselves, and a business can only send you a deal alert if you turn on Deals near me.
• We don’t track you across other companies’ apps or websites, and we don’t use analytics services.
• We don’t sell your personal information.
• Businesses see totals, such as how often their page was viewed and what sold. Page views are counted per business per day without recording who viewed. Businesses never see which drivers viewed, saved or bought from them.

What other people can see

• Price reports are public as part of the price history (station, fuel, price and time), without your name or position. Our moderators can see who made a report, to deal with mistakes and abuse.
• Reviews you write are shown with your display name, and the business can reply.
• When you report a review or block someone, we don’t tell the other person it was you, and your block list is not shown to anyone. Our moderators can see who made a report, to deal with abuse of the report button.
• Business details and specials that owners publish are public.
• Everything else (your trips, vehicles, fill-ups, photos, alerts and lists) is not shown to other users or to businesses.

Who helps us run Mapish

These companies process information for us, only to provide their service:

• Google Firebase: sign-in (Firebase Authentication, including Google sign-in and the text-message codes for owners’ mobile numbers) and push notifications (Firebase Cloud Messaging, which uses Apple’s push service on iPhone).
• Apple: Sign in with Apple.
• Google Maps Platform: maps in the app and web app, place and address search (what you type and your general area), the street address where a trip ends, and details of places near the area you are viewing.
• Google Cloud Vision: reads the text in photos and screens them for inappropriate content. Google Cloud Natural Language: checks text you write, such as reviews and reports, for offensive language.
• Google Gemini: words short notes in the app, such as the line above your savings and the reasons for the seasonal picks on paid plans. It gets only general facts (kinds of places, item names and prices, distances, the season and your favourite kinds of places), never your name, email address, account or location.
• OpenStreetMap services: route planning (OSRM), a backup address search (Nominatim), and the map pictures in the business console, which your browser loads from OpenStreetMap’s servers. They get the places involved, not your name.
• Cloudflare: delivers our websites and app connection and protects them from attacks. Cloudflare R2 stores photos, in its Oceania region.
• Google Cloud: runs our servers and database in Sydney, Australia, and keeps our backups in Melbourne, Australia.
• Sentry: crash and error reports.
• Stripe: payments for plans bought on the website. You enter your card on Stripe’s page; we never see or store your card number. We keep your plan, its status and dates, and Stripe’s customer reference.
• Zoho Mail (Australian data centre): sends our emails and receives yours.
• New Zealand Business Number register: looked up when a business owner searches for their business.

Some of these providers store or process information outside New Zealand, for example in Australia and the United States. We may also share information when the law requires it.

This website and cookies

This website has no accounts, no cookies of its own, no analytics and no advertising, and it loads nothing from other companies’ servers. On your first visit it asks whether it may remember your light or dark theme choice in your browser. Choose Accept and it does; choose Reject and it keeps only your answer, so it doesn’t ask again. You can change your answer at any time with Cookie settings at the bottom of each page. Like any web server, ours keeps ordinary request logs (such as IP address, page requested and time) for security and troubleshooting. It has no forms. Before launch it had an early-access signup, described below.

The Mapish web app and the business console use the same account as the app. Firebase Authentication keeps you signed in using your browser’s storage, and if you allow notifications in your browser we keep its push token.

Early-access signup before launch (waitlist)

If you joined the early-access list on this website before launch (including to hear about early-bird offers), we collected:

• Your email address and the time you agreed to be emailed.
• A hashed IP address. We store a one-way hash (SHA-256 with a secret salt) of your IP address, never the IP address itself. It is used only to limit abuse and duplicate signups.
• Your browser’s user agent (browser and device type, shortened), for the same abuse-prevention purpose.
• Which part of the site you signed up from (for example “hero” or “coming-soon”).

Purpose. We use your email to tell you about Mapish’s launch, early access and early-bird offers, and to give you any early-access offer when you sign in to the app with the same email. We do not sell it or share it for advertising.

Retention. If you were never invited to Mapish or given an early-access offer, and have no Mapish account with that email, we delete your signup 12 months after you made it. Otherwise we keep it until you ask us to erase it or you delete your Mapish account. If you unsubscribe, we stop emailing you and keep your signup only so we remember that.

Unsubscribe. Every email we send contains an unsubscribe link. You can also email [email protected] to be removed and your details erased.

How long we keep it

• Your account and what you added (vehicles, fill-ups, check-ins, trips and their routes, alerts, favourites, lists, notifications and points): until you delete your account. You can also delete a trip in the app: its route, stops and savings go at once, and we keep only the month it was saved in (no places), so it still counts toward that month's free trips.
• Price reports: kept as part of the public price history, without your name, also after you delete your account.
• Price-board and check-in photos: up to 90 days, then deleted, unless we need one to deal with a dispute or a legal matter. Your vehicle photo stays until you remove it or delete your account.
• Deals near me and Picks near me location: replaced with each update, not used after 24 hours, deleted when you turn the switch off.
• Review reports and moderation records (who reported what, the decision, and any hidden review): we keep them for 12 months after the decision, then delete them. If you delete your account, we remove your account id from reports you made. Your blocks are deleted when you unblock the person or delete your account.
• API change records and email records: 90 days.
• Payment records (your plan, its status and dates, refunds and Stripe’s customer reference): kept for our accounts and tax records, also after you delete your account.
• Backups: we back up our database every 6 hours. Deleted information can stay in these backups until they expire. Our regular backups are deleted automatically within 45 days; a copy taken before a major server change is kept until we no longer need it.

Deleting your account

In the app, go to Me and choose Delete account. You can also delete it on the web at mapish.app/delete-account, without the app.

Deleting your account permanently deletes or anonymises everything personal we hold about you: your profile, email address, name and sign-in, vehicles, fill-ups, check-ins, trips and routes, photos, alerts, lists, push tokens and notifications. Price reports you made stay in the public price history, but they are no longer linked to you. If you signed in with Apple, we also revoke Mapish’s access to your Apple ID. We keep payment records for our accounts, as described above. If you are the only owner of a business on a paid Mapish Business plan, cancel that plan or add another owner first. A business without a paid plan stays on Mapish without your name and contact details.

Your rights

Under the Privacy Act 2020 you can ask to see the personal information we hold about you and to have it corrected. Email our Privacy Officer at [email protected] and we will reply within 20 working days. You can change most of your details in the app yourself. You can turn off location, notifications, camera and Bluetooth in your phone’s settings at any time; the map and prices still work without them.

If you are not happy with how we handle your information, please tell us first. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz).

Keeping it safe

Everything travels over encrypted connections. Photos are kept in private storage that only short-lived links can open, and only the people at Mapish who need it can see your information. No system is perfectly secure; if a privacy breach is likely to cause serious harm, we will tell you and the Privacy Commissioner, as the law requires.

Changes to this policy

When we change this policy, we update the version and date at the top. If a change matters, the app and website ask you to agree to the new version before you carry on.

Contact and Privacy Officer

Our Privacy Officer can be reached at [email protected] for questions, access and correction requests, and privacy complaints, and so can we for anything else. Mapish is run by APPSTECH LIMITED.