Privacy Policy

Last updated: 1 April 2026

1. Overview

We respect your privacy and comply with applicable laws. This policy explains what data we collect, why we collect it, who processes it, and your rights.

This policy applies to users of Concord worldwide. Depending on where you live, additional privacy rights may apply under local law.

This app is not intended for use by children under the age of 18.

We are the data controller for personal information processed through the app.

2. Information we collect and process

We collect and process:

  • information you provide;
  • account details (via authentication provider);
  • messages and content you enter into the app;
  • subscription status (via app stores);
  • device and app usage data; and
  • basic analytics and error logs.

Our legal basis for processing includes:

  • providing the service;
  • your consent; and
  • legitimate interests in operating and improving the app.

3. How we use your data

We use your data to:

  • provide and operate the app;
  • authenticate users;
  • process subscriptions;
  • improve reliability and features; and
  • meet legal obligations.

We do not sell or provide access to your data to third parties, other than in accordance with the uses noted above.

4. Third-party processors

We rely on trusted third parties to operate the service:

  • Clerk — authentication and account management; and
  • Apple App Store / Google Play — subscription and payment processing.

These providers process data under their own privacy policies and security standards.

5. International data transfers

Service providers may process data outside New Zealand. We take reasonable steps to ensure appropriate safeguards are in place.

6. Data retention

We retain data as long as needed to operate the service or meet legal requirements. You may request deletion of your data, subject to legal and technical limits.

7. Your rights

You have the right to:

  • know what personal information we collect and why;
  • request access to, correction of, or deletion of your personal information;
  • restrict or object to certain processing;
  • request a copy of your personal information in a portable format;
  • withdraw your consent at any time; and
  • complain to a relevant data protection authority.

You can contact us to exercise these rights.

If you are located in New Zealand, you may complain to the Office of the Privacy Commissioner.

If you are located in the European Union or United Kingdom, you may also lodge a complaint with your local data protection authority.

We do not sell or share personal information as defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). California residents may request access to or deletion of their personal information by contacting us.

8. Security

We use reasonable technical and organisational measures to protect your data. No system is completely secure, and you use the app at your own risk.

9. Changes

We may update this policy from time to time.

10. Contact

Privacy questions can be sent to: privacy@theconcordapp.com