Privacy Policy

Last updated: June 2026 (Beta)

bizzibody is a community road safety platform. This policy explains what information we collect, how we use it, and what rights you have. We've written it in plain language because we think that matters.

bizzibody is operated by Bamboo Creative Ltd (New Zealand). We are bound by the New Zealand Privacy Act 2020.

1. What we collect and why

We collect only what's needed to make the platform work and to support road safety outcomes. Where you provide demographic information, we may also use anonymised, aggregated data for research and public reporting — never in a way that could identify you.

2. AI processing and improving bizzibody

If you record a voice report, the audio is sent to OpenAI's Whisper API for transcription. The recording is permanently deleted immediately after transcription. We do not store audio files.

The transcribed text is then processed by Google Gemini to extract structured information (such as category, transport mode, and a summary). This turns your words into a consistent, searchable report.

We also use the content of reports, the text transcripts, and the structured form data to improve and develop bizzibody: the accuracy of transcription, the generation and consistency of reports, our extraction prompts and model configuration, and the accuracy of location and geocoding. To do this we may keep copies of this content as evaluation datasets and use it to fine-tune the AI models we rely on, or to develop our own.

Copies kept for these purposes are de-identified: we remove direct identifiers such as your name, email, contact details, and precise demographics. For this improvement and training work, any content we share with third-party services is de-identified, so they do not receive information that identifies you personally.

Because these de-identified copies may already be built into datasets or model training, we retain them for these purposes even if you later ask us to delete your personal information. Deleting your personal information removes the link to you; a de-identified copy may remain.

Over time we aim to do more of this processing on your own device and to rely less on third-party AI services, for both your privacy and environmental reasons.

3. How reports are stored

Reports are stored securely on infrastructure located overseas, and are kept indefinitely as part of the public record of road safety experiences in New Zealand.

Device tokens, the anonymous identifiers that link your browser to your reports, are stored in your browser's local storage and expire after 90 days.

4. The public map

Report summaries are displayed on a public map. The map shows:

• Report category and transport mode
• A brief description of what happened
• An approximate location
• Time of day (morning, afternoon, evening, or night)
• Tags associated with the report (e.g. 'near miss', 'pothole')

No personally identifiable information is shown on the map. Your name, email, and any personal details you've provided are never displayed publicly.

5. External authority reports

You can use bizzibody to draft and send reports to external organisations such as NZ Police Community Roadwatch, WCC Fixit, and Flamingo. These forms may include personal details you provide — such as your name and contact information — so that the authority can follow up with you.

When you submit to an external authority:

• You are submitting directly to that organisation, and their own privacy policy applies
• bizzibody retains a copy of the submitted form for your reference and our records

Each external authority has its own privacy policy. We encourage you to review these before submitting:

• Flamingo Scooters Privacy Statement
• Lime Privacy Statement
• Metlink Online Feedback Privacy Statement
• NZ Police — Hurt or Threatened Privacy Statement
• NZ Police Community Roadwatch Privacy Statement
• Wellington City Council FIXiT Privacy Statement

6. Email follow-up

If you provide your email address after submitting a report, we'll send you a single follow-up email about your report. We don't use your email address for marketing or share it with third parties.

If you receive a follow-up email about a report you didn't submit — which can happen if someone entered your email address when submitting their report — you can use the "I didn't make this report" link in the email. This will remove the link between your email and that report, and flag the report for our internal review.

7. Device tokens and local storage

bizzibody uses browser local storage (not cookies) to store a device token. This token is used to:

• Link anonymous reports to your device so you can view them later
• Prevent duplicate submissions

The token expires after 90 days. You can clear it at any time by clearing your browser's local storage or site data.

We also use Cloudflare Turnstile to detect and prevent automated bot submissions. Turnstile may set its own cookies as part of this process. For more information, see Cloudflare's privacy policy.

8. Third-party services

We use the following services to operate the platform:

9. Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or misleading
• Request deletion of your personal information. In most cases this means removing personal details associated with your report, while the anonymised report summary remains part of the public record. De-identified copies kept to improve our systems (see section 2) may also be retained, as they no longer identify you.

You can remove your personal details yourself: signed-in users from their profile page, and anonymous reporters via the link in their follow-up email. When you do, you can optionally let us keep your withdrawn reports linked to each other for research under a random code. The code is created at that moment, is never stored alongside your account or email, and cannot be traced back to you; because of that, the choice cannot be changed later.

Signed-in users can go further and delete their account entirely from the profile page. Deletion is scheduled, not immediate: it takes effect after a 30-day grace period. During those 30 days your account is unchanged and still works, your data is retained, and you can cancel at any time, either from your profile or from the link in the email we send you when you schedule it. We use this window so that nobody can lose their account to a moment's mistake or to someone else acting on their account. After 30 days it is carried out automatically and cannot be undone: we first remove your personal details from every report, exactly as above, then erase the account itself, including your login, your name and contact details, your demographics, and your transport preferences. If you need your account deleted immediately rather than after 30 days, email us using the address below and we will do it. Three things remain afterwards. Your anonymised report summaries and map pins stay part of the public record. Anything you previously chose to share for research stays in our de-identified research set under the random code described above, which was never linked to your account and so cannot be found or removed. And, as below, any report already sent to an authority cannot be recalled.

One limit to be aware of: if your report has already been sent to an authority, that email cannot be recalled. A copy of it remains in the authority's inbox, in the confirmation copy sent to you, and in our own email-delivery records (our email provider keeps sent messages under its retention policy). Withdrawal removes your personal details from your account and our reporting records, and from the public record going forward. It does not unsend, or delete, an email that has already left.

To exercise any of these rights, email us at hello@bamboocreative.nz. We'll respond within 20 working days.

If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner: privacy.org.nz

10. Children

bizzibody is intended for people aged 16 and over. If you believe a child under 16 has submitted personal information, please contact us and we'll remove it.

11. Beta

bizzibody is currently in public beta. Practices described in this policy may evolve as the platform develops. We'll update this page when they do.

12. Contact

Bamboo Creative Ltd
Wellington, New Zealand
Email: hello@bamboocreative.nz