Privacy Policy
Last updated: June 2026 (Beta)
bizzibody is a community road safety platform. This policy explains what information we collect, how we use it, and what rights you have. We've written it in plain language because we think that matters.
bizzibody is operated by Bamboo Creative Ltd (New Zealand). We are bound by the New Zealand Privacy Act 2020.
1. What we collect and why
We collect only what's needed to make the platform work and to support road safety outcomes. Where you provide demographic information, we may also use anonymised, aggregated data for research and public reporting — never in a way that could identify you.
| Information | Why we collect it |
|---|---|
| Report content (text or voice) | To create a structured report and display it on the map |
| General location | To show reports on the map and identify patterns |
| Transport mode and report category | To classify and filter reports |
| Device token (local storage) | To link anonymous reports to your device for 90 days |
| Email address (optional) | To send a single follow-up about your report |
| Profile details (name, contact, demographics) | Optional — only used to pre-fill external authority forms, with your permission |
| Usage data (pages visited, interactions) | To understand how the platform is used and improve it |
| Report content and transcripts (de-identified) | To improve and develop the platform, including transcription, report generation, and location accuracy |
2. AI processing and improving bizzibody
If you record a voice report, the audio is sent to OpenAI's Whisper API for transcription. The recording is permanently deleted immediately after transcription. We do not store audio files.
The transcribed text is then processed by Google Gemini to extract structured information (such as category, transport mode, and a summary). This turns your words into a consistent, searchable report.
We also use the content of reports, the text transcripts, and the structured form data to improve and develop bizzibody: the accuracy of transcription, the generation and consistency of reports, our extraction prompts and model configuration, and the accuracy of location and geocoding. To do this we may keep copies of this content as evaluation datasets and use it to fine-tune the AI models we rely on, or to develop our own.
Copies kept for these purposes are de-identified: we remove direct identifiers such as your name, email, contact details, and precise demographics. For this improvement and training work, any content we share with third-party services is de-identified, so they do not receive information that identifies you personally.
Because these de-identified copies may already be built into datasets or model training, we retain them for these purposes even if you later ask us to delete your personal information. Deleting your personal information removes the link to you; a de-identified copy may remain.
Over time we aim to do more of this processing on your own device and to rely less on third-party AI services, for both your privacy and environmental reasons.
3. How reports are stored
Reports are stored securely on infrastructure located overseas, and are kept indefinitely as part of the public record of road safety experiences in New Zealand.
Device tokens, the anonymous identifiers that link your browser to your reports, are stored in your browser's local storage and expire after 90 days.
4. The public map
Report summaries are displayed on a public map. The map shows:
- Report category and transport mode
- A brief description of what happened
- An approximate location
- Time of day (morning, afternoon, evening, or night)
- Tags associated with the report (e.g. 'near miss', 'pothole')
No personally identifiable information is shown on the map. Your name, email, and any personal details you've provided are never displayed publicly.
5. External authority reports
You can use bizzibody to draft and send reports to external organisations such as NZ Police Community Roadwatch, WCC Fixit, and Flamingo. These forms may include personal details you provide — such as your name and contact information — so that the authority can follow up with you.
When you submit to an external authority:
- You are submitting directly to that organisation, and their own privacy policy applies
- bizzibody retains a copy of the submitted form for your reference and our records
Each external authority has its own privacy policy. We encourage you to review these before submitting:
- Flamingo Scooters Privacy Statement
- Lime Privacy Statement
- Metlink Online Feedback Privacy Statement
- NZ Police — Hurt or Threatened Privacy Statement
- NZ Police Community Roadwatch Privacy Statement
- Wellington City Council FIXiT Privacy Statement
6. Email follow-up
If you provide your email address after submitting a report, we'll send you a single follow-up email about your report. We don't use your email address for marketing or share it with third parties.
If you receive a follow-up email about a report you didn't submit — which can happen if someone entered your email address when submitting their report — you can use the "I didn't make this report" link in the email. This will remove the link between your email and that report, and flag the report for our internal review.
7. Device tokens and local storage
bizzibody uses browser local storage (not cookies) to store a device token. This token is used to:
- Link anonymous reports to your device so you can view them later
- Prevent duplicate submissions
The token expires after 90 days. You can clear it at any time by clearing your browser's local storage or site data.
We also use Cloudflare Turnstile to detect and prevent automated bot submissions. Turnstile may set its own cookies as part of this process. For more information, see Cloudflare's privacy policy.
8. Third-party services
We use the following services to operate the platform:
| Service | Purpose |
|---|---|
| OpenAI (Whisper) | Voice transcription |
| Google (Gemini) | AI report extraction |
| Supabase | Database and storage |
| Vercel | Hosting, deployment, and analytics |
| Cloudflare | Bot prevention (Turnstile) |
9. Your rights
Under the New Zealand Privacy Act 2020, you have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or misleading
- Request deletion of your personal information. In most cases this means removing personal details associated with your report, while the anonymised report summary remains part of the public record. De-identified copies kept to improve our systems (see section 2) may also be retained, as they no longer identify you.
To exercise any of these rights, email us at hello@bamboocreative.nz. We'll respond within 20 working days.
If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner: privacy.org.nz
10. Children
bizzibody is intended for people aged 16 and over. If you believe a child under 16 has submitted personal information, please contact us and we'll remove it.
11. Beta
bizzibody is currently in public beta. Practices described in this policy may evolve as the platform develops. We'll update this page when they do.
12. Contact
Bamboo Creative Ltd
Wellington, New Zealand
Email: hello@bamboocreative.nz