Privacy Policy

GapNights Limited (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the GapNights mobile application, website, and services.

We comply with the New Zealand Privacy Act 2020 and its information privacy principles.

We collect the following types of personal information:

• Account details: name, email address, phone number, date of birth
• Identity verification: government-issued ID (processed securely, not permanently stored)
• Payment information: card details (processed by our secure payment partner Stripe - we never store card numbers)
• Profile data: city, travel preferences, avatar
• Booking history: past and current reservations
• Device information: device type, operating system, app version
• Usage data: how you interact with the app, search and browsing history
• Location data: approximate location (only when you grant permission)

We use your personal information to:

• Provide and improve our booking service
• Process payments and manage your account
• Verify your identity and maintain trust and safety
• Send booking confirmations and important service updates
• Send promotional communications (with your consent)
• Personalise your experience and show relevant listings
• Comply with legal obligations
• Resolve disputes and enforce our Terms of Service

We may share your information with:

• Hosts: your first name and profile details when you make a booking
• Payment processors: Stripe for secure payment processing
• Identity verification services: to verify your ID
• Service providers: who help us operate our platform (e.g., hosting, analytics)
• Law enforcement: when required by law or to protect safety

We never sell your personal information to third parties for marketing purposes.

Your data is stored securely using industry-standard encryption. Payment data is processed by Stripe and never stored on our servers. Identity documents are processed for verification and then deleted.

We use secure cloud infrastructure with data centres located in Australia and New Zealand.

We retain your personal information for as long as your account is active or as needed to provide our services. After account deletion, we retain certain information for up to 7 years to comply with legal and regulatory obligations (such as the Anti-Money Laundering and Countering Financing of Terrorism Act 2009).

Under the Privacy Act 2020, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal data
• Withdraw consent for promotional communications
• Lodge a complaint with the NZ Privacy Commissioner

To exercise these rights, contact us at privacy@gapnights.co.nz. We will respond within 20 working days as required by law.

Our website uses cookies and similar technologies to improve your experience and analyse traffic. Our mobile app uses analytics tools to understand how users interact with the service.

You can manage cookie preferences through your browser settings. You can opt out of mobile analytics in your device settings.

Your data may be processed by service providers located outside New Zealand (e.g., cloud hosting, payment processing). Where this occurs, we ensure appropriate safeguards are in place to protect your information in accordance with the Privacy Act 2020.

GapNights is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a user under 18, we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app, our website, or via email. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or want to exercise your rights, contact us at: