Privacy Policy

Uppi is a platform that connects consumers with home service tradies in New Zealand. We are the agency responsible for the personal information you provide when using our app and website. Contact: [Uppiservicos@gmail.com]

We collect the following personal information to provide our services: • Full name and trading name • Email address • Phone number • NZBN or IRD number — Tradies only • Precise location (to connect consumers with nearby tradies) • Photos and videos attached to service requests • Payment information from Tradies for credit top-ups (credit/debit card, tokenised via our payment processor — we never store raw card data) • Tradies' financial information: credit balance and top-up history • User identifier and push notification token Uppi does not collect or process consumers' payment information. Payments for services are made directly between consumers and Tradies, outside the platform.

We use your information solely for the following purposes: • Creating and managing your account on the platform • Connecting consumers with nearby service tradies • Processing Tradies' credit top-ups in their platform wallet • Sending notifications about requests, quotes and bookings • Verifying identity and preventing fraud • Meeting legal and regulatory obligations • Improving the user experience on the platform We do not use your information for third-party advertising or commercial profiling.

We only share your information with: • Our payment processor: for processing Tradies' credit top-ups and card tokenisation (only for Tradies who top up credits) • Google: address geocoding and autocomplete via the Google Places API • Firebase (Google): sending push notifications • Supabase: database and authentication infrastructure (with appropriate contractual safeguards where data is processed overseas) We do not sell, rent or trade your personal information to third parties for marketing purposes.

We keep your information for as long as necessary to provide our services or meet legal obligations: • Account data: while your account is active • Tradie credit top-up records: retained as required by NZ tax and record-keeping law • Location data: not stored permanently; used only in real time to deliver the service • After account closure: data is anonymised or deleted within 30 days, unless we are required by law to keep it longer

Under the Privacy Act 2020, you have the following rights in relation to your personal information: • Access: request a copy of the information we hold about you • Correction: ask us to correct information that is incomplete, inaccurate or out of date • Deletion: request deletion of information we no longer need to hold • Portability: request your information in a structured format, where reasonably practicable • Information: ask which third parties we have shared your information with • Withdrawal of consent: withdraw your consent at any time, where processing is based on consent • Complaint: raise concerns about how we handle your information To exercise any of these rights, contact us at: [Uppiservicos@gmail.com] We will respond to your request within 20 working days, as required by the Privacy Act 2020.

We use appropriate technical and organisational measures to protect your information against unauthorised access, loss or destruction, including: • Encryption in transit (TLS/HTTPS) for all communications • Secure authentication via Supabase Auth with JWT tokens • Card data tokenisation via our payment processor for Tradie credit top-ups (card data never passes through our servers) • Role-based access control (Row Level Security on the database) • API keys and credentials stored in secure environment variables, never in source code

Our website (uppiapp.com.br) may use cookies that are strictly necessary for the site to function. We do not use tracking or behavioural advertising cookies. The mobile app does not use cookies. We use local device storage to keep your session active securely.

Some of our infrastructure providers, such as Supabase and Firebase, process data on servers located outside New Zealand, including in the United States. Where this occurs, we take reasonable steps to ensure your information receives comparable protection to that required under the Privacy Act 2020, including relying on providers bound by recognised data protection standards.

We may update this Privacy Policy from time to time. Where we make material changes, we will notify you through the app or by email. The date of the last update is always shown at the top of this document. Continued use of the platform after changes are published constitutes acceptance of the updated policy.

For questions, requests or complaints about how we handle your personal information, contact us at: Email: [Uppiservicos@gmail.com] You also have the right to make a complaint to the Office of the Privacy Commissioner: www.privacy.org.nz