Privacy Policy

1. Who we are

Commute Modeller is operated by an individual based in New Zealand. If you have any questions about this policy, contact us at admin@mstep.nz.

2. What we collect

When you sign in with Google we receive your email address and display name from Google OAuth. We store these in our database alongside your account approval status and the date you requested access.

When you run a commute analysis, the origin and destination addresses you enter are sent to our server to calculate route options. These addresses are not stored — they exist in memory only for the duration of the request and are discarded immediately afterwards.

We record a usage event each time you run an analysis. This event contains a timestamp and a unit count (a measure of how many routes were calculated). It does not contain your addresses or any route results.

We use authentication cookies (Supabase session tokens) to keep you signed in. See our Cookie Notice for details.

3. What we don't collect

We do not use analytics cookies, advertising trackers, or any third-party tracking scripts. We do not build advertising profiles or sell your data. We do not store route results, map data, or commute history.

4. Third-party services

We use the following third-party services to operate the app:

• Supabase — authentication and database, hosted on AWS. Stores your email, display name, approval status, and usage event records.
• Google Maps Platform — route calculation. Your origin and destination coordinates are sent to Google's servers for each analysis request and are subject to Google's Privacy Policy.
• Vercel — hosting and edge infrastructure. Vercel may log request metadata (IP address, path, timestamp) for security and operational purposes.

5. Data retention

Your profile record (email, name, approval status) and usage event records are retained for as long as your account is active. If you request account deletion, all records associated with your account will be removed from our database.

6. Your rights

Under the New Zealand Privacy Act 2020 you have the right to access the personal information we hold about you, request corrections, and in certain circumstances request deletion. To exercise any of these rights, contact us at admin@mstep.nz.

7. Changes to this policy

We may update this policy from time to time. The date at the top of the page reflects when it was last revised. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.