Privacy Policy

Last updated: 1 September 2026

This policy explains how APPOS Limited (“we”, “us”, “our”) handles information in the TakohaNZ app. TakohaNZ is an in-person donation kiosk used by registered New Zealand charities.

In short

TakohaNZ has no user accounts and does not ask donors for their name, email, or phone number.
Donations are processed by a certified external payment terminal, in person. The app never sees, stores, or transmits your card details.
We collect only what a donation terminal needs to operate: the terminal’s location and a device/terminal identifier. We do not use advertising or tracking, and we do not sell personal information.

Information we collect

Location. When a donation is made, the app records the terminal’s location (precise and/or approximate) to attribute the donation to a collection site. As a fallback, approximate location may be derived from the terminal’s IP address using a third-party service, GeoJS (get.geojs.io), which receives the IP address for that lookup. No background location is collected.
Device / terminal identifier. A device identifier (including a generated install ID and, on Android, the device ID) is used to pair the app to a terminal and to identify that terminal to our servers.
Donation transaction metadata. Amount, date/time, and terminal/site — used to produce receipts and reconcile donations with the charity. This does not include card numbers or cardholder data.

We do not collect your name, email, phone, address, contacts, photos, health data, browsing history, or card/payment details.

How the camera is used

The app uses the camera only to scan pairing and payment QR codes. Camera images are processed on the device in the moment and are not stored or transmitted.

Payments

Donations are taken through a certified third-party EFTPOS/contactless payment terminal (for example Sunmi, NexxTap, or Skyzer) and processed by the relevant payment provider and acquiring bank. Their handling of card data is governed by their own terms and PCI-DSS obligations. TakohaNZ only sends the donation amount to the terminal and displays the result.

How we use information

To operate the donation kiosk and process an in-person donation via the terminal.
To produce and display receipts and confirmation QR codes.
To attribute donations to the correct charity and collection site.
To keep the app secure and working (for example pairing and connectivity).

We do not sell personal information, and we do not use it for advertising or cross-app tracking.

Sharing

Payment providers / terminal vendors — to process the in-person card transaction.
GeoJS (get.geojs.io) — receives the terminal IP for approximate-location fallback, when enabled.
Our hosting / backend — donation metadata, terminal ID, and location are stored on our servers to operate the service.
Charities we serve — attributed donation records for reconciliation.
Legal — where required by New Zealand law.

Retention

We keep donation metadata for as long as needed to operate the service and meet the charity’s financial and legal record-keeping obligations, then delete or anonymise it.

Your choices & requests

Because there are no user accounts, requests are handled at the terminal/operator level. To ask about, or request deletion of, records associated with a terminal, contact us (below) or see our data-deletion page.

Children

TakohaNZ is not directed at children and does not knowingly collect data from children.

Security

Data in transit is encrypted with HTTPS/TLS, and the app pins server certificates.

Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.

Contact

APPOS Limited — TakohaNZ
Email: support@myposmate.com
Website: https://takohanz.org/