Privacy Policy
Tutai — Privacy Policy
Effective date: 15 July 2026 Version: 2.0 Data controller: Tutai Limited (“Tutai”, “we”, “us”, “our”) Contact: office@tutai.app · Data erasure requests: delete@tutai.app
This Privacy Policy is now a separate document. It was previously combined with our Terms & Conditions (dated 23 September 2025). It explains what personal information we collect, how we use and share it, and the rights you have. It should be read together with the Tutai Terms & Conditions.
1. Who we are
1.1 Tutai Limited, a company incorporated in New Zealand, operates the Tutai mobile application, website, and related services (the “Service”) — a free, real-time travel safety and discovery companion.
1.2 For the purposes of data-protection laws such as the EU/UK General Data Protection Regulation (GDPR), Tutai Limited is the data controller of the personal information described in this Policy. For users in New Zealand, we handle personal information in accordance with the Privacy Act 2020; for users in California, we address the CCPA/CPRA in section 11.
2. Scope
2.1 This Policy applies to personal information we collect through the Service. It does not apply to third-party websites, apps, or services that we link to or integrate with, which have their own privacy policies (see section 15).
3. Information we collect
We collect the following categories of personal information.
3.1 Information you give us:
• Account and contact information — such as your name or display name, email address, and password.
• Profile information — such as gender, about, base country, countries visited, travel interests, preferences, and any details you add to your profile.
• User-generated content — the alerts, community tips, comments, ratings, pictures, verifications, and other content you submit (see section 6).
• Travel and booking information — such as trips, destinations, and details relating to bookings you make through or in connection with the Service.
• Identity information — where a feature requires it, information you provide to verify your identity.
• Communications — the content of messages, feedback, and support requests you send us.
3.2 Information we collect automatically:
• Technical and device information — such as device type, operating system, app version, language, device identifiers, and IP address.
• Usage information — how you interact with the Service, features used, pages/screens viewed, and actions taken.
• Location information — see section 5. With your permission, this can include background location (location collected even when the app is not actively open) to provide real-time, location-based safety alerts.
• Cookies and similar technologies — including SDK identifiers used by our analytics and crash-reporting tools (see section 7).
3.3 Information from third parties:
• Information from our analytics and crash-reporting providers, and from partners (such as booking, rental, tours, insurance, or eSIM partners) where you use their services through Tutai.
4. How we use your information and our legal bases
We use personal information to:
4.1 Provide and operate the Service — create and manage your account, display the map and Content, deliver location-based alerts and tips, and enable safety features. Legal basis: performance of a contract with you; our legitimate interests in operating the Service.
4.2 Enable community features — publish and display your User Content and enable interaction with other users. Legal basis: performance of a contract; legitimate interests; and, where required, your consent.
4.3 Improve and secure the Service — understand usage, diagnose crashes and bugs, develop new features, and protect against fraud, abuse, and security threats. Legal basis: legitimate interests; legal obligation.
4.4 Communicate with you — respond to your requests and send service and safety messages. Where we send marketing emails or push notifications, we do so on the basis of your consentwhere the law requires it, or otherwise our legitimate interests, and you can opt out at any time (see section 10). Legal basis: performance of a contract (service messages); consent and/or legitimate interests (marketing).
4.5 Provide location-based safety features — process location data to show relevant alerts and hazards near you. Legal basis: your consent (device permission); legitimate interests.
4.6 Comply with law and protect people — meet legal obligations, respond to lawful requests, enforce our Terms, and protect the rights, safety, and property of users, the public, and Tutai. Legal basis: legal obligation; legitimate interests; and, in a life-or-death situation, protection of vital interests.
4.7 Moderation — review and moderate User Content and conduct as described in our Terms. Legal basis: legitimate interests; legal obligation.
5. Location data
5.1 Location is central to the Service. With your permission, we collect and process your device location to show alerts, hazards, tips, and places near you.
5.2 Background location. If you grant the relevant permission, the app may access your location even when it is not open, so we can provide timely, location-based safety alerts. You can change or withdraw this permission at any time in your device settings, though some features may not work fully without it.
5.3 You can disable location access entirely through your device settings. Turning it off may limit or disable location-based features.
5.4 Location data, and the alerts or tips you engage with, could in some cases indirectly reveal sensitive information about you (for example, relating to health, religion, or beliefs). We do not seek to infer such information, and where the law treats this as special-category data we rely on your consent to process it. Please avoid including sensitive personal details in User Content.
6. User-generated content is public
6.1 Alerts, tips, comments, and similar contributions you submit are, by their nature, visible to other users and may be public. Any personal information you include in that content (about yourself or others) may therefore be seen by others.
6.2 Please do not include sensitive personal information in User Content, and only include information about other people where you are permitted to do so. Under our Terms, User Content is assigned or licensed to Tutai; this does not remove your data-protection rights over personal information about you, which you can exercise as set out in section 11.
7. Cookies, analytics, and tracking technologies
7.1 We use cookies, SDKs, and similar technologies — including third-party analytics and crash-reporting tools (for example, tools of the kind provided by Google Analytics, Firebase, PostHog or similar providers) — to understand how the Service is used, measure performance, diagnose crashes, and improve the Service.
7.2 These tools may collect device identifiers, usage data, and technical information. Where required by law, we ask for your consent before using non-essential cookies or tracking technologies, and you can manage your preferences through your device or in-app settings.
8. How we share your information
We share personal information only as described below.
8.1 Service providers (processors). With third parties who process data on our behalf and under contract — such as hosting/cloud infrastructure, analytics and crash-reporting providers, email and notification providers, and customer-support tools.
8.2 Affiliate, booking, and eSIM partners. Where you choose to use a partner service (such as a rental, insurance, booking, or eSIM offer) through Tutai, we may share the information necessary to complete or facilitate that transaction with the relevant partner, who will handle it under their own privacy policy.
8.3 Other users and the public. Your User Content and public profile information are shared with other users and may be visible publicly, as described in section 6.
8.4 Legal, safety, and protection. With authorities, emergency services, or others where we believe in good faith it is necessary to comply with a legal obligation or lawful request, enforce our Terms, prevent fraud or abuse, or protect the rights, safety, or property of any person.
8.5 Business transfers. In connection with a merger, acquisition, financing, reorganisation, or sale of assets, in which case personal information may be transferred as part of that transaction, subject to this Policy.
8.6 Aggregated or anonymised data. We may create and share aggregated or anonymised data (which does not identify you) for any purpose, including improving safety information and reporting.
9. International data transfers
9.1 We are based in New Zealand and use service providers that may be located in other countries. As a result, your personal information may be transferred to, stored in, and processed in countries other than your own, including countries that may not provide the same level of data protection as your home country.
9.2 Where we transfer personal information out of the EEA/UK, we rely on an appropriate safeguard — such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or a recognised adequacy decision. New Zealand benefits from an EU adequacy decision.
10. Marketing communications and push notifications
10.1 We may send you service-related messages (for example, about your account, security, or important safety information) — these are not marketing and you cannot opt out of essential service messages while you have an account.
10.2 We may send marketing emails and push notifications where permitted. You can opt outat any time — by emailing us at office@tutai.app, adjusting notification settings on your device, or changing your in-app preferences. Where required by law, we only send marketing with your consent.
11. Your rights
Your rights depend on where you live. We will honour the rights that apply to you and will not discriminate against you for exercising them.
11.1 If you are in the EEA or UK (GDPR), you have the right to: access your personal information; have it corrected; have it erased; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local data protection supervisory authority.
11.2 If you are in New Zealand (Privacy Act 2020), you have the right to access and request correction of your personal information, and to complain to the Office of the Privacy Commissioner.
11.3 If you are in California (CCPA/CPRA), you have the right to: know what personal information we collect, use, and disclose; access and delete it; correct it; and opt out of the “sale” or “sharing” of personal information. You may make a request without facing discrimination.
11.4 How to exercise your rights. Contact us at office@tutai.app, or for erasure/deletion requests use delete@tutai.app. We may need to verify your identity before acting. We will respond within the timeframe required by the law that applies to you.
12. Data retention
12.1 We keep personal information only for as long as we need it for the purposes described in this Policy, or as required by law.
12.2 Account information is generally kept while your account is active and for a reasonable period afterwards (typically up to 24 months after closure, unless a longer period is required). User Content that has been assigned or licensed to us may be retained after your account is closed, in line with our Terms. Some data may be retained longer where necessary to meet legal, tax, security, or dispute-resolution requirements (for example, financial records for the period required by tax law), after which it is deleted or anonymised.
13. Data security
13.1 We take reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, disclosure, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
13.2 If a personal data breach occurs that affects you, we will notify you and the relevant regulator where and as required by applicable law (for example, within the timeframes set by the GDPR or the New Zealand Privacy Act 2020).
14. Children’s privacy
14.1 The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18 (or under the minimum age required by local law). If you believe a child has provided us with personal information, contact us at office@tutai.app and we will take steps to delete it.
15. Third-party links and services
15.1 The Service may link to or integrate with third-party websites and services. We are not responsible for their privacy practices. Please review their privacy policies before providing them with your information.
16. Changes to this Policy
16.1 We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you — for example, through the app or by updating the effective date above. Your continued use of the Service after the changes take effect means you accept the updated Policy.
17. Contact us
For any privacy question or to exercise your rights:
Tutai Limited - registered in New Zealand.
General and privacy enquiries: office@tutai.app
Data erasure/deletion requests: settings within the app, or delete@tutai.app
If you are in the EEA or UK and have concerns we cannot resolve, you also have the right to complain to your local data protection authority.
Privacy Policy
ETutai — Privacy Policy
Effective date: 15 July 2026 Version: 2.0 Data controller: Tutai Limited (“Tutai”, “we”, “us”, “our”) Contact: office@tutai.app · Data erasure requests: delete@tutai.app
This Privacy Policy is now a separate document. It was previously combined with our Terms & Conditions (dated 23 September 2025). It explains what personal information we collect, how we use and share it, and the rights you have. It should be read together with the Tutai Terms & Conditions.
1. Who we are
1.1 Tutai Limited, a company incorporated in New Zealand, operates the Tutai mobile application, website, and related services (the “Service”) — a free, real-time travel safety and discovery companion.
1.2 For the purposes of data-protection laws such as the EU/UK General Data Protection Regulation (GDPR), Tutai Limited is the data controller of the personal information described in this Policy. For users in New Zealand, we handle personal information in accordance with the Privacy Act 2020; for users in California, we address the CCPA/CPRA in section 11.
2. Scope
2.1 This Policy applies to personal information we collect through the Service. It does not apply to third-party websites, apps, or services that we link to or integrate with, which have their own privacy policies (see section 15).
3. Information we collect
We collect the following categories of personal information.
3.1 Information you give us:
• Account and contact information — such as your name or display name, email address, and password.
• Profile information — such as gender, about, base country, countries visited, travel interests, preferences, and any details you add to your profile.
• User-generated content — the alerts, community tips, comments, ratings, pictures, verifications, and other content you submit (see section 6).
• Travel and booking information — such as trips, destinations, and details relating to bookings you make through or in connection with the Service.
• Identity information — where a feature requires it, information you provide to verify your identity.
• Communications — the content of messages, feedback, and support requests you send us.
3.2 Information we collect automatically:
• Technical and device information — such as device type, operating system, app version, language, device identifiers, and IP address.
• Usage information — how you interact with the Service, features used, pages/screens viewed, and actions taken.
• Location information — see section 5. With your permission, this can include background location (location collected even when the app is not actively open) to provide real-time, location-based safety alerts.
• Cookies and similar technologies — including SDK identifiers used by our analytics and crash-reporting tools (see section 7).
3.3 Information from third parties:
• Information from our analytics and crash-reporting providers, and from partners (such as booking, rental, tours, insurance, or eSIM partners) where you use their services through Tutai.
4. How we use your information and our legal bases
We use personal information to:
4.1 Provide and operate the Service — create and manage your account, display the map and Content, deliver location-based alerts and tips, and enable safety features. Legal basis: performance of a contract with you; our legitimate interests in operating the Service.
4.2 Enable community features — publish and display your User Content and enable interaction with other users. Legal basis: performance of a contract; legitimate interests; and, where required, your consent.
4.3 Improve and secure the Service — understand usage, diagnose crashes and bugs, develop new features, and protect against fraud, abuse, and security threats. Legal basis: legitimate interests; legal obligation.
4.4 Communicate with you — respond to your requests and send service and safety messages. Where we send marketing emails or push notifications, we do so on the basis of your consentwhere the law requires it, or otherwise our legitimate interests, and you can opt out at any time (see section 10). Legal basis: performance of a contract (service messages); consent and/or legitimate interests (marketing).
4.5 Provide location-based safety features — process location data to show relevant alerts and hazards near you. Legal basis: your consent (device permission); legitimate interests.
4.6 Comply with law and protect people — meet legal obligations, respond to lawful requests, enforce our Terms, and protect the rights, safety, and property of users, the public, and Tutai. Legal basis: legal obligation; legitimate interests; and, in a life-or-death situation, protection of vital interests.
4.7 Moderation — review and moderate User Content and conduct as described in our Terms. Legal basis: legitimate interests; legal obligation.
5. Location data
5.1 Location is central to the Service. With your permission, we collect and process your device location to show alerts, hazards, tips, and places near you.
5.2 Background location. If you grant the relevant permission, the app may access your location even when it is not open, so we can provide timely, location-based safety alerts. You can change or withdraw this permission at any time in your device settings, though some features may not work fully without it.
5.3 You can disable location access entirely through your device settings. Turning it off may limit or disable location-based features.
5.4 Location data, and the alerts or tips you engage with, could in some cases indirectly reveal sensitive information about you (for example, relating to health, religion, or beliefs). We do not seek to infer such information, and where the law treats this as special-category data we rely on your consent to process it. Please avoid including sensitive personal details in User Content.
6. User-generated content is public
6.1 Alerts, tips, comments, and similar contributions you submit are, by their nature, visible to other users and may be public. Any personal information you include in that content (about yourself or others) may therefore be seen by others.
6.2 Please do not include sensitive personal information in User Content, and only include information about other people where you are permitted to do so. Under our Terms, User Content is assigned or licensed to Tutai; this does not remove your data-protection rights over personal information about you, which you can exercise as set out in section 11.
7. Cookies, analytics, and tracking technologies
7.1 We use cookies, SDKs, and similar technologies — including third-party analytics and crash-reporting tools (for example, tools of the kind provided by Google Analytics, Firebase, PostHog or similar providers) — to understand how the Service is used, measure performance, diagnose crashes, and improve the Service.
7.2 These tools may collect device identifiers, usage data, and technical information. Where required by law, we ask for your consent before using non-essential cookies or tracking technologies, and you can manage your preferences through your device or in-app settings.
8. How we share your information
We share personal information only as described below.
8.1 Service providers (processors). With third parties who process data on our behalf and under contract — such as hosting/cloud infrastructure, analytics and crash-reporting providers, email and notification providers, and customer-support tools.
8.2 Affiliate, booking, and eSIM partners. Where you choose to use a partner service (such as a rental, insurance, booking, or eSIM offer) through Tutai, we may share the information necessary to complete or facilitate that transaction with the relevant partner, who will handle it under their own privacy policy.
8.3 Other users and the public. Your User Content and public profile information are shared with other users and may be visible publicly, as described in section 6.
8.4 Legal, safety, and protection. With authorities, emergency services, or others where we believe in good faith it is necessary to comply with a legal obligation or lawful request, enforce our Terms, prevent fraud or abuse, or protect the rights, safety, or property of any person.
8.5 Business transfers. In connection with a merger, acquisition, financing, reorganisation, or sale of assets, in which case personal information may be transferred as part of that transaction, subject to this Policy.
8.6 Aggregated or anonymised data. We may create and share aggregated or anonymised data (which does not identify you) for any purpose, including improving safety information and reporting.
9. International data transfers
9.1 We are based in New Zealand and use service providers that may be located in other countries. As a result, your personal information may be transferred to, stored in, and processed in countries other than your own, including countries that may not provide the same level of data protection as your home country.
9.2 Where we transfer personal information out of the EEA/UK, we rely on an appropriate safeguard — such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or a recognised adequacy decision. New Zealand benefits from an EU adequacy decision.
10. Marketing communications and push notifications
10.1 We may send you service-related messages (for example, about your account, security, or important safety information) — these are not marketing and you cannot opt out of essential service messages while you have an account.
10.2 We may send marketing emails and push notifications where permitted. You can opt outat any time — by emailing us at office@tutai.app, adjusting notification settings on your device, or changing your in-app preferences. Where required by law, we only send marketing with your consent.
11. Your rights
Your rights depend on where you live. We will honour the rights that apply to you and will not discriminate against you for exercising them.
11.1 If you are in the EEA or UK (GDPR), you have the right to: access your personal information; have it corrected; have it erased; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local data protection supervisory authority.
11.2 If you are in New Zealand (Privacy Act 2020), you have the right to access and request correction of your personal information, and to complain to the Office of the Privacy Commissioner.
11.3 If you are in California (CCPA/CPRA), you have the right to: know what personal information we collect, use, and disclose; access and delete it; correct it; and opt out of the “sale” or “sharing” of personal information. You may make a request without facing discrimination.
11.4 How to exercise your rights. Contact us at office@tutai.app, or for erasure/deletion requests use delete@tutai.app. We may need to verify your identity before acting. We will respond within the timeframe required by the law that applies to you.
12. Data retention
12.1 We keep personal information only for as long as we need it for the purposes described in this Policy, or as required by law.
12.2 Account information is generally kept while your account is active and for a reasonable period afterwards (typically up to 24 months after closure, unless a longer period is required). User Content that has been assigned or licensed to us may be retained after your account is closed, in line with our Terms. Some data may be retained longer where necessary to meet legal, tax, security, or dispute-resolution requirements (for example, financial records for the period required by tax law), after which it is deleted or anonymised.
13. Data security
13.1 We take reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, disclosure, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
13.2 If a personal data breach occurs that affects you, we will notify you and the relevant regulator where and as required by applicable law (for example, within the timeframes set by the GDPR or the New Zealand Privacy Act 2020).
14. Children’s privacy
14.1 The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18 (or under the minimum age required by local law). If you believe a child has provided us with personal information, contact us at office@tutai.app and we will take steps to delete it.
15. Third-party links and services
15.1 The Service may link to or integrate with third-party websites and services. We are not responsible for their privacy practices. Please review their privacy policies before providing them with your information.
16. Changes to this Policy
16.1 We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you — for example, through the app or by updating the effective date above. Your continued use of the Service after the changes take effect means you accept the updated Policy.
17. Contact us
For any privacy question or to exercise your rights:
Tutai Limited - registered in New Zealand.
General and privacy enquiries: office@tutai.app
Data erasure/deletion requests: settings within the app, or delete@tutai.app
If you are in the EEA or UK and have concerns we cannot resolve, you also have the right to complain to your local data protection authority.