Privacy policy

Operated by Kirsty Walker. Last updated 11 October 2026.

ChangeSpot helps users find family facilities in Wellington. It uses an automatically generated Firebase guest account to keep a user's contributions separate from those of other users. It does not require a name, email address or password for normal use.

Information used

• Guest user identifier and account role, used to protect contributions and moderator access.
• Details you submit: facility names, addresses, amenities, condition ratings, availability checks and notes.
• Photos you choose to send. Photos are optional and are available to you and authorised moderators. Avoid uploading identifiable children, other people or private information.
• Facility problem reports and moderation records, used to review incorrect or unsuitable information.
• Your device location, when you allow it, to show nearby facilities and distances. In the current iPhone implementation your location is processed on the device and is not attached to verification submissions. Directions are opened in a maps provider, which handles its own data under its privacy policy.
• Device-local favourites, stored on your device.
• Operational and SDK diagnostics, including device/OS/app versions, and service request metadata such as function name and caller IP address. Firebase uses its SDK user agent for aggregate platform/version analysis; it is not linked to a user or device identifier.

Services and sharing

Firebase Authentication, Cloud Firestore, Cloud Storage and Cloud Functions provide the account, contribution and review services. Cloud Functions run in Sydney. That does not mean every Firebase service, operational log or Google support operation is confined to Sydney. Google processes service information under its own applicable terms and privacy disclosures.

Approved facility details and verification summaries may appear in the directory. Private guest IDs are not intentionally exposed in public verification summaries. ChangeSpot does not provide public chat or direct messaging.

Choices and retention

Location and photo permissions are optional and can be changed in device Settings. Contributions remain available for review until removed through an available contribution control or the account deletion process.

In ChangeSpot Settings, choose Delete my account and data and confirm. The server accepts a durable request and removes the guest account, photos, contributions, reports and associated authored audit records. Published suggestions authored by that account are removed. Factual facility records maintained by other people may remain, with the deleted moderator's attribution removed. Local favourites are cleared after the deletion request is accepted.

A minimal guest-ID security record remains for seven days after cleanup to stop old sign-in tokens being reused, then is removed by a scheduled job. Provider-managed backups and operational logs may have separate retention periods; confirm those settings before stating a specific maximum retention period.

Deleting a guest account cannot be undone. Reopening ChangeSpot creates a new guest account and does not restore the old contributions or staff privileges.

Contact and reports

For support, privacy questions or unsuitable-content reports, contact admin@changespot.co.nz. Users can also report inaccurate facility details or unsuitable content through the facility reporting control.