Privacy Policy

Last Updated: July 19, 2026

Introduction

This Privacy Policy is issued by Aespi Limited ("Aespi", "we", "us", or "our"), a New Zealand company, and explains how we collect, use, store, and protect your personal information when you use the HankIQ Platform, including www.HankIQ.com, any subdomain of that website, the HankIQ mobile application, and related progressive web applications (collectively, the "Platform"). We are an agency for the purposes of the New Zealand Privacy Act 2020.

Capitalized terms not defined here have the meanings given in our Terms and Conditions, available at www.HankIQ.com/terms.

Our Privacy-First Approach

The Platform is built with privacy as a core design principle:

Your User Content (photographs, documents, receipts, maintenance records, inventory data, and AI-generated content) is stored locally on your device.
Where you enable backup, encrypted backup files are stored in cloud storage that you designate and control — not on our servers. We do not persistently store your User Content.
Your stored User Content is protected using encryption designed so that it can only be read through the Platform in combination with security credentials held partly by you and partly by us. Neither we nor any third party can read your encrypted backup files independently.
We collect only the personal information that is operationally necessary.

Information We Collect

We collect personal information from you, including your:

Name — to identify you and personalize your experience
Contact information — to communicate with you about the Platform
Location — to provide location-based features and services available only in certain regions
Computer or network information — technical information necessary for service delivery and security
Interactions with us — to improve our services and provide support
Billing and purchase information — to process transactions and provide paid subscriptions

We do not collect or hold your User Content except transiently, as described under "AI Features and Third-Party Processing" below.

How We Use Your Information

We use your personal information to:

Deliver and maintain the Platform
Process transactions and manage your Account, including subscription billing and renewals
Provide customer support
Operate services available only in certain regions, such as our Loyalty Rewards Program
Ensure the security and proper functioning of the Platform
Comply with our legal obligations

Data Storage and Architecture

Local Storage (Primary)

Your User Content is stored locally on your device using:

Progressive Web App (PWA) technology — allowing app-like functionality
IndexedDB — a browser-based database that keeps your information on your device
Local encryption — protecting your data on your device

Optional Encrypted Backup to Your Cloud Storage

You may optionally back up your User Content as encrypted backup files to cloud storage that you designate and control (such as your own cloud storage account). This backup:

Is optional and occurs only when you enable it
Is stored with your chosen cloud storage provider, under your account and their terms — not on our servers
Is encrypted, and can only be read through the Platform using security credentials held by each you and us
Can be disabled at any time from your settings

Because we do not hold your backup files and cannot read them independently, we cannot restore your User Content if it is lost, deleted, or corrupted. You are responsible for maintaining your device, your cloud storage account, and your credentials.

AI Features and Third-Party Processing

Where you choose to use the Platform's AI Features (such as HankAI), the User Content you submit for processing is transmitted transiently through our systems and to third-party AI service providers in order to generate AI outputs. This processing:

Occurs only when you use an AI Feature; use of AI Features is optional
Is transient — content is processed to generate the output and is not persistently stored by us
Is not used by us or, under our agreements, by our AI service providers to train or improve AI models

A current list of our AI and other third party service providers is available on request at info@HankIQ.com

Information Sharing

We limit data sharing to what is necessary to operate the Platform. Besides our staff, we share personal information with:

Operational service providers — infrastructure, hosting, payment processing, and communications providers necessary for the Platform to function
AI service providers — as described above, only when you use AI Features

We do not sell, rent, or trade your personal information. We do not share your personal information with third parties for marketing purposes.

Third-Party Service Provider Network

The Platform may make available offers or discounts from a network of independent third-party service providers. We do not share your personal information with these providers. If you choose to engage a provider, any information you give them is governed by their privacy policy, not ours.

Staff Access

Only staff members who need access to your personal information to perform their duties or support you have such access.

Your Choices and Rights

Optional Information

Providing some information is optional. If you choose not to provide required information, we may be unable to provide certain services, particularly services available only in certain regions such as the Loyalty Rewards Program.

Data Portability and Deletion

Export: You can export your User Content at any time through the Platform's export facility, in unencrypted, machine-readable format.
Local deletion: You can delete locally stored data directly from your device by clearing the Platform's storage.
Backup deletion: Your backup files are in your own cloud storage; you can delete them there at any time.
Personal information held by us: You may request deletion of the personal information we hold (such as account and contact details), subject to the retention obligations described below.

Your Rights Under the Privacy Act 2020

You have the right to:

Access — request a copy of the personal information we hold about you
Correction — request correction of information you believe is inaccurate

To exercise these rights, contact us at info@HankIQ.com. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (www.privacy.org.nz). If you are located in a jurisdiction that grants you additional rights (such as deletion or portability rights), we will honour those rights as required by the applicable law.

Data Retention

User Content (local): Stored on your device until you delete it. We do not hold it.
User Content (backups): Stored in your designated cloud storage under your control. We do not hold it.
Security credentials: Following termination or cancellation of a paid subscription, the security credentials we maintain for your Account are permanently and irreversibly deleted thirty (30) days after the end of the Access Period described in our Terms and Conditions. For trial accounts that expire without conversion, credentials are permanently deleted seven (7) days after expiration. Once deleted, your encrypted backup files become permanently unreadable by anyone, including us.
Account and billing records: Retained for seven (7) years after your Account is closed, as required by New Zealand tax and companies legislation.
Support and operational records: Retained only as long as needed for legitimate business purposes and applicable legal requirements.

Data Security

We protect the personal information we hold by:

Encrypting personal information in transit and at rest
Implementing industry-standard security measures against unauthorized access
Restricting staff access on a need-to-know basis
Regularly reviewing and updating our security practices
Using secure, encrypted connections (HTTPS) for all communications

Our device-first architecture provides additional protection: because your User Content resides on your device and in your own cloud storage rather than on our servers, exposure of your content in the event of a breach of our systems is structurally minimized.

Children's Privacy

The Platform is not directed at persons under 18 years of age, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it as quickly as practicable.

International Data Transfers

We operate from New Zealand. Our operational service providers and AI service providers may store or process personal information outside New Zealand. Where personal information is disclosed to providers outside New Zealand, we take reasonable steps to ensure it is subject to safeguards comparable to those under the New Zealand Privacy Act 2020, including through contractual protections.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will provide at least thirty (30) days' notice of material changes that directly impact your rights or use of the Platform, via email or account notification, and will post the updated policy with a revised "Last Updated" date. Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy.

Cookies

We use only cookies and similar technologies necessary for:

Maintaining your session and login state
Storing your preferences
Essential security features

We do not use third-party tracking cookies or advertising cookies. You can manage cookies through your browser settings; disabling essential cookies may prevent the Platform from functioning.

Contact Us

Aespi Limited Email: info@HankIQ.com Website: www.HankIQ.com

We will respond to your inquiry within a reasonable timeframe, and to access and correction requests within the timeframes required by the Privacy Act 2020.

Summary

Your User Content stays on your device and in cloud storage you control — we do not store it
We cannot independently read your stored User Content or your encrypted backup files
AI Features are optional; content you submit is processed transiently and never used to train AI models
We collect only what is necessary to operate the Platform and bill you
Account and billing records are kept 7 years as required by New Zealand law; security credentials are destroyed on the published schedule after your subscription ends
We do not sell your personal information or share it for marketing purposes