Privacy

This site is operated by MARLAIO LIMITED (New Zealand company 9437276, NZBN 9429053746313), Auckland, New Zealand. This page says what we collect, why, where it is kept, and how to get it back or have it deleted.

What we collect

There are two forms on this site, and they collect different things.

The pre-sale list (on the home page) takes your email address. Below it are two optional questions — what you would track (a dog, a cat, equipment, or livestock) and how many. Both are multiple choice, both can be left blank, and the form works without them. Nothing else is asked of you.

When you submit that form, our server also records two technical things: a salted hash of your IP address (an unreadable string — we do not keep the IP address itself) and the User-Agent string your browser sends. They have one purpose: blocking automated sign-ups. They are not used for analytics or advertising, they are not shared, and they sit on the same row as your address and are deleted with it.

The contact form takes your email address, whatever you write in the message, and your name if you choose to give it — the name field is optional and the form works without it.

Both are voluntary — nothing on this site requires either. We do not run analytics, advertising or tracking on this site. The only thing stored in your browser is which language you chose.

Why we collect it

The pre-sale list exists to send you one email when the pre-sale opens.

The two optional answers are used to decide which product we build next.

The contact form exists so we can read your message and reply to it. If your message is a Privacy Act request, we use it to find your information and act on it.

We do not sell your details or give them to anyone for their own marketing.

Where it is kept, and who else can see it

Everything either form collects — your address, and anything you wrote in a message — is stored in a database we run on Supabase, hosted in Sydney, Australia. The site itself is served by Vercel.

We are also emailed the same details. That email is sent through Resend and arrives in a mailbox we run on Microsoft 365. Both therefore hold a copy of what you sent — Resend keeps the full text visible in our sending history, and the mailbox keeps it like any other email.

All four are service providers that store or process it for us. The database is in Australia; Resend states that it processes data in the United States. Either way your information is held outside New Zealand.

How long we keep it

Pre-sale list: twelve months after you sign up, or sooner if you ask us to delete it. If the pre-sale email goes out before then, we may still hold your address until the twelve months are up.

Contact messages: we delete them twelve months after you sent them, or sooner if you ask.

Those two deletions happen automatically. The emailed copy is different: it sits in our mailbox and in our Resend sending history until we delete it by hand. If you ask us to delete your information, we delete both, and that is the way to be sure every copy is gone.

The marlaio MX1 collar

If you use a marlaio MX1, the collar reports to us over the mobile network. A report can carry its position, its battery voltage, the Wi-Fi networks and mobile towers it can see, and device events such as alarms. We also keep each report exactly as the collar sent it. In the app you can draw boundaries — and for most people, one of them is around home.

We use this to show you where your dog is and has been, and to alert you when your dog has been outside a boundary for longer than you chose, or when the collar has stopped reporting.

We do not sell it, use it for advertising, or give it to anyone for their own use.

You see it in the app. So does anyone you choose to share your dog with, and you decide what they can see. We can see it too, to run the service and to help when something goes wrong.

Where your dog is, is often where you, your family or whoever is walking it is too, and a boundary around home tells us where home is. If someone else walks or looks after your dog, let them know it wears a tracker.

Reports are received by our server in Auckland (Amazon Web Services) and stored in our database in Sydney, Australia (Supabase). The collar’s mobile connection is provided by our SIM provider. Alerts reach your phone through Expo and then Apple or Google; an alert carries your dog’s name, the boundary’s name and how long — not a position.

Maps in the app come from OpenStreetMap. When you open a map, your phone downloads the map for that area straight from OpenStreetMap’s servers (and the map software from jsDelivr). OpenStreetMap therefore sees your phone’s IP address and which part of the map was shown — usually around your dog. OpenStreetMap is an independent organisation with its own privacy policy; it does not act for us.

How long: position reports and everything else the collar sends are kept for twelve months, in Auckland and in Sydney, and then deleted automatically. The Auckland server also keeps a daily backup for 30 days, so a deleted report can remain in a backup for up to 30 days longer. Boundaries you draw are kept until you delete them or your account.

Not for tracking people

Do not use MX1 to track a person. In New Zealand, tracking a person can be a criminal offence under the stalking and harassment provisions of the Crimes Act 1961.

Seeing it, correcting it, deleting it

Under the Privacy Act 2020 you can ask us for the personal information we hold about you, and ask us to correct it. You can also ask us to delete it. Ask through our contact page — we will reply within 20 working days.

If you are not happy with how we handled it

You can complain to the Office of the Privacy Commissioner: privacy.org.nz.

Changes

If this page changes we will update the date at the top.