Privacy Notice

The next three provides the app described on this site. We are the data controller for the personal information described here, which means we decide what information is collected and why. This notice explains what we collect, how we use it, who we share it with, and what rights you have.

Information we collect and why

• Account details (name, email address, login credentials, and sign-in identifiers from Google or Apple if you use them) — to create and secure your account and let you sign in. Legal basis: performing our contract with you.
• Profile and business details (experience level, business type, country, region, city, approximate location if you share it, store website or Shopify domain, profile picture) — to choose missions that suit your business and location and to personalise advice. Legal basis: performing our contract with you.
• Activity in the app (missions assigned and completed, streaks, leaderboard position, number of AI chats used) — to run the features you use and enforce plan limits. Legal basis: performing our contract with you.
• Messages and questions you send to Mia, including voice you choose to speak, which is converted to text in your browser — to generate a response. Legal basis: performing our contract with you.
• Technical information (device and browser type, IP address, error and usage logs) — to keep the service secure, prevent fraud and abuse, and fix problems. Legal basis: our legitimate interests in a secure, working service.
• Subscription status linked to your account — to give you the features on your plan. Legal basis: performing our contract with you.
• Support messages you send us — to answer you. Legal basis: performing our contract with you.
• Marketing emails, only if you opt in — to tell you about the product. Legal basis: your consent, which you can withdraw at any time.

We do not collect or store your card details. Payment information is collected and processed by Paddle, our Merchant of Record.

Who we share information with

• Service providers who help us run the app, including hosting, database and authentication providers, AI model providers who process your prompts to generate a response, and error monitoring and support tools. They act on our instructions.
• Paddle, as Merchant of Record for the sale of our subscriptions, subscription management, payments, tax compliance and invoicing.
• Google Maps, if you use the location feature, to turn your coordinates into a region.
• Professional advisers such as our lawyers and accountants, where needed.
• Authorities or other parties where we are required to by law, or to protect our rights or someone's safety.

We do not sell your personal information.

International transfers

Some of our providers are based outside New Zealand, including in Australia, the United States and the European Union. Where information is transferred overseas we rely on appropriate safeguards, such as standard contractual clauses or the provider being in a country with comparable privacy protections.

How long we keep it

We keep your account and profile information while your account is open. If you delete your account we delete or anonymise your personal information within 90 days, except where we need to keep records for legal, tax or accounting reasons, or to resolve a dispute. Technical logs are kept for a shorter period, usually up to 12 months.

Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit, access controls, and database rules that limit each account to its own data. No service can be completely secure, so please use a strong, unique password.

Cookies and similar technologies

We use essential cookies and browser storage to keep you signed in and to remember your preferences — the app will not work without these. If we add analytics or marketing cookies we will ask for your consent first and you will be able to change your choice at any time.

Your rights

Under the New Zealand Privacy Act you can ask for a copy of the personal information we hold about you and ask us to correct it. If you are in the UK or the EEA you also have the right to erasure, restriction, data portability, to object to processing based on our legitimate interests, and to withdraw consent where we rely on it. We respond within one month.

To exercise any of these rights, contact The next three through the support option in the app. If you are not satisfied with our response, you can complain to the New Zealand Office of the Privacy Commissioner, or to your local supervisory authority if you are in the UK or EEA.

Changes to this notice

We will update this notice as the service changes and will tell you in the app if a change is significant. See also our Terms & Conditions and Refund Policy.