Privacy Tūmataiti
Last updated 14 September 2026
Champ holds some of the most personal information there is: what a child finds hard, what helps them, what a doctor or therapist has said. This page explains, in plain words, what we collect, why, who can see it, and what you can do about it. If anything here is unclear, email hello@champ.kiwi and a person will answer.
Who we are
Champ is run by JP de Groot in Wellington, New Zealand, trading as Champ (a limited company will take over this role and this page will be updated when it does). We are the "agency" under the Privacy Act 2020, which means we are responsible for looking after the information in Champ. Our address for privacy matters is hello@champ.kiwi.
The short version
- A child's profile can only be seen by people who have been invited to that child's team. Nobody else, including us, looks at it in the ordinary course of running Champ.
- The people who manage a profile (usually the parents) decide who joins, what each person can see, and can remove anyone at any time.
- We never sell information, never use it for advertising, and never use it to train artificial intelligence.
- You can ask for a copy of everything held about you or your child, ask for it to be corrected, or ask for a profile to be deleted.
What we collect
About people who use Champ (parents, teachers, therapists and others): your name, email address, password (stored scrambled, we cannot read it), the organisation you work for if you tell us, and a record of what you add and change in Champ.
About children: what the child's team chooses to put in the profile. That can include the child's name, date of birth, school and class, a photo, written descriptions of the child (what helps, what is hard, background), goals and progress notes, documents such as reports and plans, meeting notes, messages between team members, and, where the team turns that section on, medication details and a log of doses. Some of this is health information, which the law treats as especially sensitive, and so do we.
Technical information: the usual records a website keeps to work and stay secure, such as the time you signed in and the type of device you used. We do not use advertising or tracking cookies. Champ uses only the cookies needed to keep you signed in.
Why we collect it
For one reason: so that the people around a child can share what they know and keep it when someone leaves. Everything in Champ exists to support that child. We do not use the information for anything else, and we do not analyse it across children to build products, research or statistics without asking first.
Who can see it
Each child has a team. The people who manage the profile (normally the parents or caregivers) invite people to the team and give each person one of three levels of access: manages everything, can add and update, or can see everything. They can also limit a person to particular parts of the profile or particular documents, and switch the medication section on only for the people who need it. The Team tab shows every person with access. There are no hidden viewers.
A school or practice can have a supervisor who is able to see which children their staff work with. To open a child's profile, a supervisor must join the team, where they appear like anyone else and the parents are notified. The same rule applies to us: if we ever need to open a profile to help you with a problem, we do it by joining the team visibly, with your permission, and leave when we are done.
Where it is stored and who helps us
Champ runs on services provided by other companies, which is normal for software. They store and process information on our instructions and are not allowed to use it for their own purposes.
- Supabase stores the database and uploaded documents. Your Champ data is held in the Sydney, Australia region. Australia's privacy law is broadly comparable to New Zealand's.
- Netlify runs the website itself.
- Resend sends Champ's emails (invitations, notifications, sign-in help).
- Anthropic provides the artificial intelligence that drafts plain-language summaries of documents and, when a parent asks, a first draft of the About sections. Documents are sent to Anthropic only for that purpose, are not stored by them beyond what is needed to produce the result, and are not used to train their models under the terms of our agreement with them.
Some of these companies are based in the United States. We choose services that commit contractually to protecting information to a standard at least as strong as New Zealand law requires.
How long we keep it
A child's profile stays as long as their team wants it, because the whole point is continuity across years and schools. The people who manage the profile can delete it at any time from the About page; deletion removes the profile, its documents and its history straight away, apart from backups, which are overwritten within 30 days. Your own account can be deleted on request. If Champ ever closes, we will give every profile's managers at least 90 days' notice and a way to download everything first.
Your rights
Under the Privacy Act you can ask to see the personal information we hold about you, and about a child you are a parent or guardian of, and ask for it to be corrected. In Champ you can do most of this yourself: everything on a profile is visible to its managers and editable, and a manager can download the whole profile, documents included, from the About page at any time. For anything else, email hello@champ.kiwi. We will respond within 20 working days, and usually much sooner. If you are not happy with how we handle a request, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Children
Champ is used by adults about children. Children do not have their own accounts. Where a child is old enough to have a view about what is written about them, we encourage teams to involve them; the About section is a good place for a child's own words.
Keeping it safe
Information travels encrypted between your device and Champ, and is stored encrypted. Access rules are enforced inside the database itself, not only on the screen, so a person cannot reach a profile they are not on even by mistake. Passwords are never stored in readable form. If we ever became aware of a breach that could cause harm, we would tell the people affected and the Privacy Commissioner promptly, as the law requires, and tell you plainly what happened and what we are doing about it.
Changes to this page
When we change this policy we update the date at the top and, for anything that matters, tell people who manage a profile by email before it takes effect.