Legal · Indigenova Platform

Privacy Policy

Last updated: June 2026 · Version 1.0

Who we are

Indigenova is operated by Mānuka Performance Ltd, a company incorporated in New Zealand ("the Company", "we", "us", or "our"). We operate the Indigenova mobile application and website at indigenova.com.

Contact us at: tristan@indigenova.com

What data we collect

When you use the Indigenova diagnostic, we collect:

Account data

Diagnostic response data

Technical data

We do not collect payment information. All payments are processed by Gumroad and subject to Gumroad's privacy policy.

How we use your data

We use your data to:

We never sell your personal data. We never share your individual data with third parties for advertising purposes.

Consent and your choices

We collect three separate consents on the diagnostic consent screen:

Diagnostic data consent (required)
Your answers are stored to generate your result. Required to use the diagnostic.

Anonymised research consent (optional)
Your responses may be included in aggregated, anonymised research about indigenous IP commercialisation globally. No individual can be identified in published outputs. Revenue from research licensing is partially returned to contributing communities through the Indigenova data dividend model.

Platform updates consent (optional)
Receive updates about new frameworks, workshop dates, and platform developments. You can unsubscribe at any time.

You can withdraw any optional consent at any time by emailing tristan@indigenova.com. Withdrawal requests are honoured within 30 days.

Data sovereignty and indigenous governance

All data collected through the Indigenova platform is governed by the Kete Rāraunga Kaiārahi framework — a tikanga-grounded data governance framework developed by Mānuka Performance Ltd and the Bioeconomy Science Institute.

This framework ensures:

We apply a minimum cohort threshold of 5 contributors — no aggregate statistic involving fewer than 5 people is ever published.

Data storage and security

Your data is stored securely using Supabase hosted infrastructure. Email addresses are encrypted at rest. Personal identifying information is never included in aggregate research outputs.

We use industry-standard security practices including row-level security, encrypted connections, and access controls on all personal data.

Third-party services

We use the following third-party services to operate the platform:

Kit (ConvertKit)
Email delivery · kit.com/privacy
Supabase
Database and backend · supabase.com/privacy
Gumroad
Payment processing · gumroad.com/privacy
Cloudflare
Website hosting and DNS · cloudflare.com/privacypolicy
Zapier
Automation workflows · zapier.com/privacy

Your rights

You have the right to:

To exercise any of these rights, contact tristan@indigenova.com. We will respond within 30 days.

Children

The Indigenova platform is intended for business and commercial use by adults. We do not knowingly collect data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately.

Changes to this policy

We may update this privacy policy from time to time. The consent version number displayed in the app reflects the current policy version. Material changes will be communicated via email to existing subscribers.

Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact

Mānuka Performance Ltd
Whakatāne, Aotearoa New Zealand
tristan@indigenova.com
indigenova.com

Governed by the Kete Rāraunga Kaiārahi framework. From the land. Into the world.