PainPal Privacy Statement

Effective date: 30 October 2025
Contact: info@chasnz.org

1. Who we are

PainPal is owned and operated by Construction Health and Safety New Zealand (CHASNZ) and will in future be transferred to Betterworx Ventures Ltd, a CHASNZ-controlled company.
PainPal is designed to help workers self-manage pain, discomfort, and injury in a non-medical and evidence-informed way.

2. What this statement covers

This Privacy Statement explains how we collect, use, store, and protect your personal information when you use PainPal (at painpal.ai) or any related services.

3. What information we collect

We collect:

• Registration details – name, email, workplace, and basic demographic information you provide when signing up.
• Chat data – the messages and responses exchanged with the PainPal chatbot.
• Usage data – information such as IP address, browser type, and access times for security and analytics.
• Optional self-reported information – such as pain type, body location, or level of discomfort you choose to share.

4. How we use your information

We use this information to:

• Deliver the PainPal service and personalise your experience.
• Improve our content and the way the AI responds.
• Produce aggregated company and industry insights via the PainPal dashboard. These reports contain no identifiable personal data.
• Support research and development in workplace health and safety (where data is anonymised).

We do not use your data to provide medical advice or to make medical decisions.

5. Who can access your data

Your individual chat history is private to you.

Only nominated super-users may access chat data for safety, quality assurance, or administrative reasons.

Super-user access is strictly limited, monitored, and controlled.

Aggregated and anonymised data may be shared with your employer, research partners, or sector bodies, but no individual can be identified.

6. How we protect your data

PainPal is hosted at painpal.ai.
PainPal is hosted on Amazon Web Services (AWS) infrastructure located in the US East (N. Virginia) region.
All data is stored securely using encryption and industry-standard safeguards. Access controls, audit logs, and privacy reviews are in place.

7. Cross-border data

As part of providing the service, information may be processed or stored outside New Zealand or Australia. We ensure that any overseas provider meets comparable privacy and security standards.

8. Your rights

Under the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988, you have the right to:

• Access and correct your personal information.
• Ask for deletion of your data (where legally and technically possible).
• Complain if you believe your privacy has been breached.

Requests can be sent to info@chasnz.org.

9. AI ethics and transparency

PainPal uses AI to provide educational, evidence-based information.

The AI does not diagnose or prescribe treatment.

It has been developed following recognised standards for ethical and responsible AI, including transparency, fairness, privacy, and data security.

Conversations may be reviewed in anonymised form to improve system accuracy and safety.

10. Changes to this statement

We may update this Privacy Statement from time to time. The latest version will always be available at painpal.ai/privacy.