Privacy Policy

1. Who We Are

KiwiTrack is a work-hour tracking application designed for workers in New Zealand, especially those on Working Holiday Visas. The service is operated by the KiwiTrack team. If you have any questions about this policy, contact us at support@kiwitrack.app.

2. Data We Collect

We collect the following data when you use KiwiTrack:

• Account data: your name and email address, provided at sign-up via Google or email.
• Work data: employer names, hourly rates, shift start/end times, break durations, and pay estimates that you enter manually.
• Subscription data: your Stripe customer ID and subscription status (active, canceled, etc.). We do not store card numbers — Stripe handles all payment data.
• Technical data: browser type, device type, and usage logs collected automatically by our infrastructure providers.

3. How We Use Your Data

• To provide and operate the KiwiTrack service.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (payment receipts, subscription confirmations).
• To improve the application based on aggregated, anonymised usage patterns.
• To comply with legal obligations.

We do not sell your data to third parties. We do not use your work data for advertising.

4. Third-Party Services

We use the following trusted sub-processors:

5. Data Retention

We retain your account and work data for as long as your account is active. If you delete your account, your profile and all associated work sessions and employer data are permanently deleted within 30 days. Stripe may retain billing records for up to 7 years as required by financial regulations.

6. Your Rights

Under the New Zealand Privacy Act 2020 and applicable data protection laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your data (right to erasure).
• Export a copy of your data in a portable format.
• Withdraw consent at any time (this may affect your ability to use the service).

To exercise any of these rights, email us at support@kiwitrack.app and we will respond within 30 days.

7. Security

All data is encrypted in transit (HTTPS/TLS) and at rest. Access to your data is restricted by Row Level Security policies — no user can access another user's data. Payment data is handled exclusively by Stripe and never touches our servers.

8. Cookies

We use only functional cookies necessary to maintain your session (Supabase authentication tokens). We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of KiwiTrack after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact: support@kiwitrack.app