Privacy Policy
1. Who we are
[Company name] makes SparkyCrew, an app for New Zealand electricians. This policy explains what personal information we hold, why, and your rights under the Privacy Act 2020.
- Without an account, everything stays on your device. We never receive it.
- With an account, we store your profile and your business's records so they're backed up and shared with your team.
- We don't sell your information, show ads, or track you across other apps or websites.
- Your information is stored in Australia, with a provider that protects it to a comparable standard.
- You can see, correct or delete your information at any time.
2. What we collect and why
We only collect what the app needs to work. All of it comes from you or your team, typed into the app.
- Email address: to sign you in with a code, and to contact you about your account
- Name, mobile, registration class, EWRB or trainee number, licence expiry: shown on certificates you sign, to your team, and for licence reminders
- Signature: added to certificates when you sign them
- Business details: shown on the business's PDFs
- Customer names, addresses, phone numbers and emails on jobs: so the business can manage its jobs and certificates
- Photos, notes, parts, test readings and certificates: the business's job records
- Supervisor names, registration numbers and signatures entered at sign-off: shown on apprentice certificates
- Team activity (who created, assigned, issued or deleted what, and when): so owners and managers can see what happened, and for security
- Sign-in records and basic technical logs kept by our providers: to keep accounts secure and fix problems
We don't collect your location, contacts, payment card details (app stores handle payment), or anything for advertising.
Customer information: when a business enters its customers' details, the business decides what to collect and is responsible for it. We hold it on the business's behalf and only use it to run the app.
3. Who can see it
Your team: everyone in your business can see the team list, including names, contact details and registration numbers. What else each person sees depends on the role the owner gives them. Owners and people with the "see staff activity" permission can see what each member did and when.
Certificates and PDFs you share contain your name, registration number and signature. Once you send them, they are outside the app.
We use these providers to run the app. They can only use your information to provide their service to us:
- Supabase: database, sign-in and photo storage, in Sydney, Australia
- Resend: sends sign-in code emails, in the United States
- Apple and Google: app distribution and subscription payments, under their own privacy policies
We have chosen providers bound by privacy and security obligations comparable to New Zealand's.
We may share information if required by law, or to prevent a serious threat to someone's life or safety. We don't sell or rent your information to anyone.
4. Keeping it safe
Data is encrypted in transit and at rest by our providers. Database rules check every request, so each person can only reach what their role allows. If a privacy breach is likely to cause serious harm, we will tell the people affected and the Privacy Commissioner as soon as practicable.
5. How long we keep it
- Your account and profile: until you delete your account.
- A business's records: while the business has an account. If a subscription ends, for [Retention period], then deleted.
- After deletion: removed from the live database straight away, and from backups within 30 days.
- When you leave a business: your account and profile are yours to keep. Records you created stay with the business.
Electrical certificates may need to be kept for a set period under the Electricity (Safety) Regulations. Keeping copies of issued certificates is the business's responsibility.
6. Your rights
You can ask to see the personal information we hold about you, and ask us to correct it. Most of it you can view and edit yourself in Settings. You can delete your account in Settings at any time.
If you are a customer of a business that uses the app, contact that business first, as it controls your information.
7. Contact and complaints
Our privacy officer is [Privacy officer name], at privacy@sparkycrew.app. If you're not happy with how we handle a concern, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.