Privacy policy

We collect the information you give us to operate the service: name, email, mobile, service address, access notes, and the payment method you authorise. From your Kiki we collect the ID-verification, right-to-work and criminal record check results, plus the bank, IRD and KiwiSaver details needed for payouts and payroll.

From the service itself we collect job timing (check-in, check-out), timestamped photos taken at your address, and the messages exchanged through the platform.

We use this information to match you with a Kiki, process payments, send service notifications, resolve disputes, comply with NZ tax and employment law, and improve the service. We do not sell your personal information.

We use trusted processors to run the service: Supabase (database and storage, AWS-hosted), Stripe (payments — full card numbers never touch Kiki²), Twilio (SMS), Resend (email), Google Maps (suburb geocoding), and Sentry (error monitoring). Each is bound by their own privacy and security commitments.

We share with your assigned Kiki only the information she needs to do the job — the address, access notes, and your first name — and never until she accepts the booking.

Timestamped photos are stored in a private cloud bucket and shown only to you, your Kiki, and Kiki² admin (for dispute resolution). We retain them for 30 days after the service and then delete them. You can request earlier deletion by emailing us.

Personal information for our workers — including ID checks, vetting outcomes, bank and IRD details — is stored encrypted at rest and accessible only to admin. We share what we’re legally required to share with IRD, ACC and KiwiSaver providers for payroll and tax obligations.

We use cookies only for what’s necessary to keep you signed in. We do not use third-party advertising cookies or cross-site tracking.

Under the Privacy Act 2020 you can request access to the personal information we hold about you, ask us to correct it, or ask us to delete it (where we’re not required to keep it for tax or legal reasons). Email hello@kiki2.app to make a request.

Personal data is encrypted in transit (TLS) and at rest. Row-level security is enforced at the database for every table so that one client can’t see another’s data, and one Kiki can’t see another’s. Photos are served only through short-lived signed URLs.

Kiki² is not intended for use by anyone under 18. We do not knowingly collect personal information from children.

We may update this policy from time to time. The current version and effective date are always shown here.

Privacy questions or requests: hello@kiki2.app. If you’re unhappy with how we’ve handled your personal information you can also contact the Office of the Privacy Commissioner (privacy.org.nz).