Privacy policy
Draft for launch. Last updated 21 October 2026.
This is the policy Kepuro will launch with. It is being reviewed by a lawyer before the app opens, and the final version will be published here. If anything changes, we'll email members.
Who we are
Kepuro Limited (“Kepuro”, “we”) is a New Zealand company based in Tauranga. We operate the kepuro.co.nz website and the Kepuro app. We are the agency responsible for personal information under the Privacy Act 2020. Contact: hello@kepuro.co.nz.
What we collect, and why
Waitlist and contact forms. Your email address, what kind of user you are, and the area you gave us. Used only to tell you about Kepuro and to reply to you. Deleted if you ask, and in any case within 12 months of launch if you haven't joined.
Tradie members. Your name, business name, NZBN, trade, licence number where your trade has one, public liability insurance details, email, service areas, and the jobs you log (address, date, trade, whether paid). Used to verify you, to show your public listing and free ad, to run the checks and safety tools, and to count paid jobs. Your insurance certificate and identity details are never shown to anyone.
Customer members. Your name, suburb, email, and the paid jobs tradies have logged with you and that you have confirmed. Used to show the record you choose to share, your home logbook, and your member level. You control what is shared with tradies in your settings.
Site notes, check-ins and scam reports. Site notes are about a property, not a person, and are visible to verified tradies with a job at that address and to the property's member homeowner. Lone-worker check-ins (time, address, location at alert) are kept for 90 days and are visible only to you and your alert contact. Scam reports are shown by region without your name.
Public records. When a tradie runs a check we query public registers (LINZ property records, the NZ Companies Office, the NZBN register). We show whether a name matches the registered owner; we do not display or store the owner's details. Company information is displayed and not stored beyond caching for performance. Search queries are not kept.
Technical information. Standard server logs (IP address, browser, pages visited) kept for 30 days for security. Advertising is by area and audience only; we do not build profiles of individuals and we do not sell personal information.
What we never do
- Record anything negative about a customer. Kepuro only counts paid jobs; there is no mechanism for a bad mark.
- Hold a record for a person who has not joined.
- Show a member's phone number, email or exact address to anyone they have not shared it with.
- Send text messages.
- Sell or rent personal information, or share it with advertisers.
Who we share with
Service providers who host and email for us (in New Zealand and Australia, under contract). Your alert contact, when a check-in alert is triggered. Public authorities where the law requires it. No one else.
Your rights
You can ask to see the personal information we hold about you, ask us to correct it, change what you share, download your home logbook, and close your account, at any time, from your settings or by emailing hello@kepuro.co.nz. We respond within 20 working days as the Privacy Act requires, usually much faster. If you are unhappy with our response you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Security and retention
Data is encrypted in transit and at rest, access is limited to staff who need it, and we keep information only as long as it is needed for the purposes above. Closed accounts are deleted within 30 days except where we must keep records by law.
Changes
We will email members about any material change to this policy before it takes effect.