Privacy Policy

This policy covers two groups: contractors — the tradespeople and businesses who hold a Knack account — and the customers of those contractors, the people a contractor quotes for.

If you are a contractor's customer, most information about you is entered into Knack by your contractor, not by you. Your contractor is usually the best first point of contact about your information, but you can also contact us directly (see “Your rights”).

If you are a contractor: your name and email, your business details (business name, trading name, contact details, GST/NZBN, and trade licence where you provide it), the content you create (customers, quotes, notes, photos, and voice recordings), and — if you enable notifications — an encrypted push subscription for your device. If you subscribe, our payment provider collects your billing details; we store only a billing identifier and your plan status, and never see or store your card number.

If you are a contractor's customer, we collect directly from you — when you accept, decline, or request a change to a quote — your name and email, a record that you agreed to the quote's terms, and the date and time. As evidence of your acceptance, we also record your IP address and browser type at the moment you accept or decline.

We also collect information about a customer indirectly, from the contractor: your name, email, phone, and physical or postal address; the work site address; and notes, voice recordings, and photographs the contractor records about the job, which may mention or depict you or your property. We collect this from the contractor so we can provide the quoting service to them.

To provide the quoting and job-management service; to generate draft quotes, transcripts, and summaries using the AI features described below; to send quotes, receipts, and job-related emails on a contractor's behalf; to take payment for subscriptions; to keep the service secure and record acceptance of quotes; and to respond to your requests.

We do not sell personal information, and we do not use it for advertising.

Knack uses third-party AI services to make quoting faster: voice notes are sent to a speech-to-text service to produce a transcript, and transcripts and job details are sent to an AI service to draft quote lines and summaries and to read supplier invoices you forward to us.

These providers process the content outside New Zealand (see “Where your information is stored”). The content may include personal information a contractor has entered about a customer — for example, a name or address spoken aloud in a voice note. Our AI providers do not use your content to train their models, and retain it only for a short period for security monitoring before deleting it.

AI output is always a draft for the contractor to review — we do not treat it as final or authoritative. We delete the original voice recording within 30 days of it being transcribed; the transcript is kept as part of the contractor's job record.

We share personal information only with the service providers we rely on to run Knack — for hosting, file storage, email, payments, authentication, AI processing, address lookup, and error monitoring. Each is bound by a data-processing agreement and may use the information only to provide its service to us. The current list is on our Subprocessors page.

We may also disclose personal information if required by law, or to protect our rights, our users, or the public.

Our primary database and file storage are hosted in Australia (Sydney). Some of our providers — in particular our email, payment, authentication, AI, and error-monitoring providers — are based in the United States, and our address-lookup provider is based in Europe. When we use them, personal information is disclosed to those providers overseas.

We take reasonable steps to ensure overseas providers protect personal information with safeguards comparable to the New Zealand Privacy Act, including through data-processing agreements. By using Knack, or by accepting a quote sent through Knack, you acknowledge that your information may be processed by these overseas providers for the purposes described here.

Data is hosted with reputable providers and is access-controlled by account, so one contractor cannot see another's data. Sensitive delivery material and quote links are encrypted or hashed at rest, and access to production systems is limited to authorised personnel. No system is perfectly secure, but we take reasonable steps to protect your information.

Original voice recordings are deleted 30 days after transcription; the transcript is kept as part of the job record.

Contractor account data — customers, quotes, notes, photos, transcripts, and PDFs — is kept for the life of the contractor's account. Quote-acceptance records, including the acceptance IP and browser, are kept as a commercial record of the accepted quote.

After an account is closed, we delete its data within 90 days, unless we must keep specific records to meet a legal obligation. We can also delete your information earlier on request.

Under the Privacy Act 2020 you may ask what we hold about you and request a copy, ask us to correct information that is wrong, and ask us to delete your information.

Signed-in Knack users can request account deletion under Settings → Account & data, or at knackapp.co.nz/delete-account. You can also contact joe@knackapp.co.nz. We verify requests, action them manually within 30 days, and confirm when the work is done. If you are a contractor's customer, you can also ask the contractor directly, as they entered and control most of your information.

If you are not satisfied with how we have handled your personal information, contact us at joe@knackapp.co.nz. You also have the right to complain to the Office of the Privacy Commissioner (www.privacy.org.nz).

We may update this policy from time to time. We will change the “last updated” date above and, for material changes, take reasonable steps to notify account holders.