Privacy policy

Last updated 9 July 2026.

Tax App (taxapp.nz) helps New Zealanders track income, expenses and tax. To do that we collect and store information for you. This policy explains what we hold, where it lives, and your rights under the New Zealand Privacy Act 2020.

What we collect

• Account details - your name, email address, and, if you sign in with Google, the basic profile Google shares (name, email, and account identifier). Passwords are encrypted in your browser before transmission and stored only as salted hashes.
• Financial records you enter - income, expenses, rental property and tenancy details, contacts, savings plans, and bank statement lines you upload for reconciliation.
• Documents you upload - invoices, tenancy agreements and similar attachments.
• Usage analytics - first-party, privacy-light events (which screens are used, timing) to improve the product. We do not use third-party advertising trackers.
• Contact form messages - the name, email and message you send us.

Where it is stored

Application data is stored in Amazon Web Services (AWS) data centres in Sydney, Australia, encrypted at rest. The API runs on Microsoft Azure. Backups run daily and are retained on a short rolling window.

Who processes it

We use a small set of service providers, each only for what their role requires:

• AWS - data storage, document storage and backups (Sydney).
• Microsoft Azure - application hosting and AI document reading for invoice extraction.
• Resend and Amazon SES - transactional email (invitations, verification, password resets).
• Google - optional Sign in with Google, and reCAPTCHA bot protection on our contact page.
• AI providers (Anthropic, Google) - when you use invoice extraction, the uploaded document is processed to pre-fill the record. Documents are not used to train third-party models under our provider agreements.

We do not sell your information, and we do not share it with advertisers.

How long we keep it

Your records stay for as long as you keep your account, because tax data is exactly the kind of thing you need years later. If you delete your account (or ask us to), your organisation's data is removed from live systems and ages out of backups on the backup retention window.

Your rights

Under the Privacy Act 2020 you can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Income and expense lists export to CSV and reports to PDF from inside the app at any time. For anything else, email support@taxapp.nz - we respond to every request.

Cookies and local storage

The app uses browser local storage to keep you signed in and remember preferences. The marketing site sets no tracking cookies. The contact page loads Google reCAPTCHA, which may set its own cookies, only after you interact with the form.

Changes

If this policy changes materially we will note it here and, for significant changes, email account holders. Concerns we cannot resolve can be raised with the Office of the Privacy Commissioner (privacy.org.nz).