Privacy Policy

I Kept It (ikeptit.app) is a warranty tracking service for New Zealand households. We are the agency responsible for the personal information described here under the New Zealand Privacy Act 2020.

I Kept It is in early access. The sections below describing receipts and warranty registration apply once you have an account and start adding products.

If you join the waitlist: your email address, and the date you joined. Nothing else.

If you create an account: you sign in with Google on the web, and we receive your name, email address and profile picture from Google. In the iOS app you can also sign in with Apple, and we receive your email address, which may be a private relay address Apple creates for you. We never see or store your Google or Apple password.

Your household profile: the country you are in and the type of home you live in, which you give us during onboarding.

Your products and receipts: the receipt images or PDFs you upload, and the details we read from them: product name, brand, model, serial number, retailer, purchase date and purchase price. If a receipt shows the customer’s name, email or phone, we read those too, so the warranty can be registered in the name the shop has on its record. You see and can change them before anything is saved. On an iPhone with Apple Intelligence, the app first tries to read the receipt on the phone; when it can, the file comes to us only to be stored. When it can’t, and on the web, we read it on our servers, using Anthropic.

Receipts a shop gives you: when you scan a code at a shop that uses I Kept It and choose to keep the receipt, we save the sale the shop recorded (the items, prices, date and the shop’s name) to your account. The shop never learns who scanned it, and nothing about you reaches the shop.

If you run a shop: your business name, NZBN if you give it, the sales you issue as receipts, your quick-sale keys, and the names of your counter devices. A counter device signs in with a one-time code and holds no one’s personal account. If you ask for early access we also keep your name, email, business name and type, town and number of counters, so we can help you set up.

If you allow analytics: which pages you visit, roughly where you came from, your device and browser type, an approximate location, and a few actions such as starting sign-up or adding an item (never what the item is). This is collected by Google Analytics only after you choose “Allow analytics”. See section 09.

If you connect an app: which app you connected (for example ChatGPT), when, and when it last refreshed its access. We don’t record what it asked.

We use your product and receipt information to calculate warranty expiry dates and your rights under the Consumer Guarantees Act, to register your warranties with manufacturers and retailers on your behalf, and to remind you before cover runs out.

We use your email address to send you those reminders, to send you a copy of each registration we make for you, to pass on any reply a manufacturer or shop sends about it, and, if you joined the waitlist, to tell you once that you can sign up.

If you allow analytics, we use it to see which pages people find useful and where signing up gets stuck. Nothing more.

When we register a warranty, the manufacturer or shop gets the product details and the name and email you confirmed for it (and a phone number, if you gave one). They need these to match the registration to their record of the sale.

We do not sell your personal information to data brokers, and we do not use it for advertising.

We may in future offer insurance-related features, such as valuing your contents cover from the inventory you have built here. If we do, we will share your information with an insurer only where you have asked us to use that feature, and we will tell you what is being shared before it is sent. We will not pass your details to an insurer simply because you hold an account.

Registering a warranty means sending a registration to the company that made or sold the product. When you add a product, we send an email on your behalf to that manufacturer or retailer containing: your name, your email address, and the product’s name, brand, model, serial number, retailer, purchase date and purchase price.

We copy you on every one of these emails so you always see exactly what was sent and to whom. Once we send it, that information is held by the manufacturer or retailer under their own privacy policy, not ours, and we cannot recall it.

Where a manufacturer only accepts registrations through a web form, we may complete that form on your behalf using automated browsing, submitting the same details.

If you do not want your details sent to a third party, do not add that product to I Kept It.

We use these providers to run the service. Each one may process your information on our behalf:

• Vercelhosting (Sydney, Australia), storage of uploaded receipt files (United States), and anonymous page-view counts that use no cookies
• Neonthe database holding your account, products and warranties (Sydney, Australia)
• Googlesign-in, and Google Analytics only if you allow it (United States)
• AppleSign in with Apple, in the iOS app only
• Resendsending and receiving the emails described above
• Anthropicthe AI that reads receipts your phone doesn’t read itself, and looks up brand registration details
• Browserbaseautomated form submission where a manufacturer has no registration email

Some of these providers store or process information outside New Zealand, including in the United States and Asia-Pacific.

Receipt files you upload are held in private storage. They are not reachable from a public link, and they are not served from any shared cache.

The only way to open a receipt is through your signed-in account, and we check the receipt belongs to you before returning it. Nobody else can retrieve your receipts, including anyone who obtains a stored file URL.

We keep your account and product information for as long as your account is open, because warranty and Consumer Guarantees Act cover can run for many years and the record is the point of the service.

Waitlist emails are kept until we have told you that you can sign up, or until you ask us to remove you. Early-access details from shops are kept while we help you set up, and are deleted with your account.

We also keep a shared, non-personal record of which manufacturer registration addresses work and which bounce. That record contains company contact details only, never your information, and is shared across all users so registrations get more reliable over time.

Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Email hello@ikeptit.app and we will respond within 20 working days.

You can delete your account and everything in it yourself, at any time: on the web from your account page, or in the app under You. It happens straight away. If you signed in with Apple, we also revoke I Kept It’s access to your Apple ID. We cannot retrieve information already sent to a manufacturer or retailer, and receipts a shop issued stay on that shop’s record of its own sales.

If you think we have mishandled your information you can complain to us first, and then to the Office of the Privacy Commissioner at privacy.org.nz.

We set one essential cookie to keep you signed in. That one needs no permission.

Everything else is your choice. The first time you visit we ask whether we can use Google Analytics to count visits. If you say no, or ignore the question, Google’s code never loads and nothing is sent. If you say yes, Google sets its analytics cookies (named _ga) and receives the information listed in section 02.

We have turned off Google’s advertising features: no ad cookies, no ad personalisation and no Google signals. We never send Google your name, email, receipts or anything you store, and we strip private links and codes out of page addresses before they are sent. Google keeps this analytics data for 2 months.

You can change your mind at any time with “Cookie settings” at the bottom of any page. Withdrawing deletes the analytics cookies from your browser.

If we change how we handle your information we will update this page and change the date at the top. If the change is significant we will email you.

You can connect an AI assistant such as ChatGPT or Claude to your account. When you do, you are asking us to share information with that app, and we only do it after you approve it on our consent page.

What it can see: your items (names, brands, models and serial numbers), where and when you bought them and what you paid, warranty and consumer-law coverage, and registration status. It can also ask us to draft a claim letter.

What it never gets: your name, email address or phone number, or your receipt images. It can’t add or change items, and it can’t make us contact manufacturers or shops.

The app is run by another company. What it receives is handled under that company’s own privacy policy, and may be stored outside New Zealand, where it may not be protected the way New Zealand law protects it. You can disconnect an app at any time from your account page. That stops any further sharing, but it can’t recall what the app already received.