Privacy Policy
Knockoff is built for New Zealand tradies. We collect the minimum data needed to run the app and we never sell it. This policy explains what data Knockoff collects, why, where it lives, and how to delete it.
Who we are
Knockoff is operated as a sole-trader product by the developer of knockoff.app. For privacy questions or data requests, email support@knockoff.app.
What we collect
Data you enter:
- Your name, trade title, phone number, email, IRD/GST number (Profile + Settings)
- Client names, addresses, phone numbers, email addresses (Clients)
- Job descriptions, site addresses, hourly rates, hours worked (Timer + Timesheet)
- Invoice line items, totals, statuses, due dates (Money)
- Quote line items, materials, margins (Quotes)
- Photos you capture from job sites (Job photos)
Data the app reads from your device:
- Approximate or precise location — used for the local weather forecast and (optional) GPS clock-on. You can deny this and the app falls back to Auckland weather. Location is requested only when you tap "Use my location" in the Weather tab.
- Camera — used to attach photos to job records. Photos are stored locally on your device and (if you're signed in) mirrored to your private Supabase storage. We never upload photos to anyone else.
- Anonymous device ID — Supabase generates an anonymous user identifier so your data syncs across launches. It is not linked to your email, phone number, or any third-party ID.
What we don't collect
- No analytics SDKs, no tracking pixels, no ad identifiers.
- No crash reporting that includes your data (we use console logs only).
- No background location tracking.
- No microphone access (the "voice" feature uses on-device speech recognition only and never sends audio to a server).
Where your data lives
Your data is stored in two places:
- On your device — most data lives in your phone's local storage and stays there even when offline.
- Supabase (Sydney region, Australia) — encrypted backup so your data survives device loss and syncs across devices. Supabase is our backend provider. Supabase privacy policy.
Third-party services
- Open-Meteo — public weather forecast API. We send your latitude and longitude (when you allow location); we don't send your name or any other data. Open-Meteo terms.
- Anthropic (optional) — when you enable AI features in Settings (off by default), we send the material descriptions or screenshots you choose to process. We never send client names, addresses, phone numbers, or email addresses. Anthropic privacy policy.
Your client data
If you store contact details for your clients in Knockoff, you are the data controller for that information under the New Zealand Privacy Act 2020. You're responsible for telling your clients what you do with their data. Knockoff acts as a data processor — we hold it for you, we don't use it for anything else, and we delete it when you delete your account.
Data deletion
You can delete every byte of your data at any time:
- In-app: Settings → Account → Delete account. This deletes your Supabase rows, your auth user, and clears local storage. Cannot be undone.
- By email: mail support@knockoff.app with subject "Delete my account" — we'll action it within 7 days.
Your rights under the NZ Privacy Act 2020
You have the right to ask what we hold about you, to correct it, and to have it deleted. Email support@knockoff.app and we'll respond within 20 working days.
Children
Knockoff is a business tool for working tradespeople. It's not designed for or directed at anyone under 16.
Changes to this policy
If we change anything material, we'll bump the "Last updated" date at the top of this page and surface a notice in-app. Older versions of this policy stay reachable on request.
Contact
Questions? support@knockoff.app