Privacy Policy
Effective date: 17 September 2026
Last updated: 9 October 2026
This is the privacy policy for Setout, the construction calculator app for tradies in New Zealand and Australia. This document explains what data Setout collects, why, and what your rights are.
Setout is operated by Setout Holdings Limited (referred to as "we", "us", or "our" throughout). Contact: info@setoutapp.co.nz.
The short version (plain English)
- Your calculations, jobs, notes, and photos stay on your phone by default. We don't have a copy, unless you choose to sign in.
- Cloud backup is optional. If you sign in with your email to back up and sync your data, we store your jobs, photos, receipts and tools securely in the cloud so you don't lose them if your phone is lost or replaced. You can delete your account and everything in it at any time, right in the app.
- We collect basic analytics (which pages you use, roughly where in the world you're using it from) via a privacy-friendly analytics tool. No personal information.
- If you submit feedback, we get your feedback text plus the name you set during onboarding, so we can reply.
- We do not sell your data, ever. We don't run ads.
- You can delete everything at any time: clear the app's data, delete your account in Settings, or contact us.
1. Who this policy covers
This policy applies to everyone who uses Setout, through the website (www.setoutapp.co.nz), the installed PWA on your phone, or the native iOS app on TestFlight or the App Store.
2. What we collect and why
2.1 Information you give us directly
| What | When | Why |
|---|---|---|
| Your first name | During onboarding | So we can greet you personally and label your feedback |
| Your region (AU or NZ) | During onboarding | So we show the right building codes and units |
| Feedback text | When you tap the Feedback tile and submit | So we can read and respond to your suggestions and bug reports |
| Your email address | Only if you sign in to turn on cloud backup | To create and secure your account, and email you a sign-in code (no password) |
2.2 Information collected automatically
| What | How | Why |
|---|---|---|
| Anonymous usage stats (page views, calc opens) | Umami Analytics (privacy-friendly, no cookies, no personal info) | To understand which calcs are used most so we know where to focus |
| Rough location (country/region only) | From your IP address, then discarded | To distinguish NZ vs AU usage |
| Browser and device type | Via Umami | To make sure the app works on the phones people use |
2.3 Cloud backup: only if you sign in
Cloud backup is optional and off by default. The app works fully without ever signing in, and if you don't, nothing in this section applies: your data stays on your device. If you choose to sign in from Settings → Cloud backup, we store the following in the cloud so it's backed up and syncs across your devices:
| What | Why |
|---|---|
| Your email address | To identify and secure your account and email you a sign-in code |
| Your jobs, saved calculations, notes, receipts, tool records, and business details | So they're backed up and available on your other devices |
| The photos you attach to jobs and receipts | So they're backed up with the rest of your work |
This is only ever accessible to your own account (see section 8). You can permanently delete it all, and your account, at any time from Settings → Cloud backup → Delete account.
2.4 What we don't collect
- Your last name, address, or phone number.
- Your GPS location.
- Your contact list, full camera roll, microphone, or files. We only ever receive a photo you deliberately attach to a job or receipt, and only if you've signed in for cloud backup. If you haven't signed in, nothing is uploaded.
- Data about other apps on your phone.
3. Where your data lives
- On your device (always): every calculation, saved job, note, and job photo is stored in your browser's local storage or the app's local storage. If you don't sign in for cloud backup, this never leaves your device.
- On our cloud (only if you sign in): your account email and the data you back up (jobs, calculations, receipts, tool records, business details, and photos) are stored with Supabase, which hosts them on secure cloud infrastructure (Amazon Web Services). Your data is walled off to your own account by row-level security, so no other user can reach it. See Supabase's privacy policy.
- On our hosting (Vercel): the app itself, plus static images and files. Vercel's servers are in Sydney (Australia). See Vercel's privacy policy.
- With third-party services (only when the relevant feature is used):
- Supabase: stores your account and backed-up data and handles sign-in, when you use cloud backup (privacy policy)
- Resend: delivers your sign-in code email when you sign in (privacy policy)
- Umami: receives anonymous analytics events (privacy policy)
- Apple (App Store / TestFlight): receives standard app store analytics if you install via TestFlight or App Store (privacy policy)
- Google Play: receives standard Play Store analytics if you install via Google Play (privacy policy)
- RevenueCat: if you take up a Setout Pro subscription, RevenueCat handles subscription state and receipt validation on our behalf (privacy policy)
- Sentry: may receive crash and error reports from the app. These do not include your name or email and are used only to fix bugs (privacy policy)
- Google Fonts: this website loads the Inter font from Google, which means your IP address is sent to Google when a page loads (privacy policy)
We don't share data with anyone else. We don't sell any of it. We don't share it with advertisers.
4. How long we keep it
- On-device data (calculations, jobs, photos, name, region) stays until you clear the app's data or uninstall.
- Cloud backup data (your account email and anything you've synced) is kept for as long as your account exists. When you delete your account in the app, your account and everything we hold for you in the cloud are permanently deleted.
- Feedback submissions are kept in our email inbox indefinitely so we can go back and see patterns, unless you ask us to delete a specific one.
- Analytics data is aggregated and kept for up to 12 months.
- Subscription records (via RevenueCat and the app store providers) are kept for as long as required by tax and consumer law, typically at least 7 years.
5. Your rights
Under the New Zealand Privacy Act 2020 and Australian Privacy Principles, you can:
- See what personal information we have about you
- Correct anything that's wrong
- Delete your personal information. On-device data: clear your app data. Cloud account: go to Settings → Cloud backup → Delete account, which permanently erases your account and everything we store for it. We'll also delete any feedback submissions on request.
- Withdraw consent to us processing your data, usually by uninstalling the app or deleting your name in Settings
- Complain to the New Zealand Privacy Commissioner (privacy.org.nz) or the Office of the Australian Information Commissioner (oaic.gov.au) if you think we've mishandled your data
To exercise any of these rights, email us at info@setoutapp.co.nz. We'll respond within 20 working days.
6. Cookies and local storage
Setout does not use tracking cookies.
It does use your browser's local storage (and, on the native app, the app's own storage) to save your name, region, settings, calculation history, saved jobs, and photos attached to jobs. This is essential for the app to work: without it every calc would be lost when you close the tab. Nothing in local storage is sent to us unless you sign in for cloud backup (see section 2.3).
Umami analytics runs without cookies. It uses only anonymous, aggregated data.
7. Children
Setout is designed for tradies working professionally. It is not directed at children under 13 and we do not knowingly collect data from anyone under 13. If you believe a child has provided us with data, contact us and we'll delete it.
8. Security
We take reasonable steps to protect the data we hold:
- All data in transit is encrypted (HTTPS), and cloud backup data is encrypted at rest by our cloud provider
- Cloud backup data is protected by per-user row-level security, so your account's data is only ever accessible to you
- Sign-in uses a one-time emailed code. There's no password to be stolen or reused
- Access to our hosting and email is protected by two-factor authentication
- We keep the amount of personal data we collect to the absolute minimum
No system is 100% secure, but we work to make a breach as unlikely and as small in impact as possible.
9. International users
Setout is designed for New Zealand and Australia. If you use it from elsewhere, your data may be transferred to and processed in NZ or Australia. By using Setout you consent to this transfer.
10. Changes to this policy
If we change this policy in a way that affects how your data is used, we'll bump the "Last updated" date at the top and, for material changes, show a notice in the app the next time you open it.
11. Contact us
Questions, concerns, or requests about your data:
Email: info@setoutapp.co.nz
Website: www.setoutapp.co.nz