SafeCheck is operated as a beta / trial product. This Privacy Policy explains what information we collect, how we use it, and your rights under the Privacy Act 2020 (New Zealand).
SafeCheck is a NZ-based product built by a safety professional and ex-tradie who understands firsthand the challenges small businesses face in meeting their legal obligations under the Health and Safety at Work Act 2015. Our goal is to make it straightforward for small businesses to identify critical risks, keep their people safe, and maintain the records they need.
For privacy enquiries, contact us at [email protected].
On the Starter tier, all assessment records, incident records, photos, settings, and your access key are stored only on your device using your browser's local storage. We do not receive, transmit, or store any of this information on our servers. We have no access to your records.
The only information that leaves your device is:
If you request a free trial via our website, we collect your name, company name, email address, trade, and any notes you provide. This information is used solely to issue your access key and communicate with you about SafeCheck.
Under the Business and Premium tiers, SafeCheck will store assessment records and incident records server-side in Supabase (Sydney region) to enable multi-device access and the team dashboard. This data is linked to your company account and is accessible only by users with your company's authorised keys. Data collected includes: site location, job/reference number, assessor name, company name, tasks assessed, hazard and control status, incident type, date, location, description, actions taken, and contributing factors. Photos are stored separately in Supabase Storage. Consent is obtained at the point of subscription sign-up.
Licence key data is stored in Supabase (supabase.com), hosted in the ap-southeast-2 region (Sydney, Australia). Supabase is SOC 2 Type II certified. Data is encrypted at rest and in transit. You can view Supabase's privacy policy at supabase.com/privacy.
Trial request form submissions are processed by Netlify Forms (netlify.com), hosted in the United States. You can view Netlify's privacy policy at netlify.com/privacy.
Under the Privacy Act 2020 you have the right to:
To exercise any of these rights, email [email protected]. We will respond within 20 working days.
Licence key records are retained for the duration of the licence and for a reasonable period thereafter for audit and support purposes. Trial request data is retained for up to 12 months. You may request deletion at any time by emailing us.
We use Row Level Security (RLS) in Supabase to ensure your key data is only accessible via a server-side function — it cannot be read directly via our public API key. All connections use HTTPS. We take reasonable steps to protect personal information from loss, misuse, and unauthorised access.
The SafeCheck app uses browser local storage (not cookies) to store your key and settings on your device. Our marketing website does not use tracking cookies or advertising cookies.
SafeCheck is designed for workplace use by adults. We do not knowingly collect personal information from anyone under 18.
We may update this policy as the product develops. The current version is always available at safecheck.co.nz/privacy.html. Material changes will be notified to active users by email where possible.
Questions or complaints about privacy: [email protected]
Privacy Commissioner (NZ): privacy.org.nz