Your household data stays yours.

Who is responsible

KiwiSlice is built and operated by SHMAKE in Christchurch, New Zealand. We are the agency responsible for any personal information described here under the Privacy Act 2020. Privacy questions go to the contact page.

What stays on your device

Your budget, accounts, bills, subscriptions, vehicles, property, possessions, family details, debts and investments are held in your browser's own storage, on the device you are using. They are not transmitted to a KiwiSlice server and we have no way to read them.

This is the default and it requires no account. The practical trade-off is covered in the terms: data that only exists on your device can be lost with that device, so keep exports.

What we actually collect

Anonymous usage counts, only if you turn them on. This is off by default. If you opt in, KiwiSlice sends at most one message a day containing three things: a one-way hashed installation identifier, the app version, and the date. It contains no financial data, no personal details and nothing about what you did in the app. The hash cannot be reversed to identify you or your browser. You can turn it off again in Settings at any time.

Ordinary web server information. Like any website, requests to our site and API reach a hosting provider, which processes standard technical information such as IP address, browser type and the time of the request in order to deliver the page and keep the service secure. We do not use it to build a profile of you and we do not combine it with the usage counts above.

Subscription details, if you buy one. If you take a paid plan we hold a licence record so the app knows your plan is active. Payment itself is processed by Stripe; card numbers never reach us.

Visits to the KiwiSlice website. The marketing site at kiwislice.shmake.nz counts page views using Umami, which we run ourselves on our own infrastructure at analytics.shmake.nz. It sets no cookies, does not follow you between websites, and stores no data in your browser. It records the page you viewed, the referring site, your country, browser and device type, and whether you clicked one of the links through to the app. Your IP address is used to work those out and is then discarded — it is never stored, and there is no identifier that would let us recognise you on a later visit. This runs on the website only. It is not part of the app, and it never sees anything you enter there.

We do not use advertising trackers, we do not sell data, and we do not use your household information to train AI models.

Optional cloud backup and documents

If you choose to turn on cloud backup, your KiwiSlice data is written into storage you control — your own Google Drive account. It goes from your device to that provider directly: it does not pass through our servers and we never receive a copy. Documents you upload are stored the same way.

Those providers hold the files under their own terms and privacy policies. You can revoke our access from your account with them at any time, and the files remain yours afterwards.

Connecting Google Drive

If you choose to sync with Google Drive, KiwiSlice requests the drive.file permission. This limits KiwiSlice to files it creates itself. It does not grant access to anything else in your Google Drive, and KiwiSlice cannot read documents it did not create.

KiwiSlice creates a folder named KiwiSlice in your Drive and writes a single data file into it. That file holds the budget information you entered. It is stored in your Google account, not ours, and remains subject to Google's own terms and privacy policy.

The access tokens that allow this are held in your browser's local storage on your own device. They are not transmitted to or stored by KiwiSlice. The one exception is the moment of connecting: the authorisation code Google returns is exchanged for tokens by a KiwiSlice server function, because Google requires a client secret that cannot safely live in a web page. That exchange passes the tokens straight back to your browser and retains nothing.

KiwiSlice does not read, transfer or use Google user data for advertising, for building profiles, or to train AI or machine-learning models. You can disconnect at any time from Settings, which revokes the token, and you can remove KiwiSlice's access entirely from your Google account's security settings.

Who else is involved

We keep the list of third parties as short as the product allows:

Stripe processes subscription payments. Vercel hosts the website and its API endpoints. Google is involved only if you personally connect Drive for backup or documents.

Website analytics is deliberately not on that list. We host Umami ourselves rather than sending visit data to Google Analytics or anything like it, so nobody outside SHMAKE receives it.

Some of these operate overseas, which means the limited information described above may be processed outside New Zealand. We use established providers that are subject to comparable privacy safeguards, as the Privacy Act requires.

How long things are kept

Website analytics is kept as aggregate counts and is not tied to a person, so there is nothing in it to delete. Data on your device stays until you delete it or clear your browser's storage for this site. Cloud backups stay until you delete them from your own provider. Licence records are kept while your subscription is active and for as long afterwards as we need them for tax and accounting. Anonymous usage counts are aggregate figures and are not tied to a person.

Deleting your data

You can remove locally stored data from within the app or through your browser's site-data settings. Cloud files are deleted from the provider you connected. If we hold a licence record for you and you want it removed, ask and we will, subject to any records we are legally required to keep.

Your rights

Under the Privacy Act 2020 you can ask what personal information we hold about you, ask us to correct it, and complain if you think we have mishandled it. Given how little we hold, the answer to the first question is usually short.

Raise it with us first through the contact page. If you are not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Children

KiwiSlice is built for adults managing a household. It is not directed at children, and we do not knowingly collect personal information from them.

Changes to this policy

If how we handle data changes, this page changes with it and the date at the top moves. Where a change affects what leaves your device, we will say so in the app rather than relying on you to check back.

Questions

If anything here is unclear or you want more detail about a particular feature, get in touch.