Privacy Policy

1. Who We Are

TaxIt is operated by Aziz Holdings Limited, a company registered in New Zealand. This privacy policy explains how we collect, use, store, and protect your personal information when you use the TaxIt mobile application and website (taxit.nz).

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, IRD number (optional), business type, GST registration status.
• Financial Data: Income records, expense records (including receipt images), vehicle information, mileage logs.
• Location Data: GPS data during active mileage tracking sessions only. Location is not tracked in the background.
• Device Information: Device type, operating system, app version for troubleshooting and compatibility.
• Usage Data: App feature usage patterns to improve the service.

3. How We Use Your Information

• To provide tax tracking, reporting, and calculation services.
• To generate tax summary reports (PDF/CSV) for IRD filing.
• To facilitate accountant review of your tax report (included with subscription).
• To send notifications (GST threshold alerts, tax reminders, income reminders).
• To process subscription payments via RevenueCat.
• To improve the app and fix issues.
• To communicate with you about your account or the service.

4. Data Storage & Security

Your data is stored on secure servers. Sensitive credentials (authentication tokens) are stored using encrypted device storage (Flutter Secure Storage). We use HTTPS for all data transmission. We retain financial records in accordance with the IRD's 7-year document retention requirement.

5. Third-Party Services

We use the following third-party services:

• RevenueCat: Subscription and payment management.
• Receipt OCR: To parse receipt images for auto-filling expense details.
• Google Maps / Location Services: For GPS-based mileage tracking.

We do not sell your personal information to third parties. We do not share your financial data with third parties except as necessary to provide the service (e.g., accountant review) or as required by law.

6. Your Rights Under the NZ Privacy Act 2020

Under the New Zealand Privacy Act 2020, you have the right to:

• Access your personal information held by us.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for data processing.
• Complain to the Office of the Privacy Commissioner if you believe your privacy has been breached.

7. Data Retention

We retain your financial records for 7 years in line with IRD requirements, unless you request earlier deletion. Account data is deleted within 30 days of an account deletion request. Anonymised usage data may be retained for analytics.

8. Children's Privacy

TaxIt is not intended for use by children under 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via the app or email. Continued use of TaxIt after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy inquiries, data access requests, or complaints:

Aziz Holdings Limited
Email: support@taxit.nz
Dunedin, New Zealand