Privacy policy

Hey Proofy is operated by Nexova Group Limited, registered in New Zealand. Our privacy contact is support@heyproofy.com.

• The receipts, bills and documents you add or forward to Hey Proofy, including the original file exactly as it arrived.
• The details read from them: shop, amount, tax, dates, line items, and the warranties and bills you track.
• The things you keep track of: what an item is called, its brand and model, a serial or IMEI number, a photo of it, and any notes you add.
• Your account details: name, email, country, language and household membership.
• If you choose Continue with Google, Google shares your name, email address and profile picture with us. We use them only to create your account and sign you in. We never get your Google password, and we don't read your Gmail.
• The emails you forward to your Hey Proofy address, kept as they arrived so you can always see what came in.
• The questions you put to Hey Proofy and the answers you were given, so a conversation can carry on where you left it.
• Addresses you invite into your household or invite as a mate, and any sender addresses your household has approved for receipts.
• Your plan: which one you are on, whether it is active, and the day it renews. Never your card number - that stays with Stripe.
• If you turn on phone notifications, what is needed to send them to that device.
• If you write to us through the contact form or by email, your message and the address it came from.

Only you and the household members you invite. Every record and every original file is checked against your household before it is shown or opened, and leaving a household ends that access at once. A document you mark private stays with you alone. Original files are held in private storage: they are opened through a short-lived private link, never through a public address.

You can make a link to a single receipt, for a tradesperson, a retailer or a family member. Anyone who holds that link and is signed in to a Hey Proofy account can open that one receipt read-only: they cannot change it, see the rest of your vault, or see anything else in your household. The link is a secret, so pass it on the way you would pass on a key. You can revoke it whenever you like, and it stops working the moment you do, or when the receipt itself is deleted.

When you invite somebody into your household, or invite a mate, we keep the address you typed and a short summary of the invitation: who sent it, when, and whether it has been accepted. We never keep the link's own token, only a one-way hash of it, so a lost invitation cannot be rebuilt from our records. An invitation to a household runs out after seven days, a mate's invitation after ninety, and nothing is granted unless the person who accepts it is signed in on that exact address.

A model reads the words, amounts, dates and line items off the documents you add, and hands them back as fields on your record. It reads; it does not decide. What is kept, what is shared and what is deleted all follow your own choices and settings, and nothing is ever deleted because of a reading.

When you ask something in Ask, your question goes to an AI model together with the handful of your own records that could answer it - the warranties, bills or receipts around the date you are asking about - and, if you attached a file to the question, that file too. It comes back with an answer and points at the records it used. For a question about the general law or current guidance, the model may also search the web, but what it searches with is the question, never your records. Your question and the answer are kept with your account so you can pick the conversation up again.

Recall notices are public information, published by agencies such as Product Safety New Zealand. To see whether a notice concerns you, we compare the brand, product name and model numbers on the notice with the items in your vault and the lines on your receipts. That comparison happens inside Hey Proofy. Nothing about your household is sent to the agency that published the notice, and no agency is told what you own.

Records are held securely with our cloud providers, which may be outside New Zealand.

We keep the number of providers small, and each one only sees what it needs to do its job:

Where your data is processed. These providers run on cloud infrastructure in more than one country, so your data may be processed outside New Zealand. Wherever it is held, the same protections apply: private storage, access limited to you and the household members you invite, and never any selling or sharing for advertising.

Hey Proofy keeps a few small preferences in your own browser, not on our servers: the country and language you chose, light or dark mode, whether text is enlarged, whether you are in the demo, and which prompts you have dismissed. They are there so the app opens the way you left it. We set no advertising cookies and no third-party ad trackers, and nothing is shared with anyone for advertising.

We count basic, aggregated product analytics - page views, and whether a demo was started or turned into an account - so we can see which parts of Hey Proofy work. Those counts are not tied to your receipts and are never used to profile you.

• Your records stay for as long as your account exists.
• Delete a receipt, a document or your whole account and it is removed from Hey Proofy straight away.
• A share link you revoke stops working at once, and an invitation you revoke, with the address on it, goes when the invitation does.
• Copies held in routine backups are cleared within 30 days.
• The invoice for a year you paid for is kept for 7 years, as New Zealand tax law requires. It holds your name, the plan and the amount, never your receipts.
• A forwarded email's copy at our mail provider is gone within 30 days, and our own copy of it goes when the record it belongs to goes.
• If you try the demo, its record is anonymous: no name, no email and no account behind it.
• Where we count requests to stop abuse, and in the record we keep of a closed account, we keep a one-way hash: the count can be checked, the person behind it cannot.

If a security breach affects your information and could harm you, we will tell you and the Office of the Privacy Commissioner as the law requires, and we will tell you what we know and what you can do.

Under New Zealand's Privacy Act 2020 you can ask to see the personal information we hold about you, ask us to correct it, and ask us to delete it. Email support@heyproofy.com and we will reply within 20 working days. You can also export everything and delete your account yourself in Settings. If you are not happy with our reply you can complain to the Office of the Privacy Commissioner.

Hey Proofy is for adults running a household. It is not for children, and we do not knowingly keep records for anyone under 16.

This notice carries a version and the date it took effect. We review it every fortnight, and when something meaningful changes we email every household a short summary of what changed with a link to the page, so you can read it for yourself before carrying on with Hey Proofy.

How you may use Hey Proofy is set out in our Terms of use.