Privacy Policy

1. Who this policy applies to

This policy applies to the KevlerOne platform, also called K1, including the K1 website and K1 mobile applications for iOS and Android.

K1 is operated for Kevler Group organisations and other participating organisations. The organisation that provides your K1 account controls which K1 information you may access and is responsible for how its staff use that information. Kevler Group administers the K1 platform. Smartstar Technology provides technical publishing and support services for the mobile applications.

2. Information K1 may collect

Account and authentication information

• Your name, work email address, phone number, organisation, role, permissions and profile photo.
• Authentication records, passkey credentials, device registration details, login time, IP address, approximate country derived from the IP address, and security events.
• K1 does not receive or store your Face ID, fingerprint or device passcode. Apple or Android performs the biometric check on your device and K1 receives only the authentication result.

Business and construction information

• Information entered into K1 about developments, lots, clients, sales leads, tasks, schedules, pricing, contracts, facilities, notifications, SEED records and other work activities.
• Notes, messages, contact history, documents, photos and other attachments uploaded or created by authorised users.
• Some of this information may relate to employees, contractors, customers, prospective customers, property owners, purchasers or other people involved in a project.

Camera, photos, files and property scans

• Site Log and KevlerCare photos, selected library photos, documents, capture times, user-added room names, tags, notes and floor-plan marker positions.
• Measured room and property scan data, floor plans and 3D model files when the Property Scan feature is used on a supported device.
• If you turn on the optional save-to-Photos setting, the device also saves a copy to your personal photo library. K1 does not otherwise add captured photos to your library.

Location and voice features

• If you grant location permission, the app may attach the available location, accuracy, altitude and capture time to a Site Log photo. Location is collected only while you use the relevant capture feature.
• If you use voice dictation, your device or platform speech-recognition service processes the audio and K1 stores the resulting text that you choose to include. K1 does not intentionally keep a separate voice recording for Site Log dictation.

Device and diagnostic information

• Push-notification tokens, notification preferences, app version and device platform needed to deliver and manage K1 notifications.
• Crash, hang, performance and technical diagnostic information used to find faults, improve reliability and protect the service.

3. How we collect information

We collect information directly from you when you sign in, update settings, enter work records, communicate, take or select photos, add files, dictate notes or use a property scan. We also receive information from your organisation, other authorised K1 users and systems connected to K1. Technical information is created automatically when you sign in, request data, receive notifications or when the app reports a fault.

Providing account information is required to use K1. Camera, photo-library, microphone, speech-recognition and precise-location access are optional device permissions, although declining a permission means the related feature will not work.

4. How we use information

• Provide, personalise and administer K1 and enforce organisation and role permissions.
• Manage construction, sales, client, task, document, site, warranty, compliance and operational workflows.
• Associate photos, notes, locations, documents and scans with the correct site, lot, room or work record.
• Send requested service messages, security alerts and push notifications.
• Authenticate users, prevent unauthorised access, investigate suspicious activity and maintain audit records.
• Provide support, diagnose failures, monitor performance and improve K1.
• Meet legal, safety, accounting, contractual, warranty and dispute-resolution obligations.

5. Who can access or receive information

Information is available only to authorised users according to their organisation, role and permissions. It may be shared with relevant Kevler Group businesses, participating organisations, employees, contractors, professional advisers, customers or project participants where this is necessary for the work record or service.

We use trusted service providers to host and support K1, including Google Cloud services for secure cloud storage and infrastructure, Google Firebase for push notifications and crash diagnostics, Apple and Google platform services for app distribution and device features, and Microsoft services for authorised business communications and integrations. These providers may process information in New Zealand or overseas. We require providers to use information only for the services they supply and to protect it to a standard consistent with this policy and applicable law.

We may also disclose information where required by law, to protect a person's safety, to investigate unlawful activity, or as part of a lawful business reorganisation. We do not sell personal information and do not share it for third-party advertising or cross-app tracking.

6. Storage and security

K1 uses access controls, organisation separation, secure connections, device security features, audit records, protected cloud storage and operational safeguards designed to prevent unauthorised access, alteration, loss or disclosure.

Site photos may be kept temporarily in protected app storage while uploads are prepared, queued or retried, including when reception is poor or the app moves to the background. Uploaded files are stored in controlled cloud storage and are delivered through authorised or time-limited access. A user-controlled copy may remain in the device photo library when the save-to-Photos option is enabled.

No system can guarantee absolute security. Please protect your device and account, use only your own login, and promptly report a lost device, suspicious access or privacy concern.

7. Retention and deletion

We keep personal information only for as long as it is reasonably required for the purposes described above. Retention depends on the record. Account and device-registration information is generally kept while the account or device remains active. Construction, property, site, health and safety, warranty, contract, financial and audit records may need to be retained for longer periods to meet operational, evidential and legal requirements.

Temporary mobile files are removed after successful transfer when they are no longer required for upload recovery, subject to the app's queue and device-storage protections. Copies saved to your photo library remain under your control.

You may ask for your personal information or account to be deleted. We will work with the organisation that provided your account and will delete or de-identify information where appropriate, unless it must be kept for a lawful purpose, another person's rights, security, audit integrity, contractual obligations or an active project record.

8. Your choices and privacy rights

• You can change camera, photo, microphone, speech, location, biometric and notification permissions in your device settings.
• You can turn optional mobile notification categories, app lock, camera quality and save-to-Photos behaviour on or off in K1 settings where available.
• You can sign out and remove a registered passkey from K1 account settings.
• Under the New Zealand Privacy Act 2020, you may ask for access to personal information held about you and request correction if it is wrong.
• You may ask questions, object to a proposed use, withdraw an optional permission, or request account or personal-information deletion by contacting your organisation administrator or Kevler Group.

Some K1 features cannot operate without the information needed for that feature. Withdrawing a device permission does not automatically delete information already included in a K1 business record; contact us if you also want a deletion request considered.

9. Contact us

For a privacy question, access or correction request, deletion request, or concern about how information has been handled, contact your organisation administrator or Kevler Group:

We will verify the requester's identity and may consult the organisation that provided the K1 account before acting on a request. You may also contact the Office of the Privacy Commissioner if you are not satisfied with our response.

10. Changes to this policy

We may update this policy when K1 features, service providers or legal requirements change. The current version and its effective date will remain available at this address. We will provide additional notice through K1 or your organisation where a change materially affects how personal information is handled.