Privacy Policy

Landy (“we”, “us”, “our”) operates the Landy web application at landylogbook.com. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights under the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988 (including the Australian Privacy Principles).

By using Landy you agree to the practices described in this policy. If you have questions, contact us at hello@landylogbook.com.

1. Who we are

Landy is a shared property maintenance and Healthy Homes compliance logbook for landlords and tenants in New Zealand and Australia. Landy is operated from New Zealand.

2. Information we collect

Account information

• Email address and full name provided at sign-up
• Your account role (landlord or tenant)

Property information (landlords)

• Property address, nickname, and notes you enter
• Invite codes generated for your property

Maintenance and compliance data

• Maintenance issue titles, descriptions, priority and status
• Photos uploaded with maintenance reports
• Inspection records (type, date, notes)
• Healthy Homes compliance records for each of the five standards
• Timeline events (audit log of changes)

Usage data

None is collected at present. Landy ships with optional hooks for anonymised product analytics (PostHog) and error diagnostics (Sentry), and both are switched off in the live service. No analytics or diagnostic events leave the app. If that ever changes, this policy will be updated before it does, and what each collects is described below so you can see what would be involved.

• Pages visited and features used, anonymised, if analytics is ever enabled
• Error reports and diagnostic information, if error monitoring is ever enabled

Payment data

Landy is free and there is nothing to buy. There is no paid plan, subscription, or in-app purchase, no card details are ever requested, and no payment processing takes place. Should billing be introduced later, payments would be handled by Stripe, we would never see or store your full card number, and this policy would be updated first.

3. How we collect information

We collect information directly from you when you create an account, add property details, submit maintenance reports, or invite other users. We do not purchase or obtain personal information from third parties.

4. Why we collect and use your information

5. Photo storage and access

Photos uploaded with maintenance reports are stored in a private storage bucket on Supabase. Access is restricted by row-level security rules so that only the landlord and active tenants of the specific property can view photos for that property. No photo is publicly accessible by URL. You can delete a maintenance report to remove its associated photo.

6. Who we share information with

We use the following third-party services to operate Landy:

• Supabase, database, authentication and file storage. Data is stored on infrastructure provided by Supabase, Inc. (USA). Supabase is GDPR-compliant and provides data processing agreements.
• Resend, transactional email delivery. Your email address is passed to Resend to send notifications you have opted into by using the service.
• PostHog, product analytics. Not currently in use. If enabled, usage events are sent anonymously and no personally identifiable information is included.
• Sentry, error monitoring. Not currently in use. If enabled, error reports may include browser information and the page URL where an error occurred, configured to exclude personal data.
• Stripe, payment processing. Not currently in use, as Landy is free. Stripe is PCI-DSS Level 1 certified and would only ever be involved if a paid plan were introduced.

Every provider listed above is bound by a written data processing agreement that requires them to protect your information to the same standard set out in this policy, to use it only to deliver the service we have engaged them for, and never for their own purposes. We do not share your personal information with any third party that does not provide that same or an equal level of protection. This applies to any parent, subsidiary or related entity of ours that has access to your data.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

7. Shared access between landlords and tenants

Landy is designed as a shared logbook. When a tenant joins a property, they can see the property’s maintenance reports, inspection records and timeline. Landlords can see reports submitted by tenants for their property. This sharing is a core part of how the service works and is consented to when both parties use the platform.

8. Data retention

• Account and property data is retained for as long as your account is active.
• Timeline events (audit log) are append-only and cannot be edited or deleted by users. This is intentional to preserve property history.
• If you request account deletion, we will delete your personal account information and disassociate your profile from property records within 30 days. Property records (maintenance history, inspections, Healthy Homes records) may be retained for the benefit of the continuing landlord, with your personal details removed.

9. Security

We implement the following security measures:

• Row-level security on all database tables so users can only access their own data
• Private file storage with property-scoped access controls
• HTTPS encryption for all data in transit
• Encrypted storage of all data at rest (managed by Supabase)
• Input validation and output encoding to prevent injection attacks
• Append-only audit logs that cannot be tampered with

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@landylogbook.com.

10. Your rights

New Zealand (Privacy Act 2020)

You have the right to:

• Ask whether we hold personal information about you
• Request access to that information
• Request correction of inaccurate information
• Make a complaint to the Office of the Privacy Commissioner if you believe your rights have been breached

Australia (Privacy Act 1988)

You have the right to:

• Access personal information we hold about you
• Request correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information
• Make a complaint to the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, email hello@landylogbook.com. We will respond within 20 working days.

11. Cookies and analytics

Landy uses cookies for session management (to keep you signed in) and, if analytics are enabled, for anonymised product usage tracking. See our Cookie Policy for details.

12. Children’s privacy

Landy is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or by a prominent notice on the application before the change takes effect. The “Last updated” date at the top of this page always reflects the current version.

14. Contact

For any privacy-related questions, requests or complaints:

Landy
Email: hello@landylogbook.com
New Zealand

If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

If you are in New Zealand and are not satisfied with our response, you may contact the Office of the Privacy Commissioner.