Privacy Policy

Landy (“we”, “us”, “our”) operates the Landy web application at landylogbook.com. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights under the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988 (including the Australian Privacy Principles).

By using Landy you agree to the practices described in this policy. If you have questions, contact us at hello@landylogbook.com.

1. Who we are

Landy is a shared property maintenance and Healthy Homes compliance logbook for landlords and tenants in New Zealand and Australia. Landy is operated from New Zealand.

2. Information we collect

Account information

• Email address and full name provided at sign-up
• Your account role (landlord or tenant)

Property information (landlords)

• Property address, nickname, and notes you enter
• Invite codes generated for your property

Maintenance and compliance data

• Maintenance issue titles, descriptions, priority and status
• Photos uploaded with maintenance reports
• Inspection records (type, date, notes)
• Healthy Homes compliance records for each of the five standards
• Timeline events (audit log of changes)

Usage data

• Pages visited and features used (anonymised analytics via PostHog, if enabled)
• Error reports and diagnostic information (via Sentry, if enabled)

Payment data (when billing is enabled)

If you subscribe to a paid plan, payment is processed by Stripe. We never see or store your full card number. We retain only a Stripe customer reference, subscription status, and plan type.

3. How we collect information

We collect information directly from you when you create an account, add property details, submit maintenance reports, or invite other users. We do not purchase or obtain personal information from third parties.

4. Why we collect and use your information

5. Photo storage and access

Photos uploaded with maintenance reports are stored in a private storage bucket on Supabase. Access is restricted by row-level security rules so that only the landlord and active tenants of the specific property can view photos for that property. No photo is publicly accessible by URL. You can delete a maintenance report to remove its associated photo.

6. Who we share information with

We use the following third-party services to operate Landy:

• Supabase — database, authentication and file storage. Data is stored on infrastructure provided by Supabase, Inc. (USA). Supabase is GDPR-compliant and provides data processing agreements.
• Resend — transactional email delivery. Your email address is passed to Resend to send notifications you have opted into by using the service.
• PostHog — product analytics. Usage events are sent anonymously. No personally identifiable information is included in analytics events.
• Sentry — error monitoring. Error reports may include browser information and the page URL where an error occurred. We configure Sentry to exclude personal data from error payloads.
• Stripe — payment processing. Used only when a paid subscription is active. Stripe is PCI-DSS Level 1 certified.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

7. Shared access between landlords and tenants

Landy is designed as a shared logbook. When a tenant joins a property, they can see the property’s maintenance reports, inspection records and timeline. Landlords can see reports submitted by tenants for their property. This sharing is a core part of how the service works and is consented to when both parties use the platform.

8. Data retention

• Account and property data is retained for as long as your account is active.
• Timeline events (audit log) are append-only and cannot be edited or deleted by users. This is intentional to preserve property history.
• If you request account deletion, we will delete your personal account information and disassociate your profile from property records within 30 days. Property records (maintenance history, inspections, Healthy Homes records) may be retained for the benefit of the continuing landlord, with your personal details removed.

9. Security

We implement the following security measures:

• Row-level security on all database tables so users can only access their own data
• Private file storage with property-scoped access controls
• HTTPS encryption for all data in transit
• Encrypted storage of all data at rest (managed by Supabase)
• Input validation and output encoding to prevent injection attacks
• Append-only audit logs that cannot be tampered with

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@landylogbook.com.

10. Your rights

New Zealand (Privacy Act 2020)

You have the right to:

• Ask whether we hold personal information about you
• Request access to that information
• Request correction of inaccurate information
• Make a complaint to the Office of the Privacy Commissioner if you believe your rights have been breached

Australia (Privacy Act 1988)

You have the right to:

• Access personal information we hold about you
• Request correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information
• Make a complaint to the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, email hello@landylogbook.com. We will respond within 20 working days.

11. Cookies and analytics

Landy uses cookies for session management (to keep you signed in) and, if analytics are enabled, for anonymised product usage tracking. See our Cookie Policy for details.

12. Children’s privacy

Landy is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or by a prominent notice on the application before the change takes effect. The “Last updated” date at the top of this page always reflects the current version.

14. Contact

For any privacy-related questions, requests or complaints:

Landy
Email: hello@landylogbook.com
New Zealand

If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

If you are in New Zealand and are not satisfied with our response, you may contact the Office of the Privacy Commissioner.