Privacy
Privacy Policy
This policy explains what information Dokkit processes, why, and how you can exercise your rights. Dokkit is operated from New Zealand and is offered to people in English-speaking markets including New Zealand, Australia, the United States, and Canada. This notice is written to match how the product works today. It is not legal advice. We plan to have it reviewed by a lawyer; until then, treat it as our operational description of privacy practices.
Dokkit does not claim ISO 27001, SOC 2, or formal certification under any privacy regime.
1. Who is responsible
Dokkit is operated from New Zealand. For privacy questions, access requests, corrections, or complaints, contact support@dokkit.space. If you need the formal legal entity name for a contract or regulator, ask at that address and we will provide the operator details on record.
Under New Zealand's Privacy Act 2020, we are the agency responsible for personal information we hold in connection with Dokkit. Depending on where you live, other privacy laws may also give you rights (see section 10).
2. What Dokkit is
Dokkit is a personal thinking and planning service. You put tasks and related work context into Dokkit so you do not have to hold everything in your head. Dokkit may learn from how you use it (for example estimates versus what actually happened) to improve fit for you. It is not an advertising network and is not designed as a public social network.
3. Information we process
Account and authentication
- Email address and authentication identifiers (including Google sign-in where used).
- Session information needed to keep you signed in securely.
- Account tier and billing status (Free, paid Dokkit plan, or trusted tester).
Product content you create
- Tasks, notes, estimates, completion and Reality Check information.
- Jobs, meetings, travel trips and related structure (when you use those features).
- Optional location text and coordinates you attach to work or travel.
- Uploaded files and media you store against jobs or meetings.
- Onboarding answers used as initial planning priors.
Integrations you connect
- Microsoft calendar (when you choose to connect): OAuth tokens, connected account identifiers, calendar list, and event timing needed to reflect external commitments in planning. We use this to support capacity and scheduling context, not to sell calendar content.
Payments
- Payments are processed by Stripe. Dokkit stores Stripe customer and subscription identifiers and status so we can unlock the paid plan and update access when billing changes. Payment card details are handled by Stripe and are not stored in Dokkit application databases as full card numbers.
- Billing is configured in United States dollars (USD) for the Dokkit plan (USD $6/month) unless checkout shows otherwise.
Device, notifications, and operations
- Push notification tokens if you enable notifications.
- Technical logs (errors, performance, security) with limited context.
- Storage usage totals for quota on hosted files.
- Preferences such as theme, work hours, and interface defaults.
- Approximate device or browser information typically collected by hosting and security systems.
We do not intentionally collect government ID numbers, health records, or similar highly sensitive categories as a product feature. Please do not store content you are not comfortable placing with a cloud productivity service.
4. Why we process it
- To provide and maintain the service (planning, Reality Check, learning, Pro features).
- To authenticate you and protect accounts.
- To process subscriptions, invoices, and cancellations through Stripe.
- To operate, secure, debug, and improve reliability of the service.
- To respond to support and privacy requests.
- To meet legal obligations where they apply (for example tax or law-enforcement requests that are valid).
We do not sell your personal information for money. We do not use your task content to build third-party advertising profiles.
5. Learning and behavioural information
Dokkit may derive patterns from your use — for example typical durations, carry behaviour, or capacity fit — so the product becomes more realistic for you over time. That information is tied to your account to improve your experience. It is not sold as marketing data.
6. Who processes data on our behalf
We use specialist providers. Depending on configuration, these include:
- Supabase — database, authentication, and file storage.
- Vercel — application hosting and delivery.
- Stripe — payments and customer billing portal.
- Firebase or related infrastructure — optional push notifications.
- Microsoft — calendar OAuth and calendar data when you connect it.
- Google — sign-in when you choose Google authentication; Maps/Places where location features are used.
These providers may process data in the United States and other countries. By using Dokkit, you understand that personal information may be stored or processed outside your home country, including outside New Zealand, Australia, Canada, or the United States, subject to the provider's safeguards and our configuration. We limit access to what each feature requires.
7. Retention
- Account content is kept while your account exists.
- When you delete your account, we cancel active Dokkit subscriptions with Stripe where possible, remove or cascade application data associated with your user id, and remove hosted media on a best-effort basis. Some operational logs and anonymised feedback may remain for security and integrity.
- Billing and accounting records may be retained as needed for financial records, disputes, or law.
8. Security
Access is protected by authentication and server-side authorisation. User-owned database rows are protected with access controls (including row-level security) so one customer cannot normally read another customer's data through the application. File storage is private to your account path. Server secrets are not embedded in the public client. No system is perfectly secure; report concerns to support@dokkit.space.
9. Children
Dokkit is aimed at adults managing work and life logistics. It is not directed at children under 16. If you believe a child has created an account, contact support@dokkit.space.
10. Your rights by region
Regardless of where you live, you can contact support@dokkit.space to request access to personal information we hold about you, ask for a correction, or request account deletion. We will respond within a reasonable time.
New Zealand
The Privacy Act 2020 applies to us as a New Zealand operator. You may request access and correction under that Act. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (privacy.org.nz).
Australia
If you are in Australia, the Australian Privacy Principles under the Privacy Act 1988 (Cth) may apply to handling of personal information about you. You may request access and correction. Unresolved complaints may be taken to the Office of the Australian Information Commissioner (OAIC).
Canada
If you are in Canada, federal law (PIPEDA) and/or provincial privacy laws may apply depending on your province and the context. You may request access and correction of personal information we hold. Unresolved concerns may be raised with the Office of the Privacy Commissioner of Canada or the relevant provincial commissioner.
United States
The United States does not have a single federal consumer privacy law covering all private-sector services. State laws may apply. In particular, if you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA may provide rights to know, delete, and correct personal information, and to opt out of certain “sales” or “sharing” of personal information.
Sale / sharing: We do not sell personal information for money. We do not knowingly “share” personal information for cross-context behavioural advertising as a product practice. If that changes, we will update this policy and provide required notices or controls.
California residents may submit requests via support@dokkit.space. We will not discriminate against you for exercising privacy rights. We may need to verify your request is authentic before acting on it.
Other US states (for example those with comprehensive privacy statutes) may provide similar rights. Contact support@dokkit.space and we will handle your request in good faith consistent with applicable law.
11. Cookies and local storage
Dokkit uses cookies or local storage as needed for authentication sessions, theme preference, and similar client settings. The marketing site may use essential hosting cookies. We do not run third-party advertising trackers as part of the core product. If we introduce non-essential analytics cookies in the future, we will update this policy and use appropriate controls where required.
12. International users
If you use Dokkit from outside New Zealand, you are transferring information to our systems and providers, which may include processing in the United States and other countries. Those countries may have privacy rules different from yours. We still apply the practices in this policy and the security measures described above.
13. Changes
We may update this policy as the product or law changes. The “Last updated” date will change when we do. For material changes, we may also notify you in the product or by email where appropriate.
14. Contact
Privacy and support: support@dokkit.space
Website: https://dokkit.space
Last updated: 26 September 2026