QRdy reference
Privacy Policy
How QRdy collects, uses, stores, and protects personal information across the product.
Last updated: April 2026
1. Who we are
QRdy is a New Zealand-based service that helps businesses give customers real-time status updates via QR codes. This policy explains what personal information we collect, why we collect it, and how we handle it in accordance with the New Zealand Privacy Act 2020.
2. What information we collect
From customers (people who scan a QR code):
- Your name (entered when checking in)
- Your email address (optional - only if you choose to receive email notifications)
- Your WhatsApp phone number (optional - only if you choose to receive WhatsApp notifications)
From businesses (operators who use QRdy):
- Business name
- Email address used to log in
Automatically collected:
- IP address fingerprint (used only for rate limiting - not stored long-term)
- Job status events (for example, when a step was completed) with no personal content
3. Why we collect it
- To display your job status on the status page
- To send you email or WhatsApp notifications about your job (only if you opted in)
- To allow the business to identify your job in their dashboard
- To prevent abuse of the service (rate limiting)
4. How we store and protect it
- Customer email addresses are encrypted at rest using AES-256-GCM encryption
- All data is stored in Supabase, a US-based cloud database provider
- Data is transmitted over HTTPS at all times
- Customer job data is automatically deleted 48 hours after the job expires
5. Who we share it with
We do not sell your data. We share it only with the following service providers who help us operate QRdy:
- Supabase (US) - database and authentication
- Resend (US) - transactional email delivery
- Vercel (US) - hosting and infrastructure
- Anthropic (US) - AI-generated step suggestions (no personal data is sent)
- Sentry (US) - error monitoring (no personal data included in error reports)
- Meta Platforms (WhatsApp Business API) (US) - WhatsApp message delivery for customers who opt in to WhatsApp notifications. See Meta's Privacy Policy.
By using QRdy, you consent to your information being processed in the United States by these providers. All providers are bound by appropriate data processing terms.
6. Your rights
Under the NZ Privacy Act 2020, you have the right to:
- Ask what personal information we hold about you
- Request a correction if it is wrong
- Ask us to delete your information
To exercise any of these rights, email us at support@alwaysqready.app. We will respond within 20 working days as required by the Act.
7. Data retention
- Customer job data: deleted automatically 48 hours after the job expires
- Business account data: retained while the account is active; deleted on request
- Email notification logs: not retained after delivery
- WhatsApp phone numbers: encrypted at rest; deleted when the associated job expires or on request
8. Notification opt-out
If you opted in to email or WhatsApp notifications, you can unsubscribe at any time by clicking the unsubscribe link included in any notification we send, or by emailing support@alwaysqready.app. Once unsubscribed, we will not send further notifications for your job.
9. Cookies and tracking
QRdy uses Vercel Analytics to measure page traffic. This collects anonymised data only (no cookies, no personal identifiers). We do not use advertising cookies or tracking pixels.
10. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed. Continued use of QRdy after changes means you accept the updated policy.
11. Contact
For privacy questions or requests, contact us at support@alwaysqready.app. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner.