Privacy
Privacy policy
How DayRunner collects, uses and looks after personal information.
Last updated 19 Oct 2026
Who we are
DayRunner is a product of Prompt6 Limited, a New Zealand company ("we", "us"). This policy covers the website dayrunner.co.nz and the DayRunner app at app.dayrunner.co.nz. We follow the New Zealand Privacy Act 2020.
Questions or requests: privacy@dayrunner.co.nz
Two kinds of information
Your account. When you or your team sign up, we hold your name, email address, business name and login details, and how you use the app.
Your customers' information. When you connect a booking system or import a CSV, we process your guests' details (for example name, phone, email, pickup point and booking notes), your staff details (for example name, phone, licence class and working hours) and your supplier contacts. You are responsible for this information. We process it on your behalf, only to run your day.
What we use it for
- Planning your day: allocating drivers and vehicles, pickup times, messages and supplier reconfirmations
- Sending the messages you approve, by WhatsApp, SMS or email
- Running, supporting and improving DayRunner
- Account emails, like sign-in links and password resets
We don't sell personal information, and we don't use it for advertising.
Gmail
If you connect Gmail, DayRunner sends the supplier reconfirmations you approve from your account and reads replies to them so they can be matched to the right supplier. We don't use Gmail data for anything else, we don't use it to train AI models, and people at Prompt6 don't read it unless you ask us to for support or the law requires it. DayRunner's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Where it's stored and who helps us
Your data is stored with Supabase in Sydney, Australia (AWS ap-southeast-2). We use a small number of service providers to run DayRunner: Supabase (database and login), Cloudflare (website hosting), Resend (account emails), Twilio (SMS and WhatsApp, if you use it), Google (Gmail, if you connect it), and Anthropic (optional message drafting). They only get what they need to do that job.
How long we keep it
Guest personal details are deleted 14 days after the trip date. Account information is kept while your account is open. When you close your account you can ask us to export or delete your data, and we'll delete it unless the law requires us to keep it.
Security
Your data is hosted in Sydney (AWS ap-southeast-2, via Supabase). It's encrypted in transit and at rest. Each operator's data is isolated, so you only ever see your own. Booking system and messaging credentials are encrypted.
This website
dayrunner.co.nz doesn't use cookies or tracking scripts. Our host keeps standard server logs.
Your rights
You can ask to see or correct the personal information we hold about you, or ask us to delete it. If you're a guest of one of our operators, contact the operator first, as they control your booking information, or email privacy@dayrunner.co.nz and we'll pass it on. If you're not happy with how we've handled your information you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes
We'll update this page if anything changes, and tell account holders by email about significant changes.