Red Box Software ("we", "us", "our") operates the Count Buddy application, accessible at countbuddy.co.nz. Count Buddy is a field counting and mapping tool used primarily in the horticultural and agricultural industries.
This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Privacy Act 2020 (New Zealand) and its Information Privacy Principles (IPPs).
Questions about this policy can be directed to: support@countbuddy.co.nz
We collect personal information only when it is necessary to provide the Service. The information we collect depends on how you use Count Buddy:
| Category | What we collect | Source |
|---|---|---|
| Account information | Email address; display name (when signing in with Google) | You provide this when creating an account or signing in with Google |
| Company / workspace data | Company name, invite codes, member roles and access rights | Created by company owners and managers within the app |
| Field data | GPS coordinates, count values, block names, row markers, bay markers, and notes entered during field operations | Entered by you and your team members during use |
| Uploaded files | CSV files uploaded for data import | Uploaded by you |
| Presence data | Real-time active session indicator (used to show which team members are currently online within a workspace) | Generated automatically while you are signed in and active |
| Billing information | Subscription status, plan type, Stripe customer ID, subscription period end date | Generated when you subscribe; payment card details are processed and held solely by Stripe — we never see or store them |
| Technical / usage data | Browser type, operating system, IP address, crash reports, and usage logs collected automatically by Firebase | Collected automatically by our infrastructure provider (Google Firebase) |
We do not intentionally collect sensitive personal information (such as health information, financial account details, or information about children under 16).
We use the information we collect for the following purposes:
We do not sell your personal information. We share it only in the following limited circumstances:
| Recipient | What is shared | Purpose |
|---|---|---|
| Google Firebase (Google LLC) | All data stored in the Service (accounts, field data, presence, billing status) | Cloud infrastructure, database, authentication, and file storage. Data is stored in the australia-southeast1 region (Sydney, Australia). |
| Stripe, Inc. | Email address, company name, Stripe customer identifier | Payment processing and subscription management. Stripe stores and processes card details independently under its own Privacy Policy. |
| Google (Sign-In) | OAuth tokens; your Google profile name and email are returned to us | Authentication when you choose "Sign in with Google". Governed by Google's Privacy Policy. |
| Your company members | Your display name, email (visible to managers), and any field data you enter | Collaboration within your company workspace. You consent to this by joining a company. |
| Law enforcement / regulators | Information required by law | We will disclose personal information where required by New Zealand law or a valid legal process. We will notify you where we are lawfully permitted to do so. |
Count Buddy can connect to Bluetooth Low Energy (BLE) counting devices. BLE connections are made directly from your browser or device to the hardware — no Bluetooth data or device identifiers are transmitted to our servers. BLE functionality operates entirely on your local device.
When you place points or define blocks on the map, the GPS coordinates you enter are stored in your company's workspace in Firestore. This location data is associated with your company and is accessible to company members with read access. We do not use location data for advertising or share it outside your workspace.
Your data is stored using Google Firebase with the primary database and storage region set to australia-southeast1 (Sydney, Australia). While this is outside New Zealand, Australia has comparable privacy protections and Google is bound by contractual obligations to handle data in accordance with applicable privacy law.
Payment data is stored by Stripe in accordance with Stripe's data residency practices, which may include storage in the United States and other countries.
We take reasonable steps to protect personal information against loss, unauthorised access, use, modification, or disclosure. Our security measures include:
No system is completely secure. If you become aware of a security vulnerability or breach, please notify us immediately at support@countbuddy.co.nz.
Under the Privacy Act 2020, you have the following rights regarding your personal information:
To exercise your rights, contact us at support@countbuddy.co.nz. We will respond within 20 working days as required by the Privacy Act 2020.
Count Buddy uses browser local storage (not cookies) to cache field data for offline use and to remember your last active company workspace. This data never leaves your device except as part of the normal sync to Firebase.
Firebase Authentication uses a session cookie to keep you signed in. No third-party advertising or tracking cookies are used by Count Buddy.
The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information without appropriate consent, please contact us and we will promptly delete it.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice within the Service at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent version.
Continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.
For any privacy-related questions, requests, or complaints:
We aim to respond to all privacy inquiries within 5 working days and to resolve them within 20 working days.