Privacy policy

Last updated 28 September 2026

This policy applies to the Onda mobile app and this website, both operated by Onda Technologies Limited (New Zealand company number 9450924). We follow the Privacy Act 2020. In this policy, "we" and "Onda" mean Onda Technologies Limited, and "you" means anyone who uses Onda as a worker or as a business.

Information we collect from workers

• Account details — your legal name (as it appears on your ID), mobile number and email address. We verify your number by text message.
• Home address — your full street address. We match you to shifts using only your suburb and how far you'll travel; your street address is used to set up your payouts and for tax reporting, and businesses never see it.
• Work preferences — the kinds of work you want, when you're available and how far you're willing to travel.
• Identity documents — a photo identity document and a photo of you, used to confirm you are who you say you are.
• Work eligibility — confirmation that you are legally allowed to work in New Zealand, and the basis for it.
• Tax details — your IRD number and date of birth. We don't collect or store your bank account number: you give that to Stripe, our payments provider, directly.
• Shift activity — shifts you were offered, accepted, declined or completed, and the ratings you gave and received.
• Agreements — a record of which version of our agreements you accepted, and when.

Information we collect from businesses

• Your name, business name and mobile number.
• The shifts you post, including location, hours, pay rate and description.
• Ratings you give and receive.
• Billing details, handled by our payment provider.

Information collected automatically

When you use the app we collect basic technical information such as device type, operating system version and app version, and a push notification token if you allow notifications. We use this to keep the app working, to fix faults and to send you notifications about your shifts.

How we verify identity

Stripe, our payments provider, also verifies your identity before it can pay you. That check is run by Stripe under its own privacy policy, and it may ask you for a photo of your ID.

Why we collect this information

• To create and run your account, and to sign you in securely.
• To match workers to shifts, and to show businesses why a worker was matched.
• To confirm that workers are real people who are allowed to work in New Zealand — this is the core of what makes Onda safe to use.
• To set up your payouts with Stripe and pay you for completed shifts.
• To meet our tax obligations, including reporting to Inland Revenue under the rules for digital platforms.
• To operate the rating system and to investigate reports of problems on a shift.
• To contact you about a shift, your account, or changes to our terms.

Giving us this information is voluntary, but we can't provide Onda without most of it. If you don't give us your identity documents or work eligibility information, you can't be matched to shifts.

Who we share it with

• Businesses offering you a shift — they see your first name, the reasons you were matched (the work you do, when you're free, how far away you are) and how many shifts you've completed through Onda. After a shift, the business you worked for sees the rating you gave it, once both sides have rated or 14 days have passed. They do not see your identity documents, IRD number or bank details.
• Workers you offer a shift to — businesses' shift details are shown to matched workers, and full details including the address are revealed to the confirmed worker 24 hours before the shift.
• Stripe, our payments provider — to set up your payouts we send Stripe your name, email address, mobile number, date of birth and home address. Stripe collects your bank account directly and may verify your identity. Stripe handles this information under its own privacy policy.
• Service providers — companies that run parts of Onda for us, including our database and app hosting provider, our text message provider, our push notification provider and our address lookup provider. They may only use the information to provide their service to us.
• Inland Revenue — under the rules for digital platforms, we report your name, date of birth, address, IRD number and what you were paid through Onda.
• Other agencies — where the law requires us to report or disclose information.
• Professional advisers and insurers — where necessary, for example if there is a dispute about a shift.

We do not sell your personal information, and we do not share it with advertisers.

Information held overseas

Some of our service providers store information on servers outside New Zealand, including in Australia, the United States and the European Union. We only use providers that are required to protect your information to a standard comparable to the Privacy Act 2020.

How long we keep it

We keep your information for as long as your account is open. When you delete your account:

• Deleted straight away: your email address, mobile number, identity documents, work preferences, availability and location.
• If you've been paid through Onda: tax law requires us to keep your legal name, date of birth, address and IRD number, with your pay and fee records, for seven years after the end of the calendar year you were last paid. They're kept separately, locked away from businesses and from the app, and deleted when the seven years are up.
• If you've never been paid through Onda: your name, date of birth, address and IRD number are deleted straight away too.
• Records of completed shifts and ratings are kept in a form that no longer identifies you, so that businesses and workers keep an accurate history of the shifts they worked.
• Your bank details are held by Stripe, not Onda — you can close your Stripe account with Stripe.

Keeping it secure

Access to personal information inside Onda is restricted at the database level, so accounts can only reach their own records. Identity documents are stored separately with restricted access. Financial records are written in a form that cannot be altered after the fact. No system is perfectly secure, but if a privacy breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as required by law.

Your rights

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it's wrong. Most of your details can be changed directly in the app — tap the settings icon on your home screen. For anything else, email jackson@ondatechnologies.com and we'll respond within 20 working days.

You can delete your account at any time from inside the app. See deleting your account for what happens to your information when you do.

If you're not happy with how we've handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

Age

Onda is not for people under 16. If we find out that someone under 16 has created an account, we'll close it and delete their information.

Changes to this policy

If we change this policy we'll update the date at the top, and if the change is significant we'll tell you in the app or by email before it takes effect.

Contact

Privacy questions go to jackson@ondatechnologies.com.