Project Alpha

Legal

Privacy Policy

Project Alpha · Operated by KNH Group Ltd · Effective 4 May 2026 · Last updated 4 May 2026

1. Overview

Project Alpha (“we”, “our”, or “us”) is an AI-powered property development feasibility platform serving users in New Zealand. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application (“App”) and website at www.projectalpha.app (“Site”).

By creating an account or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

We are committed to complying with the New Zealand Privacy Act 2020 and, where applicable, the Australian Privacy Act 1988 and the General Data Protection Regulation (GDPR).

2. Who We Are

KNH Group Ltd is a company incorporated in New Zealand, responsible for operating the Project Alpha platform. For any privacy-related enquiries, please contact us at:

3. Information We Collect

3.1 Information you provide directly

When you register for an account, we collect:

  • Full name
  • Email address and password (password is encrypted and never stored in plain text)
  • Account type: General User, Sales Agent, or Service Provider
  • Preferred language(s)

If you register as a Sales Agent, we additionally collect:

  • Mobile phone number
  • Real estate agency affiliation
  • Areas of operation

If you register as a Service Provider, we additionally collect:

  • Business name and description
  • Service specialties and geographic coverage
  • Professional credentials or licence numbers (optional)

3.2 Information generated through your use of the App

  • Property addresses you submit for analysis
  • Feasibility reports generated for those addresses
  • Chat and conversation history within the App
  • Connections made between users and service providers or agents
  • Subscription and billing information (processed by Stripe — we do not store full payment card details)
  • Device information: device type, operating system, app version
  • Usage data: features used, session duration, error logs
  • Push notification tokens (for in-app notifications)

3.3 Information fetched from third-party public sources

To generate feasibility reports, our App retrieves publicly available property data including:

  • Property valuations (Capital Value) from public ratings databases
  • Land parcel data from Land Information New Zealand (LINZ)
  • Planning and zoning information from Auckland Council and other local authorities
  • Terrain and elevation data from public geographic datasets
  • Property listing information from publicly accessible real estate platforms
  • Real estate agent contact details from public property listings (stored temporarily in server memory for up to 30 minutes and never written to our database)

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To create and manage your account
  • To generate AI-powered property development feasibility reports
  • To facilitate connections between General Users and Service Providers or Sales Agents
  • To send in-app notifications when you receive a connection request or message
  • To process subscription payments via Stripe
  • To improve the accuracy of our AI models and data pipeline (using anonymised, aggregated data only)
  • To respond to your support enquiries via email or our contact page
  • To send transactional emails (account confirmation, password reset, billing receipts)
  • To comply with our legal obligations and enforce our Terms of Service

We do not use your personal information for unsolicited marketing without your explicit consent.

5. AI Processing and Automated Analysis

Project Alpha uses artificial intelligence (powered by Anthropic Claude) to analyse property data and generate feasibility reports. This processing is automated. The outputs — including scores, cost estimates, and ROI projections — are indicative only and do not constitute financial, legal, or planning advice.

No automated decision-making with legal or similarly significant effects is applied to you as a user. The AI analysis applies only to property data, not to personal profiling or credit assessment.

Property addresses and associated data submitted for analysis are sent to the Anthropic API for processing. Anthropic’s data processing practices are governed by their privacy policy at anthropic.com/privacy.

6. How We Share Your Information

6.1 Service providers (processors)

We share data with trusted third-party service providers who process data on our behalf:

  • Supabase (database and authentication) — data hosted on servers located in AWS ap-southeast-2, Oceania
  • Anthropic (AI processing) — property data only, no personal identifiers
  • Stripe (payment processing) — billing and subscription data
  • Expo/EAS (app distribution and push notifications)
  • RevenueCat (in-app subscription management)

6.2 Connections between users

When a General User is connected with a Service Provider through an AI recommendation, the following limited information is shared with the Service Provider:

  • Your first name
  • The property address you analysed
  • A summary of the feasibility report (if you approve the connection)

Your full email address, phone number, and account details are not shared without your explicit consent.

6.3 Legal disclosure

We may disclose your information if required by law, court order, or government authority, or where we believe disclosure is necessary to protect the rights, property, or safety of our users or the public.

6.4 We do not sell your data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

  • Account information: retained for the life of your account plus 7 years after closure (for legal compliance)
  • Feasibility reports and search history: retained for the life of your account; you may delete individual reports at any time via the Profile tab
  • Chat and message history: retained while your account is active; deleted within 30 days of account closure
  • Agent phone numbers retrieved for the call feature: stored in server memory only, maximum 30 minutes, never written to our database
  • Payment records: retained for 7 years as required by New Zealand financial record-keeping obligations
  • Usage and error logs: retained for 90 days, then automatically purged

8. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your account and associated data
  • Withdraw consent for optional data processing
  • Lodge a complaint with the New Zealand Privacy Commissioner at privacy.org.nz

To exercise any of these rights, please contact us at admin@projectalpha.app or via our contact page. We will respond within 20 working days as required by the Privacy Act 2020.

9. Security

We implement reasonable technical and organisational measures to protect your personal information, including:

  • Encryption of data in transit using TLS 1.2 or higher
  • Encrypted storage of passwords (bcrypt hashing via Supabase Auth)
  • Row-level security policies on our database ensuring users can only access their own data
  • API key authentication for all backend service access
  • Stripe-managed payment processing — we never store card numbers on our servers

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Please notify us immediately at admin@projectalpha.app if you suspect any unauthorised access to your account.

10. Minimum Age

Project Alpha is intended for users aged 18 years and over. We do not knowingly collect personal information from anyone below this age. If we become aware that a user is under the minimum age, we will delete their account and associated data promptly.

11. Third-Party Links and Data Sources

Our App retrieves publicly available property data from third-party websites and APIs including OneRoof, Hougarden, Relab, Land Information New Zealand (LINZ), Auckland Council, and others. We are not responsible for the privacy practices of these third parties. We recommend reviewing their respective privacy policies.

Agent contact information retrieved through our call feature originates from public real estate listings. This information is not stored by Project Alpha and is used solely to facilitate a phone call initiated by you.

12. Cookies and Analytics

Our mobile App does not use browser cookies. Our website may use essential session cookies required for login and security. We do not use third-party advertising cookies.

We collect anonymised, aggregated usage analytics to improve the App. This data cannot be used to identify individual users.

13. International Data Transfers

Your data may be processed outside New Zealand by our service providers (including Supabase, Anthropic, and Stripe). Where data is transferred internationally, we ensure appropriate safeguards are in place consistent with the New Zealand Privacy Act 2020 requirements for cross-border disclosures.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification or email at least 14 days before the changes take effect. Your continued use of the App after the effective date constitutes acceptance of the updated policy.

The current version of this policy is always available in the App under Profile → Privacy Policy and on our website at www.projectalpha.app/privacy.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or our data practices:

We aim to respond to all privacy enquiries within 5 working days.