Effective 4 September 2026
This summary is here so you can understand the shape of it in a minute. It is not a substitute for the rest of the page, and where the two differ the detailed sections apply.
WorthMile is a product of Novaravia Limited (NZBN 9429053877659, company number 9450756), a company registered in New Zealand. In this policy “we”, “us” and “our” mean Novaravia Limited, and “you” means the person using WorthMile.
Novaravia Limited is an agency for the purposes of the Privacy Act 2020 (NZ), and this policy describes how we handle personal information under that Act and its Information Privacy Principles.
Our registered office is recorded on the New Zealand Companies Register against Novaravia Limited, NZBN 9429053877659. For anything about your personal information, write to privacy@worthmile.com — that address goes to the person responsible for privacy at Novaravia Limited and is the fastest route to a real answer.
This policy covers the WorthMile mobile app, the WorthMile website at worthmile.com, and any support correspondence you have with us about them.
It does not cover the rideshare platforms you drive for. Uber, Bolt, DiDi and any other platform you work each hold their own data about you under their own policies, and WorthMile has no access to your accounts with them. When you import a monthly statement, you are giving us a copy of a document they gave you — we do not connect to them on your behalf.
WorthMile is built for New Zealand drivers and is offered in New Zealand. If you use it from elsewhere, you do so on your own initiative and New Zealand law applies.
Almost everything below is information you type in or upload. The exceptions are location (only during a shift), your push token (only if you turn notifications on), and the small amount of technical information any app or website receives when it is used.
| What | Specifically | Where it comes from |
|---|---|---|
| Account | Email address, password (stored only as a cryptographic hash, never in readable form), display name, sign-up date | You, at sign-up |
| Profile and settings | Business start date, GST registration status and filing frequency, tax settings, weekly income target, notification preferences, theme | You |
| Vehicle | Make, model, year, fuel or energy type, purchase price and date, market value at business start, opening and current odometer, ownership costs | You. Fuel-efficiency figures come from a copy of the public NZTA vehicle register held in our own database. |
| Shifts | Start and end times, dates, breaks, odometer readings, distance, platform worked, notes | You, plus distance measured by the app during a shift |
| Earnings | Fares, tips, bonuses, platform fees, per-platform splits, and monthly statement imports (including any PDF you upload) | You |
| Expenses and receipts | Amounts, dates, categories, business-use percentages, recurring templates, and any receipt image or PDF you upload | You |
| Fuel and energy | Fill-up dates, litres or kWh, price, odometer at fill-up | You. Average pump prices come from a public MBIE dataset and are not linked to you. |
| Location | Latitude, longitude, accuracy, speed and timestamp, recorded while a shift is running — see section 4 | Your device, only between Start Shift and End Shift |
| Recorder event log | Technical records of the location recorder starting, stopping, and permission changes, tied to a shift | Your device, during a shift |
| Compliance reminders | WOF, COF, registration and licence expiry dates you choose to track | You |
| Logbook periods | The dates of any IRD 90-day logbook period you establish, and the business-use percentage it fixed | Derived from your shifts |
| Subscription | Plan, status, billing period end, and the identifiers Stripe uses for your customer and subscription records | Stripe, when you subscribe |
| Notifications | A device push token if you enable notifications, and a log of which notifications we sent you and when | Your device and our systems |
| Technical | IP address, device and browser type, and timestamps, in the ordinary server logs kept by our hosting and database providers | Automatically, as with any website or app |
Location is the most sensitive thing WorthMile touches, so it gets its own section rather than a line in a list.
Only while a shift is running — that is, after you press Start Shift and before you press End Shift. WorthMile does not record your location when no shift is active, and it has no geofencing, no trip auto-detection and no always-on tracking.
Android asks for background location permission because the recording must keep running with the screen off and the app not in front of you — a driver does not hold their phone open for a five-hour shift, and a track with the middle missing is worthless as an IRD record. That permission is used for this and nothing else.
Points are joined into a distance for that shift. That distance feeds your business-use percentage, your vehicle deduction, your cost per kilometre, and the IRD logbook evidence pack — and it lets the app cross-check what you typed from your dash against what was actually driven. You can view the route for any shift you recorded.
We do not sell it, share it with advertisers or data brokers, use it to build a profile of your movements outside work, or disclose it to any rideshare platform, insurer or employer. No third party receives your location from us except the infrastructure providers in section 6, which store it on our behalf and may not use it themselves.
Location is optional. Decline the permission, or withdraw it later in your device settings, and WorthMile keeps working — you enter your odometer readings by hand instead, which is the method IRD has always accepted. You lose the automatic distance and the route map, not the app.
Stating this plainly is worth more than leaving it to be inferred from the list above:
| Purpose | What it uses |
|---|---|
| Give you an account and keep it secure | Account, technical |
| Calculate income, costs, business-use %, GST, depreciation and provisional tax | Shifts, earnings, expenses, fuel, vehicle, profile, location |
| Produce IRD-shaped records — the logbook evidence pack, tax summaries, CSV exports | Shifts, location, logbook periods, expenses, vehicle |
| Show you a route map for a shift you recorded | Location |
| Tell you whether tonight is worth driving, and what is on near you | Shifts and earnings history, plus your approximate location at the moment you ask |
| Remind you about deadlines, recurring costs and unfinished entries | Compliance reminders, recurring expenses, shifts, push token |
| Take payment and manage your subscription | Account, subscription |
| Answer your support questions | Whatever you tell us, plus your account |
| Keep the service running, prevent abuse, and fix faults | Technical, recorder event log |
| Meet our own legal obligations, including tax and company record-keeping | Subscription and billing records |
We do not use your information for automated decision-making that produces a legal effect for you, and we do not profile you for marketing.
Every provider in section 7 stores data on servers outside New Zealand. That is a disclosure of personal information to a foreign person under Information Privacy Principle 12, and we rely on those providers being subject to privacy safeguards comparable to the Privacy Act 2020 — through their own binding data-processing terms, which require them to protect the information, use it only on our instructions, and delete it when we ask.
You should understand that once information is stored overseas it may also be accessible to the authorities of that country under their own laws, and New Zealand’s Privacy Act cannot prevent that. If that is not acceptable to you, WorthMile is not the right tool for you — we would rather say so here than bury it.
| What | How long | Why |
|---|---|---|
| Raw GPS points | Deleted automatically 12 months after they are recorded | The point-by-point trail stops being useful once the distance is computed, and it is the most sensitive thing we hold |
| Distances and business-use percentages derived from those points | While your account is open | IRD expects vehicle records to be kept for seven years; deleting these would destroy your own evidence |
| Shifts, earnings, expenses, receipts, fuel, vehicle, logbook periods | While your account is open | Multi-year tax records, and prior-year figures are part of the product |
| Account and profile | While your account is open | To provide the service |
| Subscription and payment records | Seven years after the transaction, even if you close your account | Companies Act and Tax Administration Act record-keeping. Held by us and by Stripe. |
| Push token | Until you disable notifications, uninstall, or the token stops working | Invalid tokens are removed automatically when delivery fails |
| Notification send log | While your account is open | So the app does not send you the same reminder twice |
| Support correspondence | Two years after the matter is closed | To keep context if you write again |
You can delete your account from within the app, under Settings. It is immediate and permanent: your profile, shifts, earnings, expenses, receipts, fuel records, vehicle, logbook periods, GPS history and device tokens are erased, and your login is destroyed.
Two things survive, and you should know which: payment records, because we are legally required to keep them for seven years and because Stripe holds its own copy; and anything already contained in routine backups, which are overwritten on a rolling cycle rather than edited. Backups are not used to restore deleted accounts.
Export anything you want to keep first. There is no undo, and we cannot recover a deleted account for you. Tax figures, the logbook evidence pack and CSV exports are all available from inside the app before you delete.
Access to your data is enforced at the database itself by row-level security, so a request carrying your login can only ever read and write your own rows. That is a stronger guarantee than filtering in the app, because it holds even if the app has a bug.
No system is perfectly secure, and we will not pretend otherwise. What we commit to is this: if a privacy breach occurs that has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and the affected people as soon as practicable, as the Privacy Act 2020 requires.
Under the Privacy Act 2020 you have the right to:
Most of this you can do yourself and immediately: every figure in WorthMile is editable in the app, and you can export your data at any time. If you would rather ask us, write to privacy@worthmile.com. We will confirm we have your request promptly and respond within 20 working days, which is the statutory limit. There is no charge.
We may need to confirm who you are before releasing information — that protection exists for you, not for us.
WorthMile is a tool for people running a driving business and is not directed at children. You must be at least 18 to hold an account. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we will delete it. If you believe a child has given us information, tell us at privacy@worthmile.com.
We will update this page when the way we handle information changes, and change the effective date at the top. If a change materially affects your rights or significantly widens what we collect or who we share it with, we will tell you in the app or by email before it takes effect, rather than relying on you to notice.
Previous versions are not published on this site. If you want the text that applied on a particular date, ask us and we will send it.
If you are unhappy with how we have handled your personal information, tell us first at privacy@worthmile.com — we would rather fix it than have you take it elsewhere, and we will respond within 20 working days.
If we cannot resolve it, you have the right to complain to the Office of the Privacy Commissioner, which is free and independent: privacy.org.nz, 0800 803 909.
Privacy, data access, correction and deletion: privacy@worthmile.com
Anything else about the app: support@worthmile.com, or the Support page.
Postal: our registered office is recorded against Novaravia Limited, NZBN 9429053877659, on the New Zealand Companies Register. Email reaches us faster and we monitor it every business day.
See also our Terms of Service.