Privacy policy

Last updated: 13 November 2026

Stroh & Co ("we", "us") makes the Stroh app and this website. This policy explains what personal information we collect, why, who we share it with, and your rights under the New Zealand Privacy Act 2020.

Who we are

Mathias Strohmeier, trading as Stroh & Co, Christchurch, New Zealand. Our privacy officer is reachable at mathias.stro@gmail.com.

On this website

You can read this website without giving us any information. We do not use cookies, analytics, advertising or tracking tools, and we do not embed content from other companies. Our fonts are hosted on our own site, so your browser does not contact a font provider. See our cookie policy.

If you join the waitlist we collect:

• your email address;
• the date and time you joined and the exact consent wording you agreed to (so we can show you agreed);
• which page of the website you joined from.

Our hosting providers (Vercel, which delivers the website, and Supabase, which stores the waitlist) may automatically log technical details such as your IP address and browser type when you visit or submit the form. We do not use these logs to identify you or to track you across sites.

In the Stroh app

• Health check answers: your age, employment type, income, KiwiSaver provider, fund type, balance, contribution rate, savings and debt. These stay on your phone until you create an account.
• Account details: your email address and a securely hashed password, or, if you choose Sign in with Apple or Google, the email address that service shares with us (we never see your Apple or Google password), and your first name if you add it.
• Your results and activity: your Stroh Score, weekly check-in answers, streak and chosen actions, once you have an account.
• Your score history: a daily record of your Stroh Score and its four parts, once you have an account. It contains scores and dates only, never dollar amounts.
• Your goals: goal names, icons, target amounts, optional target dates and the amounts you log, once you have an account. If bank linking is available and you choose to link a goal to a savings account, we also store which account it follows and its balance at the time of linking. We do not use goals for anything other than showing your progress.
• Your ritual notes and reminders (optional): the line you write in the gratitude step, the reminders you write yourself, the days you opened the app (used for your weekly rings) and the debt amounts you try in the payoff calculator are kept on your phone only. We do not receive them.
• Monthly money in and out (optional): if you log what came in and what you spent each month, those numbers and the averages and trends worked out from them are kept on your phone only. We do not receive them.
• Bills and checklists (optional): the bills you list, your share of them, the take-home pay figures you try and the checklist steps you tick are kept on your phone only. We do not receive them.
• Accounts you type in (optional): if you add accounts and balances to your Dashboard, those names and amounts, and the net worth history built from them, are kept on your phone only. We do not receive them.
• Your week-ahead list and app lock: your weekly to-do list stays on your phone. If you turn on the app lock, your phone does the Face ID, fingerprint or passcode check. We never see or store any of it.
• Investments you list (optional): if you add shares or funds to Investing vitals, the names and values you type are kept on your phone only. We do not receive them.
• Linked bank data (optional, when available): account names, balances and a summary of your last 30 days of spending by category, provided through Akahu. We do not store individual transactions.
• Usage data: we do not currently use analytics in the app. If we add them, we will update this policy first.

We never see or store your bank login details. When you link a bank, you sign in on your bank's own screen through Akahu, an open-banking provider. Our access is read-only.

Why we use your information

• To email you about Stroh's launch and updates, if you joined the waitlist and agreed. You can withdraw consent at any time.
• To calculate and show your Stroh Score and results, run your weekly check-in, streaks and reminders.
• To show your accounts and spending summary, if you link them.
• To keep the service secure, fix problems and improve it.

We do not sell your personal information and we do not use it to advertise other companies' products.

Who we share it with

• Vercel, which hosts this website.
• Supabase, which hosts our database and sign-in. Data is stored in the Sydney, Australia region.
• Apple and Google, only if you choose to sign in with them.
• Akahu, only if you link bank accounts.
• A crash-reporting service (Sentry), which receives technical error details if the app crashes. We turn off personal data collection, and never send your balances, goals or answers.
• An email service provider, used only to send you emails you agreed to receive.
• Anyone the law requires us to share it with.

Some of these providers store or process information outside New Zealand. We only use providers we believe protect information to a standard comparable to the Privacy Act, and we take reasonable steps to check this.

Emails and unsubscribing

We only email you about Stroh if you agreed. Every marketing email will say who it is from and include a working unsubscribe link. You can also unsubscribe by emailing mathias.stro@gmail.com. We will stop within five working days.

How long we keep it

Waitlist emails are kept until you unsubscribe, or 12 months after launch, whichever comes first. App data is kept while you have an account. If you delete your account in the app (Settings, then "Delete my account and data"), we delete your account, scores, check-ins and linked-account data, and revoke any bank connection.

How we protect it

Data is encrypted in transit. Bank connection tokens are encrypted and stored only on our servers, never in the app. Database access rules mean each user can only reach their own data. No system is perfectly secure. If a privacy breach is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner as the law requires.

Your rights

You can ask to see the personal information we hold about you and to correct it. To make a request, email mathias.stro@gmail.com. If you are unhappy with how we handle your information, you can complain to the Office of the Privacy Commissioner.

Age

Stroh is designed for people aged 18 and over. We do not knowingly collect information from younger people.

Not financial advice

Stroh provides general information only. See our terms of use.

Changes

If we change this policy in a meaningful way, we will tell you by email or in the app.