Privacy Policy
Last updated 26 October 2026
Krid is a product of Revline Pty Ltd ("Revline", "we", "us"). This policy explains how Revline handles personal information in Krid, under the Australian Privacy Principles.
Who we are
Krid is a product of Revline Pty Ltd, an Australian company, which is responsible for the personal information described in this policy. Contact us at contact@kridpay.com.
What we collect
- Account details: your name, email address and sign-in information (managed by our sign-in provider, Clerk).
- Business details you enter: business name, ABN, address, email, phone, logo and payment instructions.
- Your customers' details and your invoices, items, photos, payments and settings.
- Billing details: your Krid Pro subscription status from Stripe, Apple or Google. We don't receive or store your full card number.
- Technical information: IP address, device and app information, and activity logs, used for security and to decide free-trial eligibility.
How we use it
- To run Krid for you: create and send invoices, take card payments through your Stripe account, record payments and send review requests you've turned on.
- To manage your plan, free trial and subscription, including emails about your trial ending and your billing.
- To keep Krid secure and prevent misuse, including repeat free trials.
- To support you and improve Krid. We don't sell personal information or use your customers' information for our own marketing.
When your customers open an invoice
Invoice emails and texts link to a page showing the invoice. When a customer opens that page, Krid tells the business it was viewed: when, how many times and whether on a phone or a computer. To avoid counting the same visit twice we keep a scrambled (one-way hashed) code made from the visitor's network address and browser, not the address itself. Invoice emails also contain a tiny image that shows when the email was opened; many mail apps load it automatically, so it's only a hint.
When a business turns on Google review requests, Krid texts (or emails) its client once the invoice is paid, at most once every 90 days. Every text names the business and says how to opt out: replying STOP means Krid never texts that number again. Texts are sent through Twilio.
Free-trial records
To allow one free trial per business, we keep scrambled (one-way hashed) versions of identifiers such as the ABN, email addresses, phone number and the network a trial started from. These can't be turned back into the original details. We keep them after an account is deleted so the trial can't be restarted.
Who we share it with
Service providers that run parts of Krid for us: Clerk (sign-in), Stripe (card payments and web subscriptions), Apple and Google (app subscriptions), Resend (email delivery), Twilio (text messages), Expo (app notifications), Google (business search for review links), Replit and its cloud providers (hosting, database and file storage). Some are based in or store data in the United States and other countries; we take reasonable steps to make sure they protect it. We may also disclose information where the law requires.
Keeping and deleting it
We keep your information while your account is active. When you delete your account, we delete the businesses you solely own and everything in them, your access to other businesses, and your sign-in account, apart from the hashed free-trial records above and anything we must keep by law.
Backups are overwritten on a rolling basis.
Your choices and rights
You can access and correct most information in Krid yourself, and delete your account in Account & Security. To ask for a copy of your information, a correction, or to make a complaint, contact contact@kridpay.com. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).