Privacy policy
Edition 2026-09-16 · In force from 16 September 2026
Wrangle is made by Couch Kumara Ltd, a video production company in Wellington, New Zealand. This policy says what Wrangle collects, why, where it is held, who can see it, and what you can do about it. It is written for the New Zealand Privacy Act 2020, and it covers the Australian Privacy Principles where they ask for something different.
If anything here is unclear, ask: gidday@wrangle.nz. Or write to us: Couch Kumara Ltd, 25/126 Vivian Street, Te Aro, Wellington 6011, New Zealand.
Two kinds of information
Wrangle holds two kinds of personal information, and they are treated differently.
Information about you, the account holder. Your name, your email address, a phone number and company if you add them, a profile picture if you add one, and the record that you agreed to these terms. Couch Kumara collects this and is responsible for it.
Information you put in about other people. Crew, talent, clients, and the people at a location: names, phone numbers, addresses, rates, signatures, the details on a release or a contract. You collect this for your productions, and Wrangle holds it for you. Under the Privacy Act, Couch Kumara holds it as your agent, which means you are the agency responsible for it and we act on your instructions. Section 4 says what that makes you responsible for.
1. What is collected, and why
| What | Why | Where from |
|---|---|---|
| Your name and email address | To make your account, to sign you in, and to send you the emails that sharing depends on (invitations, confirmations, sign-in links). | You, or Apple or Google if you sign in with them. |
| Your phone number, company and a line about yourself | Optional. Shown on your card to the people you work with, so they can reach you. | You. |
| A profile picture | Optional. Beside your name in lists and conversations. | You, or Google if you sign in with Google. |
| Your password, if you set one | To sign you in on the web. Stored as a hash; the password itself is never kept or sent anywhere. | You. |
| The record that you agreed to the terms | Which edition, when, and which account. So both sides can say what was agreed. | The button you pressed. |
| Session tokens and device tokens | To keep you signed in, and to send notifications to your devices when you have turned them on. | Your devices. |
| Your productions and everything on them | Call sheets, contracts, releases, safety documents, schedules, budgets, locations and photographs, crew and client details, chat messages and files. This is the work. It is held so it syncs between your devices and reaches the people you share it with. | You and the people you work with. |
| The address your requests come from | To limit how many sign-up and sign-in emails one machine can cause, and in server logs for a short time, to find faults. | Your connection. |
That is all of it. There is no advertising, no analytics service, no tracking of what you do in the app, and nothing is sold or given to anybody for their own use. Apple may collect crash reports if you have allowed that on your device; those go to Apple under Apple's terms, not to us.
2. Where it is held
Your devices keep a full copy of your own work. Nothing on a device is sent anywhere unless you sign in and share it, and Wrangle works with no account at all.
Once you sign in, your account and the work you sync are held on a server run by Couch Kumara. Today that server is in New Zealand. We are moving it to Cloudflare, whose servers are outside New Zealand. When that happens, your information will be stored by Cloudflare on our behalf, in the region we choose. We will say here which region it is held in once the move is made, and we will tell you before it happens.
Sending information overseas is something the Privacy Act (principle 12) only allows where the recipient is bound to protect it to a standard comparable with New Zealand's. Cloudflare is bound by its agreement with us to do that, and only ever stores and serves the information; it does not read or use it. The Australian Privacy Principles require the same care (principle 8), and we take it.
Invoices, quotes, budgets and your company's bank details never reach the server at all. They live on your devices only. If you keep your store in iCloud, that copy is under Apple's terms and your Apple ID.
3. Who can see what
Sharing in Wrangle is deliberate and narrow. Nobody sees anything of yours unless you, or somebody on your team, hands it to them.
- Your team sees the team's productions and what is attached to them. Your roster and client list travel to the team only if a team leader turns that on; it is off to begin with.
- A collaborator, somebody outside your team who has been handed a job, sees only the specific records shared with them, and only what the sharer chose to send along with each one. They cannot see that other productions exist.
- Invoices and quotes are never shared with anybody, by any route. The server refuses them.
- People you work with can see your card (your name, email, phone and company, as you wrote them) because they are on a team or in a conversation with you. Nobody else can look you up.
- Couch Kumara can see the shape of the service in order to run it: how many accounts, which teams exist, who is on them, when somebody last signed in. We do not open your productions unless you ask us to, to fix a problem, and we tell you when we have.
4. Information you enter about other people
When you put a crew member's phone number, a performer's address, or a client's details into Wrangle, you are collecting personal information about them. That makes you responsible for it under the Privacy Act (or the Australian Privacy Act, if that is where you are). In plain terms:
- Collect what the job needs and no more.
- Tell people what you are collecting and why, in the ordinary way a producer does: on the release, on the contract, at the booking.
- Share it only with the people who need it for the job. Wrangle's sharing controls are built for exactly this; use them.
- If somebody asks you what you hold about them, or asks you to correct it, do that. Wrangle lets you edit or delete any record.
- Delete it when you no longer need it. Erasing a production erases it from the server and from every device it was shared with the next time they sync.
We hold this information as your agent. We will not use it for anything of our own, we will not disclose it except as this policy says or the law requires, and we will help you meet a request from somebody it is about.
5. Who else handles it
A small number of companies handle information on our behalf so that Wrangle works. Each one gets only what its job needs.
| Who | What they get | Why |
|---|---|---|
| Cloudflare | Everything held on the server, once the move in section 2 has happened; DNS for wrangle.nz today. | Storage and delivery. |
| Apple | A device token and the text of each notification you have turned on (for example, "Ana shared Kumara Ad with you"). | Push notifications. |
| Apple and Google | Your identity, if you choose to sign in with them. They tell us who you are; we keep your name and email and nothing else from them. | Signing in. |
| Google Workspace | The address and content of each email Wrangle sends: confirmations, sign-in links, invitations, and contracts or releases you send for signature. | Sending email. |
The app on your device also talks directly to a few services, without going through us: Apple's MapKit when you type an address, MetService for weather on a call sheet, frankfurter.app for an exchange rate on a budget, and Dropbox, Google Drive or Frame.io if you connect a folder to a production. Those requests are between your device and them, under their terms.
6. How long it is kept
- Your account and what it holds: until you erase it. Erase Account is in your profile, in the app and on the web. It removes your account, your sessions and devices, and any team you are the only leader of, including the server's copy of that team's work. Teams you merely belong to are left alone.
- Your productions: until you delete them, or the team they belong to is wound up.
- Sign-up requests that were never confirmed: a day.
- Sessions: a year from sign-in, or until you sign out.
- The record of your agreement: as long as your account exists.
- Server logs: 30 days.
- Backups: none today. The server holds one copy of your information and your devices hold their own, so nothing of yours survives a backup after you erase it, because there is no backup for it to survive in. When we move the server to Cloudflare we will start keeping backups, and we will say here how long they are kept and how long an erased account can linger in one before that move happens.
Nothing on your own devices is touched by any of this. Your work stays where it was made.
7. Seeing, correcting and erasing your information
You have the right to see the personal information we hold about you and to ask for it to be corrected. Most of it you can see and change yourself: your profile in the app or on the web holds your name, email, phone, company, picture and password. For the rest, which is the sessions, the agreement record and anything you cannot reach, email gidday@wrangle.nz from the address on your account and we will answer within 20 working days, which is what the Privacy Act allows; usually it will be a good deal sooner. There is no charge.
If you are asking about information a Wrangle customer entered about you, because you were crew on their shoot or signed their release, ask them. They are the agency responsible for it, and we will help them answer you.
You can erase your account at any time, from your profile. Section 6 says what that does.
8. Keeping it safe
Everything travels over encrypted connections. Passwords are hashed and never stored. Sign-in links and confirmation links work once and expire. Access to the server is limited to the people who run it. Sharing is enforced on the server, not trusted to the app, so a collaborator's app cannot ask for more than it was given.
Chat messages are stored in plain text on the server, so that they can be searched and delivered to a phone that was off. They are not readable by anybody outside Couch Kumara, but they are not end-to-end encrypted.
9. If something goes wrong
If we become aware of a privacy breach that is likely to cause serious harm, meaning somebody has got at information they should not have, we will tell the Office of the Privacy Commissioner and the people affected as soon as practicable, as the Privacy Act requires. Where the information is something you entered about other people, we will tell you promptly so that you can meet your own obligation to them, and we will help you do it. For Australian customers, the same applies under the Notifiable Data Breaches scheme, and we will help you notify the OAIC where that is required.
10. Children
Wrangle is a tool for people who make video for a living. It is not for children, and we do not knowingly hold an account for anybody under 16. If a production involves a child, a young performer say, their details are collected by you, with the consent of their parent or guardian, in the ordinary way; Wrangle simply holds them for you as described in section 4.
11. Australian customers
If you are in Australia, the Australian Privacy Act 1988 and its Australian Privacy Principles apply to you as the agency collecting your crew's and talent's details, and this policy is meant to be consistent with them. Two things worth knowing: the APPs require you to have a privacy policy of your own if you are covered by the Act (most businesses with a turnover over A$3 million are), and the Notifiable Data Breaches scheme has its own thresholds and a 30-day assessment window. The Office of the Australian Information Commissioner is the place to complain if you think we have got something wrong and we have not put it right.
12. Changes to this policy
When this policy changes, the edition at the top changes with it. We will tell you in the app and by email to the address on your account before the new edition takes effect, and the app will ask you to agree to it the next time you open it. The previous edition stays available on request.
13. Complaints
If you think we have handled your information badly, tell us first: gidday@wrangle.nz. If we do not put it right, you can complain to the Office of the Privacy Commissioner at privacy.org.nz, or, in Australia, the Office of the Australian Information Commissioner at oaic.gov.au.