Effective Date: 6 June 2026 · Last Updated: 6 June 2026
Exerevno Limited ("Exerevno", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect through the Exer-labs website at exer-labs.app (the "Website"), how we use and protect it, and the rights you have in respect of it.
Exer-labs is the product studio of Exerevno. The Website is an informational site that describes the studio and links to the individual applications we build.
This policy covers the Website only. Each application we publish (for example, Day Old) is governed by its own separate privacy policy, which you should read when you use that application. The Day Old privacy policy is available at exer-labs.app/day_old/privacy-policy/.
By using the Website or submitting the contact form, you acknowledge that you have read and understood this Privacy Policy. It should be read alongside our Terms of Use.
Exerevno Limited acts as the data controller in respect of personal information processed through the Website. Our contact details are in Section 12.
The Website provides a contact form so you can send us an enquiry. When you complete and submit it, we collect:
Please only include in your message the information necessary for your enquiry. We ask that you do not send sensitive personal information (such as health, financial, government identifier, or special-category data) through the contact form.
The Website is hosted on Netlify, Inc. ("Netlify"), and the contact form is processed using Netlify Forms. When you submit the form, the data you entered is transmitted to Netlify, stored in our Netlify project, and a notification containing your submission is sent to us by email at info@exerevno.co.nz. To reduce spam, the form uses a hidden "honeypot" field and Netlify's automated spam filtering, which may process submission metadata for that purpose.
When you load the Website, Netlify's edge servers receive and process standard technical data necessary to deliver the page and maintain security, including:
Netlify processes this information to deliver content, apply caching, mitigate denial-of-service attacks, and maintain operational logs in accordance with its own privacy practices.
The Website uses the Inter typeface delivered via Google Fonts (operated by Google LLC). On load, your browser may request font files from fonts.googleapis.com and fonts.gstatic.com, which may expose your IP address and standard HTTP headers to Google's servers. After the fonts are cached by your browser, subsequent visits may not require further requests. Google has stated the Fonts API does not set cookies and is not used for advertising.
For users in the EEA, UK, or Switzerland, we rely on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Handling and responding to a contact-form enquiry | Consent (Article 6(1)(a)) — given when you tick the consent box — and/or our legitimate interests (Article 6(1)(f)) in responding to messages addressed to us and, where relevant, taking steps at your request prior to entering into a contract (Article 6(1)(b)). |
| Hosting, content delivery, and security logging (Netlify) | Legitimate interests (Article 6(1)(f)): delivering the Website and keeping it secure and available. |
| Spam filtering on the contact form | Legitimate interests (Article 6(1)(f)): protecting our systems and inbox from abuse and automated spam. |
| Loading fonts (Google Fonts) | Legitimate interests (Article 6(1)(f)): rendering the Website's interface correctly. |
Where we rely on consent, you may withdraw it at any time (this does not affect processing carried out before withdrawal). Where we rely on legitimate interests, we have balanced those interests against your rights and consider the processing proportionate; you may object at any time using the details in Section 12.
We use the information described above only to:
We do not use your contact details to send you marketing unless you have separately and expressly asked us to. We do not sell your personal information.
We do not sell, rent, or share your personal information for cross-context behavioural advertising. We share information only with the service providers below, and where required by law.
| Third Party | Purpose | Privacy Policy |
|---|---|---|
| Netlify, Inc. (United States) | Website hosting and global CDN; processing and storage of contact-form submissions (Netlify Forms); spam filtering | netlify.com/privacy |
| Google LLC (United States) — Google Fonts | Delivery of the Inter typeface via CDN | policies.google.com/privacy |
We may disclose information if required by law, court order, or governmental authority, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Exerevno Limited, our users, or the public.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of our assets, your information may be transferred to the successor entity. We will notify you of any such change and of any new privacy policy that applies.
We keep contact-form submissions and related correspondence only for as long as necessary to handle your enquiry and for a reasonable period afterwards to maintain a record of our dealings, resolve any follow-up, and comply with legal or accounting obligations — typically up to 24 months from our last contact with you, unless a longer period is required by law or to establish, exercise, or defend legal claims. After that, we delete or anonymise the data. Technical server logs held by Netlify are retained according to Netlify's own retention practices.
Our service providers are located outside some users' countries of residence:
By using the Website, you acknowledge that your information may be transferred to and processed in jurisdictions with different data-protection laws than your own.
Transfers from the EEA, UK, or Switzerland: where personal data is transferred to a country without an adequacy decision, we rely on each provider's appropriate safeguards, including the European Commission's Standard Contractual Clauses (2021/914) and the UK International Data Transfer Addendum, as published by that provider.
Transfers from New Zealand: where personal information is transferred outside New Zealand, we comply with Information Privacy Principle 12 of the NZ Privacy Act, including by selecting providers whose terms ensure comparable safeguards.
We implement reasonable technical and organisational measures to protect personal information, including:
info@exerevno.co.nz mailbox restricted to authorised Exerevno Limited personnel using multi-factor authentication; andNo method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
The Website is intended for a general, adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information through the contact form, please contact us at info@exerevno.co.nz and we will delete it. For users in the EEA where the applicable national digital-consent age is higher (up to 16 under Article 8 GDPR), we comply with the relevant national requirement.
Subject to applicable law, you have the rights to: access your personal data (Art. 15); rectification (Art. 16); erasure (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing based on legitimate interests (Art. 21); and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority (in the EEA) or the Information Commissioner's Office (in the UK). We will respond to verified requests within one month (extendable by two further months for complex requests under Art. 12(3)).
You have the right to request access to, and correction of, personal information we hold about you (Information Privacy Principles 6 and 7), and to complain to the Office of the Privacy Commissioner (www.privacy.org.nz).
California residents have the rights to know, delete, and correct personal information, to opt out of sale or sharing (we do not sell or share personal information), and to non-discrimination for exercising these rights. In the preceding 12 months we have not sold or shared personal information.
Contact us using the details in Section 12. We may need to verify your identity before acting on a request. You may nominate an authorised agent, in which case we may require proof of authority.
For any question, concern, or request relating to this Privacy Policy or your personal information, please contact us:
Exerevno Limited
Level 4, 125 Queen St, Auckland 1010, New Zealand
Email: info@exerevno.co.nz
Website: www.exerevno.co.nz
If you are in the EEA or UK and are not satisfied with our response, you may lodge a complaint with your local data protection authority (EEA — see edpb.europa.eu), the UK Information Commissioner's Office (ico.org.uk), or, in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz).
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above and, where changes are material, take reasonable steps to notify you. Your continued use of the Website after a change constitutes acceptance of the revised Policy.