Last updated: 17 July 2026
These are the commitments behind how ComplyWithMe handles data. The detail lives in our Privacy Policy; this page is the plain-English promise set.
Your compliance records live on your device. You can use the app's day-to-day features without signing in and without your records leaving your phone.
The app does not use any third-party artificial-intelligence service, and your property, tenancy and compliance records are never sent to any AI provider. We do not train AI models on your data — ours or anyone else's.
On your device, records are encrypted at rest (AES-256-GCM, with the key held in your device's hardware keystore). In transit, everything uses TLS. Cloud backups are encrypted at rest on our UK infrastructure.
A cloud backup exists only if you sign in. You can delete it at any moment — deleting your account removes the backup first (see Delete account). If a subscription lapses you keep read-only access to what you stored: we never hold your records to ransom.
For your account and the data we hold about you, Steleo Publishing Ltd is the data controller. For the personal data you record about other people — tenants, occupiers, Right to Rent outcomes — you are the controller: you decide what to record, and it is your responsibility to have a lawful basis and to tell those people how their data is used. Where those records reach our cloud backup, we store them on your instructions, protect them as this page describes, and never use them for our own purposes.
We collect what the service needs and no more. We do not sell personal data, we do not run advertising, and we do not track you across other sites or apps (see the Cookie Policy — this website sets no cookies at all).
Our core infrastructure runs in London (database and API). The limited providers that touch personal data are: Clerk (sign-in; may process account data outside the UK under Standard Contractual Clauses), Stripe (payments — we never see your card details), Supabase (London — cloud backup and entitlements), Google Cloud (London — our API), and Netlify (this website and its waitlist form). We will keep this list current as the service evolves.
Delete your local records in Settings at any time; delete your account and cloud data in Settings or via the deletion page. What the law makes us keep (for example, payment records for tax) we keep only as long as required. Details and timescales are in the Privacy Policy.
Steleo Publishing Ltd (company no. 11891029) is registered with the Information Commissioner's Office (registration ZB969283). Questions or concerns: privacy@complywithme.co.