Last updated: 29 September 2026
ComplyWithMe stores your property, tenancy and compliance records on your device. The App's record-keeping features use no AI; the optional Ask ComplyWithMe feature sends only the question you type and a short position summary to Anthropic to phrase the answer — your stored records are never sent. If you choose to scan a certificate with the optional AI scan, that photograph is sent to our server and to Anthropic to read the dates from it; it is not stored by either, nothing is saved until you check and confirm the result, and the photo is not used to train AI models.
If you subscribe and sign in, you can back up your records to your secure cloud backup (hosted on Supabase) from Settings, so you can restore them on a new phone. Signing in uses Clerk, and subscribing uses Stripe; each processes only the data needed for that purpose under its own privacy policy. If you choose to hand a case to BundleCreator.co (a possession claim or a housing-disrepair defence), the App sends that case to BundleCreator, which is also provided by Steleo Publishing Ltd: the evidence checklist and case details, copies of the photos and documents you attached to the case (for example the tenant’s Letter of Claim, a surveyor’s report or photographs of the property’s condition), and a Repair and Maintenance Records PDF made from your maintenance log. Location data is removed from photos before they are sent. The files are stored securely on Supabase, encrypted in transit, under your account, so BundleCreator can build your bundle; they are kept for up to seven years and deleted sooner if you delete your account. Nothing is sent unless you choose to hand a case over.
You can use the App’s day-to-day compliance features without signing in, and without your records leaving your device.
ComplyWithMe is operated by Steleo Publishing Ltd, a company registered in England and Wales (company no. 11891029), ICO registration ZB969283. Contact us at: info@complywithme.co
This policy covers two distinct roles:
Part A — data we control. For your own personal data — your account, sign-in, billing and support information — Steleo Publishing Ltd is the data controller. Sections 2.2–2.4 and 3–10 below describe this processing.
Part B — data we process on your instructions. For the personal data you record about other people — tenants, occupiers, Right to Rent outcomes, tenancy logs — you are the data controller: you decide what to record, you need a lawful basis, and you are responsible for telling those people how their data is used. Where those records reach our cloud backup, sync or a BundleCreator hand-off, Steleo acts as your processor: we store and process them strictly on your instructions, protect them as described in this policy and our Data Principles, and never use them for our own purposes. The data-processing clauses in Schedule 1 of our Terms of Use govern this processing (UK GDPR Article 28). If you never sign in, those records stay on your device and never reach us at all.
The majority of your compliance data is stored locally on your device using on-device storage. This data is not transmitted to our servers, except when you choose to back it up or hand a case to BundleCreator (see section 1), and remains under your control:
When you create an account or sign in, Clerk processes your email address and authentication details to manage your account securely. The App's record-keeping features use no AI. The optional Ask ComplyWithMe feature sends the question you type and a short summary of your recorded position to Anthropic (our AI provider) to phrase the answer — email addresses, phone numbers and street addresses are removed from the question first, your stored records are not sent, and your questions are not used to train AI models. If you choose to use the optional certificate scan, the photograph you take is sent to our server and to Anthropic solely to read the certificate's dates; the photo may show details printed on the certificate (such as the property address or the engineer's name), is not stored by us or by Anthropic, is not used to train AI models, and nothing is recorded in the App until you check and confirm the result.
If you subscribe and sign in, you can back up a copy of your local records from Settings (your property, tenancy and compliance data) to a secure cloud backup hosted on Supabase, so you can restore them if you change or lose your phone. The backup is scoped to your account and encrypted in transit. You can delete it at any time by deleting your account in Settings, which removes the cloud backup before deleting your account. If you never sign in, no backup is made and your records stay on your device.
Subscriptions are purchased on the web at complywithme.co and processed by Stripe — there are no purchases inside the app. We do not receive or store your payment card details. These providers share only the information needed to verify your subscription status.
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only in the following circumstances:
Current subprocessors (for Part B processing, you give general authorisation to this list; we will update it before adding or replacing a subprocessor): Clerk (authentication — may process account data outside the UK under Standard Contractual Clauses) · Stripe (payments) · Supabase (London — cloud backup and entitlements) · Google Cloud (London — our API) · Anthropic (US — AI phrasing for Ask ComplyWithMe, under appropriate international transfer safeguards) · Netlify (this website and its waitlist form) · Plausible Insights OÜ (EU — cookieless website visit counts, no personal data).
Some features also look up public registers (postcodes.io for councils, the GOV.UK EPC register, Companies House) using the property or company details you enter — read-only lookups of public data.
How we obtained your details, and why. If you run a trade business, you may appear in our trade-business directory. We compiled these listings from publicly available sources — public registers and registries (for example Companies House), trade and competent-person scheme public registers, and public business directories. We did not obtain your details from you directly, so this section explains that processing (UK GDPR Article 14).
What we hold. Your business name, the trade categories you offer, your service area, and your publicly listed business contact details (business telephone, business email, website). Where a rating is shown, it is an aggregate score drawn from public sources ("External Public Data") — it is not a ComplyWithMe rating, and we do not copy the underlying review text.
Why (our lawful basis). We rely on our legitimate interests (UK GDPR Article 6(1)(f)) — to operate our trade-business directory (a marketplace that helps landlords find tradespeople in their area for compliance work, and to give listed businesses free visibility to prospective customers). We have carried out and documented a Legitimate Interests Assessment; you may request a summary.
Your rights. You can ask us to remove your listing at any time, and we will suppress it — see "Remove my listing" or email info@complywithme.co. You also have the right to access the data we hold about you, to have it corrected, and to object to or restrict its processing. If you object, we will stop listing you unless we can show compelling legitimate grounds that override your interests (we do not anticipate any for a routine listing). You may complain to the Information Commissioner's Office (ico.org.uk).
How long we keep it. Only while the listing serves this purpose. If you ask us to remove it, we add your business to a suppression list so it is not listed again when we next refresh from public sources. Steleo Publishing Ltd (company no. 11891029) is the controller for this processing. ICO registration ZB969283.
Our sign-in and payment providers (such as Clerk and Stripe) may process limited account data on servers located outside the UK and EEA, and Ask ComplyWithMe questions are processed by Anthropic on servers that may be located outside the UK and EEA. These providers maintain Standard Contractual Clauses (SCCs), the UK Addendum and other appropriate safeguards for international data transfers as required by UK GDPR.
Under UK GDPR, you have the following rights:
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Any data transmitted to our sign-in and payment providers is encrypted in transit using TLS 1.2 or higher. Local data is stored using the device’s built-in secure storage mechanisms.
ComplyWithMe is designed for use by landlords managing their own properties. The app is not intended for use by persons under the age of 16. We do not knowingly collect personal data from children under 16.
We may update this Privacy Policy from time to time. We will notify you of significant changes via the What’s New screen within the app. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
Steleo Publishing Ltd (company no. 11891029)
Registered office: 167–169 Great Portland Street, London W1W 5PJ, United Kingdom
info@complywithme.co
For complaints, you may also contact the ICO: ico.org.uk