Last updated: 27 February 2026
ComplyWithMe stores your property, tenancy and compliance records on your device. The App's record-keeping features use no AI; the optional Ask ComplyWithMe feature sends only the question you type and a short position summary to Anthropic to phrase the answer — your stored records are never sent. If you choose to scan a certificate with the optional AI scan, that photograph is sent to our server and to Anthropic to read the dates from it; it is not stored by either, nothing is saved until you check and confirm the result, and the photo is not used to train AI models.
If you sign in, your records are also backed up to your secure cloud backup (hosted on Supabase) so you can restore them on a new phone. Signing in uses Clerk, and subscribing uses Stripe; each processes only the data needed for that purpose under its own privacy policy. If you choose to build a court bundle, the App opens BundleCreator.co in your browser — you remain in control of what you send there.
You can use the App’s day-to-day compliance features without signing in, and without your records leaving your device.
ComplyWithMe is operated by Steleo Publishing Ltd, a company registered in England and Wales (company no. 11891029), ICO registration ZB969283. Contact us at: info@complywithme.co
This policy covers two distinct roles:
Part A — data we control. For your own personal data — your account, sign-in, billing and support information — Steleo Publishing Ltd is the data controller. Sections 2.2–2.4 and 3–10 below describe this processing.
Part B — data we process on your instructions. For the personal data you record about other people — tenants, occupiers, Right to Rent outcomes, tenancy logs — you are the data controller: you decide what to record, you need a lawful basis, and you are responsible for telling those people how their data is used. Where those records reach our cloud backup or sync, Steleo acts as your processor: we store and process them strictly on your instructions, protect them as described in this policy and our Data Principles, and never use them for our own purposes. The data-processing clauses in Schedule 1 of our Terms of Use govern this processing (UK GDPR Article 28). If you never sign in, those records stay on your device and never reach us at all.
The majority of your compliance data is stored locally on your device using on-device storage. This data is not transmitted to our servers and remains entirely under your control:
When you create an account or sign in, Clerk processes your email address and authentication details to manage your account securely. The App's record-keeping features use no AI. The optional Ask ComplyWithMe feature sends the question you type and a short summary of your recorded position to Anthropic (our AI provider) to phrase the answer — email addresses, phone numbers and street addresses are removed from the question first, your stored records are not sent, and your questions are not used to train AI models. If you choose to use the optional certificate scan, the photograph you take is sent to our server and to Anthropic solely to read the certificate's dates; the photo may show details printed on the certificate (such as the property address or the engineer's name), is not stored by us or by Anthropic, is not used to train AI models, and nothing is recorded in the App until you check and confirm the result.
If you sign in, the App backs up a copy of your local records (your property, tenancy and compliance data) to a secure cloud backup hosted on Supabase, so you can restore them if you change or lose your phone. The backup is scoped to your account and encrypted in transit. You can delete it at any time by deleting your account in Settings, which removes the cloud backup before deleting your account. If you never sign in, no backup is made and your records stay on your device.
Subscriptions are purchased on the web at complywithme.co and processed by Stripe — there are no purchases inside the app. We do not receive or store your payment card details. These providers share only the information needed to verify your subscription status.
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only in the following circumstances:
Current subprocessors (for Part B processing, you give general authorisation to this list; we will update it before adding or replacing a subprocessor): Clerk (authentication — may process account data outside the UK under Standard Contractual Clauses) · Stripe (payments) · Supabase (London — cloud backup and entitlements) · Google Cloud (London — our API) · Anthropic (US — AI phrasing for Ask ComplyWithMe, under appropriate international transfer safeguards) · Netlify (this website and its waitlist form).
Some features also look up public registers (postcodes.io for councils, the GOV.UK EPC register, Companies House) using the property or company details you enter — read-only lookups of public data.
How we obtained your details, and why. If you run a trade business, you may appear in our trade-business directory. We compiled these listings from publicly available sources — public registers and registries (for example Companies House), trade and competent-person scheme public registers, and public business directories. We did not obtain your details from you directly, so this section explains that processing (UK GDPR Article 14).
What we hold. Your business name, the trade categories you offer, your service area, and your publicly listed business contact details (business telephone, business email, website). Where a rating is shown, it is an aggregate score drawn from public sources ("External Public Data") — it is not a ComplyWithMe rating, and we do not copy the underlying review text.
Why (our lawful basis). We rely on our legitimate interests (UK GDPR Article 6(1)(f)) — to operate our trade-business directory (a marketplace that helps landlords find tradespeople in their area for compliance work, and to give listed businesses free visibility to prospective customers). We have carried out and documented a Legitimate Interests Assessment; you may request a summary.
Your rights. You can ask us to remove your listing at any time, and we will suppress it — see "Remove my listing" or email info@complywithme.co. You also have the right to access the data we hold about you, to have it corrected, and to object to or restrict its processing. If you object, we will stop listing you unless we can show compelling legitimate grounds that override your interests (we do not anticipate any for a routine listing). You may complain to the Information Commissioner's Office (ico.org.uk).
How long we keep it. Only while the listing serves this purpose. If you ask us to remove it, we add your business to a suppression list so it is not listed again when we next refresh from public sources. Steleo Publishing Ltd (company no. 11891029) is the controller for this processing. ICO registration ZB969283.
Our sign-in and payment providers (such as Clerk and Stripe) may process limited account data on servers located outside the UK and EEA, and Ask ComplyWithMe questions are processed by Anthropic on servers that may be located outside the UK and EEA. These providers maintain Standard Contractual Clauses (SCCs), the UK Addendum and other appropriate safeguards for international data transfers as required by UK GDPR.
Under UK GDPR, you have the following rights:
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Any data transmitted to our sign-in and payment providers is encrypted in transit using TLS 1.2 or higher. Local data is stored using the device’s built-in secure storage mechanisms.
ComplyWithMe is designed for use by landlords managing their own properties. The app is not intended for use by persons under the age of 16. We do not knowingly collect personal data from children under 16.
We may update this Privacy Policy from time to time. We will notify you of significant changes via the What’s New screen within the app. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
Steleo Publishing Ltd (company no. 11891029)
Registered office: 167–169 Great Portland Street, London W1W 5PJ, United Kingdom
info@complywithme.co
For complaints, you may also contact the ICO: ico.org.uk