Legal

Privacy Policy

Last updated: 27 February 2026

How your data is handled.

ComplyWithMe stores your property, tenancy and compliance records on your device. The App does not use any third-party AI service, and your case data is not sent to any AI provider.

If you sign in, your records are also backed up to your secure cloud backup (hosted on Supabase) so you can restore them on a new phone. Signing in uses Clerk, and subscribing uses Stripe; each processes only the data needed for that purpose under its own privacy policy. If you choose to build a court bundle, the App opens BundleCreator in your browser — you remain in control of what you send there.

You can use the App’s day-to-day compliance features without signing in, and without your records leaving your device.

1. Who we are, and who is responsible for what

ComplyWithMe is operated by Steleo Publishing Ltd, a company registered in England and Wales (company no. 11891029), ICO registration ZB969283. Contact us at: privacy@complywithme.co

This policy covers two distinct roles:

Part A — data we control. For your own personal data — your account, sign-in, billing and support information — Steleo Publishing Ltd is the data controller. Sections 2.2–2.4 and 3–10 below describe this processing.

Part B — data we process on your instructions. For the personal data you record about other people — tenants, occupiers, Right to Rent outcomes, tenancy logs — you are the data controller: you decide what to record, you need a lawful basis, and you are responsible for telling those people how their data is used. Where those records reach our cloud backup or sync, Steleo acts as your processor: we store and process them strictly on your instructions, protect them as described in this policy and our Data Principles, and never use them for our own purposes. The data-processing clauses in Schedule 1 of our Terms of Use govern this processing (UK GDPR Article 28). If you never sign in, those records stay on your device and never reach us at all.

2. Data we collect and why

2.1 Data stored locally on your device

The majority of your compliance data is stored locally on your device using on-device storage. This data is not transmitted to our servers and remains entirely under your control:

Landlord profile: your name or business name, contact details, and any company number you enter.
Property records: property addresses, tenancy details, and the occupiers you record.
Compliance evidence: gas safety, electrical (EICR), EPC, deposit protection, Right to Rent and licensing details, with dates and references.
Deadlines: the due dates we calculate from your records, used to schedule local reminders.
App settings: your role, notification preferences, and theme preference.
Subscription status: your subscription tier and trial start date (stored locally, not on our servers).

2.2 Sign-in and account (Clerk)

When you create an account or sign in, Clerk processes your email address and authentication details to manage your account securely. The App does not use any third-party artificial intelligence service, and your property and tenancy records are not sent to any AI provider.

2.3 Cloud backup (Supabase)

If you sign in, the App backs up a copy of your local records (your property, tenancy and compliance data) to a secure cloud backup hosted on Supabase, so you can restore them if you change or lose your phone. The backup is scoped to your account and encrypted in transit. You can delete it at any time by deleting your account in Settings, which removes the cloud backup before deleting your account. If you never sign in, no backup is made and your records stay on your device.

2.4 Subscriptions and payments

Subscriptions are processed by Apple (App Store), Google (Google Play), or Stripe (for web subscriptions on complywithme.co). We do not receive or store your payment card details. These providers share only the information needed to verify your subscription status.

3. Legal basis for processing (UK GDPR)

Contract performance: processing necessary to provide the compliance management service you have subscribed to, including secure sign-in and payment.
Legitimate interests: error monitoring and service improvement, where this does not override your rights.

4. Data retention

Local compliance records: retained on your device until you delete them via Settings, or uninstall the app.
Cloud backup (Supabase): retained while you are signed in; removed when you delete your account in Settings.
Account data (Clerk): retained while your account is active; deleted when you close your account.
Subscription receipts: retained by Apple, Google or Stripe per their standard terms.

5. Data sharing and subprocessors

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only in the following circumstances:

Clerk: for secure sign-in and account management.
Supabase: to host your cloud backup when you are signed in (scoped to your account).
Apple, Google or Stripe: for subscription and payment processing, depending on how you subscribe.
Legal obligation: if required by law, court order, or to protect the rights and safety of others.

Current subprocessors (for Part B processing, you give general authorisation to this list; we will update it before adding or replacing a subprocessor): Clerk (authentication — may process account data outside the UK under Standard Contractual Clauses) · Stripe (payments) · Supabase (London — cloud backup and entitlements) · Google Cloud (London — our API) · Netlify (this website and its waitlist form).

6. International data transfers

Our sign-in and payment providers (such as Clerk and Stripe) may process limited account data on servers located outside the UK and EEA. These providers maintain Standard Contractual Clauses (SCCs) and other appropriate safeguards for international data transfers as required by UK GDPR.

7. Your rights

Under UK GDPR, you have the following rights:

Right of access: request a copy of the personal data we hold about you.
Right to erasure: use Settings to delete all locally stored data. For server-side data, contact privacy@complywithme.co.
Right to data portability: your compliance records are held on your device and can be reviewed in the App at any time.
Right to object: contact us to object to any processing based on our legitimate interests.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Data security

Any data transmitted to our sign-in and payment providers is encrypted in transit using TLS 1.2 or higher. Local data is stored using the device’s built-in secure storage mechanisms.

9. Children’s privacy

ComplyWithMe is designed for use by landlords managing their own properties. The app is not intended for use by persons under the age of 16. We do not knowingly collect personal data from children under 16.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the What’s New screen within the app. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

11. Contact us

Steleo Publishing Ltd (company no. 11891029)
Registered office: 167–169 Great Portland Street, London W1W 5PJ, United Kingdom
privacy@complywithme.co

For complaints, you may also contact the ICO: ico.org.uk