Data & Privacy
Your data belongs to you
We collect the minimum needed to run the service. We don't sell your data. We don't use it for advertising.
Effective: 1 May 2026 · Complies with UK GDPR & PECR
🔐 Short version: Account details (name, email) live on our servers. Invoices and business info live in your browser unless you have Pro history enabled. Payments are handled by Paddle — we never see your card details. You can delete everything at any time.
What data we collect
| Data type | Where stored | Why |
|---|---|---|
| Email address | Our servers (encrypted) | Login, activation codes, receipts |
| Display name | Our servers | Personalise your account |
| Login provider | Our servers | Google / Apple / email — authentication only |
| Subscription status | Our servers + Paddle | To know which features to unlock |
| Invoice content | Your browser (or our servers if Pro history is on) | Generate and store your invoices |
| Business name & logo | Our servers (Settings) | Auto-fill your invoices |
| Payment info | Paddle only — not us | We never see your card details |
| Usage analytics | Anonymised | Page views, feature usage — no personal identifiers |
| Error logs | Our servers (30-day retention) | Debugging — auto-deleted after 30 days |
Cookies
We use only essential cookies — no tracking, no advertising. We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers.
Third parties we share data with
- Paddle — your email, billing details, country (for payment processing & tax compliance)
- Google / Apple — OAuth token only if you sign in with them (for authentication)
- Lovable Cloud (hosting) — encrypted database storage for your account
Your rights under UK GDPR
- ✓ Right to access — request a copy of all data we hold on you
- ✓ Right to rectification — correct any inaccurate data
- ✓ Right to erasure — request full account deletion (completed within 30 days)
- ✓ Right to data portability — export your invoices and account data
- ✓ Right to object — opt out of any non-essential processing
Email privacy@yourhandybook.com to exercise any of these rights.