Privacy Notice

ClaimMate is operated by Uncomplicated Solutions, trading as ClaimMate, based in the United Kingdom. Uncomplicated Solutions is the data controller for the personal data described here — we decide what data is collected and why. You can reach us through the support link in the app.

• Account data (email address, login credentials, sign-in provider) — to create and secure your account. Legal basis: performance of our contract with you.
• Your records (receipt images, merchant, dates, amounts, categories, business-use percentages, notes, the trade you tell us and the answers you confirm) — to provide the service. Legal basis: performance of our contract.
• Support messages — to answer your questions. Legal basis: contract and our legitimate interest in supporting customers.
• Usage and device data (feature events, IP address, browser and device information, error logs) — for security, fraud prevention, reliability and improving the product. Legal basis: our legitimate interests. Usage events never contain receipt contents.
• Subscription status (plan, renewal date, payment state received from Paddle) — to give you access to the plan you bought. Legal basis: contract.

Card details are never collected or stored by us — Paddle handles payment data as described below.

• Paddle.com Market Limited — our Merchant of Record and reseller. Paddle handles the sale, checkout, payments, subscription management, invoicing, tax compliance and refunds, and receives the data needed for that.
• Service providers — hosting and database infrastructure, our AI provider (which reads receipt images and text), error monitoring and support tooling. They act on our instructions under contract.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

Your receipts and records are never sold, and are not used to train AI models.

Receipt files live in private storage and are never publicly accessible. When the app shows you a receipt it creates a short-lived signed link that expires. Database access rules scope every record to your own account. If you create a share link for your accountant, only the summary records you have confirmed are visible, the link expires, and you can switch it off at any time.

Some of our providers process data outside the UK and EEA. Where that happens we rely on UK adequacy regulations or on standard contractual clauses with appropriate safeguards.

We keep your account and records for as long as your account is open, and for up to 90 days after you delete your account or it is closed, so accidental deletions can be reversed. Billing records held by us are kept for 7 years to meet UK tax and accounting obligations. Usage and error logs are kept for up to 24 months. After those periods data is deleted or anonymised.

We use appropriate technical and organisational measures: encryption in transit and at rest, private storage buckets, row-level access rules that scope data to each account, least-privilege access for administrators, and monitoring for unusual activity. No system is perfectly secure, so please use a strong, unique password.

We use essential cookies and local storage to keep you signed in and to remember your preferences. Paddle sets cookies needed to run checkout. We do not use advertising cookies. You can clear or block cookies in your browser, though the app will not work properly without the essential ones.

Under UK GDPR you have the right to access your data, correct it, have it erased, restrict or object to processing, receive a portable copy, and withdraw consent where we rely on it. Use Settings to export everything, delete individual receipts, or delete your account and all data, or contact us and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).