Privacy notice

Who we are

Tidysum is run by Mark Wu Limited, company number 06463759, registered office Saunders House, c/o Sky Accountancy, 52-53 The Mall, London, W5 3TA (we, us). We are the controller of your personal data. You can contact us at hello@keptorganised.com.

What we collect

• Account details: your email address and password (handled by our sign-in provider), or your Google account name and email if you sign in with Google.
• Your profile: your trade type, income band, whether you work from home, and your accountant's name and email if you choose to add them.
• Your expenses: vendor, amount, date, description, category and the decisions you make on each. If you photograph a receipt, we read the details from it. We do not keep the receipt image after it has been read.
• AI records: what you ask Ask Tidysum, the expense text sent for categorisation, and the AI's answers, kept as an audit trail so you can see what the AI suggested and what you changed.
• Feedback you send us.
• Usage data: page views with a random session ID, page path, referrer, device type (mobile or desktop) and campaign tags in the link you arrived from. We do not use advertising trackers.
• Payment details are handled by Stripe. We receive your plan and subscription status, not your card number.

Why we use it, and our legal basis

• To provide the service you signed up for, including reading receipts and suggesting HMRC categories (contract).
• To take payment and keep our accounting records (contract and legal obligation).
• To keep the service secure and fix problems (legitimate interests).
• To understand how the site is used, using privacy-friendly analytics (legitimate interests).
• To read and reply to your feedback and emails (legitimate interests).

We do not currently send marketing emails from Tidysum. If that changes we will ask for your consent first.

AI processing

When you add a receipt or ask a question, the receipt image or text is sent to Anthropic's Claude API to read the receipt, suggest an HMRC category or answer your question. Under its Commercial Terms Anthropic may not train its models on this data, and it deletes API inputs and outputs within 30 days, except where the law or its usage policy requires longer.

AI suggestions are guidance, not tax advice. You review and approve every decision.

Who else handles your data

• Supabase: database, sign-in and sign-in emails. Located in London, UK.
• Anthropic: reads receipts and suggests categories. Located in the United States.
• Stripe: takes payments. Located in the EU, UK and US.
• Railway: hosts the Tidysum app. Located in the United States (San Francisco).
• Cloudflare: DNS and cookie-free website analytics. Global network.
• Resend: emails us the feedback you send. Located in the United States.
• Google: only if you choose Sign in with Google.

Where data leaves the UK we rely on the approved safeguards the UK allows for international transfers. We do not sell your data.

If you use the accountant export, the file is downloaded to your device and goes only where you send it. We do not email your accountant ourselves.

How long we keep it

We keep your data while your account is open and for 30 days after it closes, except records we must keep for accounting and tax law, such as payment records held by Stripe and us. You remain responsible for keeping your own tax records for as long as HMRC requires.

Your rights

You can ask to see, correct, export or delete your data, to restrict or object to how we use it, and to withdraw consent where we rely on it.

To delete your account and data, email hello@keptorganised.com from the address you signed up with and we will confirm and delete it within one month. We aim to reply to any other request within one month too.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies and browser storage

We use browser storage to keep you signed in and to hold a short-lived random session ID for our own analytics. Cloudflare Web Analytics does not use cookies.

Shared sign-in

Your Kept Organised account can be used across Kept Organised products. Each product keeps its own data in its own database area; subscriptions, feedback and basic analytics are held in shared tables labelled by product.

Changes

We will update the date at the top of this notice and tell you about material changes.