1. Introduction

Sleepless Tradesman ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web service (collectively, the "Service").

Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Account Information: When you create an account, we collect your name, email address, and authentication credentials through Google Sign-In.
Profile Information: Your trade profession, business name, address, phone number, and business email.
Job Information: Details about jobs you plan, including client names, addresses, job descriptions, and photos you upload.
Quotes and Invoices: Information contained in quotes and invoices you create, including client details and pricing.
Support Communications: Messages you send through our support chat feature.

2.2 Information Collected Automatically

Usage Data: Information about how you use the Service, including features accessed and actions taken.
Device Information: Device type, operating system, and browser type when accessing our web service.
Location Data: With your permission, we may collect location data to provide location-specific features such as local regulations and job location tagging.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Service
Process and complete transactions
Generate AI-powered job plans, quotes, and invoices
Provide location-specific regulatory compliance information
Send you technical notices, updates, and support messages
Respond to your comments, questions, and customer service requests
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent transactions and other illegal activities

4. AI and Data Processing

Our Service uses artificial intelligence (AI) to provide features such as job planning, cost estimation, and regulatory compliance guidance. When you use these features:

Your job descriptions, photos, and related information are processed by our AI systems
We use Anthropic's Claude AI to power our assistant features, including reading receipt images to extract expense details
Your data may be sent to third-party AI providers for processing, subject to their privacy policies
We do not use your personal job data to train AI models

4a. Accounting and HMRC (Making Tax Digital)

If you use our Accounting features, we process financial and tax information so you can keep digital records and prepare or submit quarterly updates under HMRC's Making Tax Digital for Income Tax:

Income derived from your invoices, expenses you record, and receipt images you upload
If you choose to connect your HMRC account, we process your National Insurance number and business details returned by HMRC, and the figures you submit
We connect to HMRC using OAuth 2.0. You sign in on HMRC's own pages — we never see or store your Government Gateway user ID or password. HMRC access and refresh tokens are stored encrypted (AES-256-GCM) and can be revoked at any time by disconnecting in the app
We send HMRC the data required by the Making Tax Digital service, including fraud-prevention header information required by law. We do not share your tax data with any other third party

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers: With third-party vendors who perform services on our behalf, such as payment processing (Stripe), cloud hosting (Vercel), and AI processing (Anthropic).
Legal Requirements: If required by law or in response to valid requests by public authorities.
Business Transfers: In connection with any merger, sale, or transfer of company assets.
With Your Consent: When you have given us explicit permission to share your information.

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

Encryption of data in transit using HTTPS/TLS
Secure cloud infrastructure with industry-standard protections
Regular security assessments and updates
Access controls limiting who can access your data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

You may request deletion of your account and associated data by contacting us at support@sleeplesstradesman.com.

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate personal information
Deletion: Request deletion of your personal information
Portability: Request a copy of your data in a portable format
Objection: Object to certain processing of your personal information
Withdrawal of Consent: Withdraw consent where processing is based on consent

You can exercise two of these rights directly in the app at any time: download a copy of your data (Settings → Export My Data) and permanently delete your account and data (Settings → Delete Account). For anything else, contact us at support@sleeplesstradesman.com.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

10. International Data Transfers

Our infrastructure and some of our service providers (including hosting and our database) are located in the United States. This means your information is transferred to and processed outside the UK and European Economic Area.

Where we transfer personal data outside the UK, we rely on appropriate safeguards recognised under UK data protection law — such as the UK Extension to the EU–US Data Privacy Framework (the "UK–US Data Bridge") where the recipient is certified, and/or the International Data Transfer Agreement or Standard Contractual Clauses included in our providers' data processing agreements.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: support@sleeplesstradesman.com
Website: https://sleeplesstradesman.com