Privacy Policy

Last updated: May 2026

Clean Bills ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR).

1. Who we are

Clean Bills is a UK-based bill reminder service. We are the data controller for the personal data we collect. You can contact us at hello@cleanbillsapp.com.

2. What data we collect

When you sign up for Clean Bills, we collect:

3. How we use your data

We use your data to:

We do not use your data for marketing, profiling, or advertising. We do not sell your data.

4. Legal basis for processing

We process your data on the following legal bases:

5. Data sharing

We share your data only with the following third-party processors:

All third-party processors are contractually bound to protect your data appropriately.

6. Data retention

We retain your account data for as long as your subscription is active and for up to 6 years after closure for legal and accounting purposes. Reminder logs are retained for 12 months. You may request earlier deletion — see Your Rights below.

7. Your rights

Under UK GDPR, you have the right to:

To exercise any of these rights, please email us at hello@cleanbillsapp.com. We will respond within 30 days.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure signed access tokens, and access controls. No data transmission over the internet is entirely secure — if you believe your account has been compromised, please contact us immediately.

9. Cookies

We use only essential cookies required for the service to function. See our Cookie Notice for details.

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email. Continued use of the service after notification constitutes acceptance of the updated policy.