Draft – not yet reviewed or published
This page is a placeholder. It exists so links inside the app resolve to something real, rather than a dead link – it is not the notice Life Laundry customers should rely on yet.
Most of this notice now describes what the app actually does. What is left is business detail nobody but Life Laundry can supply – the agreed retention periods – and a review. Those are marked below.
Before this can go live, it needs:
Life Laundry UK (Jane & Alicia), 57 Ouzlewell Green, Lofthouse, Wakefield, WF3 3QP. We decide how your data is used, and we are registered with the Information Commissioner’s Office (ICO), reference ZC274236.
When you send an enquiry. Your name, and whichever of email or phone you choose to give us – at least one, because otherwise we cannot reply. Which service you are asking about, roughly how big the job is, your area or postcode, whatever you tell us in your own words, and how you would prefer to be contacted. Optionally, how you heard about us, and up to four photos. We use this to reply to you and quote for the work.
If you create an account. Your name and email address, and your basket and saved lists (see below). Accounts are optional – you can use the whole app and send an enquiry without one. An account exists so your basket and lists follow you between devices, and so you can get your data or delete it yourself.
If you use Challenges. Which jobs you have ticked off. Without an account the ticks stay on your phone. With an account they are kept with it, so you can carry on from another phone.
If you buy something – a Challenge, a premium Life Load or the yearly pass. You pay on Stripe’s secure payment page: your card details go to Stripe and never reach Life Laundry. We keep a record of what you bought, when, how much you paid and Stripe’s reference for the payment, so we can unlock it for you on any phone. Stripe emails you the receipt. Buying needs an account.
If you join the mailing list. Your email address and a record of when you agreed, kept so we can show the agreement was given. You can leave at any time.
TODO: state the lawful basis for each of the above in the review. Expected: the enquiry and account on the basis of taking steps at your request before entering a contract, the mailing list on consent, and the abuse limits below on legitimate interests. Purchases: contract (we need the record to give you what you bought); keeping purchase records after an account is deleted: legal obligation (tax and accounting records). Confirm rather than assume.
Without an account, the app keeps everything on your device. Your basket (everything you type into it, how it’s sorted, what you’ve ticked off or starred) and your Challenge ticks live only on your phone. They are not sent to us.
Alongside it the app keeps some small notes on your device, so it works properly and doesn’t ask you the same thing twice. They stay on your phone and are not sent to us:
If you create an account, your basket, saved lists and Challenge ticks are also kept with your account in our database, so they follow you to another phone and aren’t lost if yours is. That’s the point of an account, and it’s why having one is your choice. They’re private to you: they don’t appear anywhere in Jane and Alicia’s everyday screens. The one place they can see them is the tool they use to answer a request about someone’s data – for example when you ask for a copy or for your data to be deleted – and they only use it for that. They’re included when you download your data, and removed when you delete your account.
Four things are counted in aggregate, with nothing recorded that identifies a person: how many times each suggested idea has been tapped, how many people use the app installed to their home screen rather than in a browser, how many enquiries arrive by area, by service and by month, and – if you have an account – how many people add to, finish or leave things in each basket category (for example “Health & wellbeing”). That last one is worked out from the categories only, never from what you typed: a category with fewer than 10 people in it is grouped with the others, and the numbers of things are rounded. These tell Life Laundry which suggestions are useful, what people need help with and where their customers are. None of it can be traced to an individual. It isn’t shared, with one exception: Jane and Alicia can ask for a short written summary of these counts, which is written by an AI service (see Who else is involved). Only the counts go to it – never a name, contact detail, basket or enquiry.
You can turn these counts off. Tap the round account button at the top right, then Privacy & your data, and switch off Help improve the app. Nothing is counted from your device after that, and you do not need an account to do it. If you are signed in, the choice is kept with your account too, and your basket is left out of the category counts.
Storing or reading anything on your device is covered by PECR as well as UK GDPR. Since 5 February 2026 first-party counts of this kind do not need opt-in consent, provided there is an easy way to object – which is what that switch is.
TODO for the review: confirm this reading of the statistical-purposes exception added by the Data (Use and Access) Act 2025, and that a switch in the account sheet (the round button at the top right, open to everyone, signed in or not) is an adequate way to object. The small notes on your device listed above (build 426: the full list, about fifteen in all) are relied on as either strictly necessary or covered by the appearance exception – worth confirming each, in particular the visit count and first-visit date, which decide when the install suggestion and announcements show.
Supabase stores the data described above and runs the accounts system. The database is hosted in the United Kingdom, so your data stays in the UK.
Mailjet delivers the sign-in emails that let you get into your account. It receives your email address and the sign-in code, and nothing else.
Cloudflare hosts the site itself – the pages and files your phone downloads to run the app.
Anthropic provides the AI service (Claude) that writes the summary of the counts described above, when Jane or Alicia ask for one. It receives those counts and nothing about any person, and its terms for business use say it doesn’t use them to train its models.
These four process data on Life Laundry's instructions and do not use it for anything of their own.
Stripe takes the payment if you buy something in the app. Stripe receives your card details, your email address (for the receipt) and what you are buying, and tells us when the payment has gone through. For some things, such as preventing fraud and meeting financial regulations, Stripe decides for itself how it uses that data; its own privacy notice is at stripe.com/gb/privacy.
TODO (before payments are switched on): confirm the Stripe entity Life Laundry contracts with and the international transfer position (Stripe may process data outside the UK, under its data processing agreement and approved safeguards); add Stripe to the record of processing.
TODO: name the mailing-list platform once a campaign actually goes out – the list is collected here and exported manually, so no third party holds it yet. Confirm Mailjet’s contracting entity and where it processes (it is French, part of Sinch – check its data processing agreement and any transfers outside the UK/EEA), and that the sign-in emails really do go through Mailjet on production. Confirm Anthropic’s entity and that the API’s commercial terms (no training on business data, retention) are as described; it is in the USA, so note the transfer position, even though only counts go to it. Whether Cloudflare’s logs count as processing worth naming. (Added 12 Oct 2026, deep review SEC-03.)
If you have an account, both are in the app: tap the round account button at the top right, then Privacy & your data.
If you enquired without creating an account, there is no sign-in to do it through, so email enquiries@lifelaundryuk.com and we will find and remove your data. Tell us the email address and phone number you enquired with, so we can find every enquiry; we may ask you to confirm them, so we do not delete the wrong person's records.
What deletion removes. Your account, your basket, your saved lists, your Challenge ticks, your details, your consent and mailing-list records, and any enquiry you have sent us – including any photos attached to it. We find enquiries by email address and by phone number, so if you contacted us from another email, or gave only a phone number, tell us those too. Apart from the two records described below, nothing about you is kept. If we are part-way through a conversation about a job, that conversation goes too. It cannot be undone once it is done.
What we keep. A record that a deletion request was made and when it was completed, with your email address and account reference removed from it. This is kept so we can show requests are honoured; it cannot be traced back to you.
If you bought anything, we also keep the record of each purchase – what it was, when, how much, and Stripe’s payment reference – for six years, because the law requires businesses to keep sales records. Your name and email are removed from it, and it can no longer unlock anything.
TODO: confirm the six-year period with the accountant (it depends on how the business is set up), and that keeping Stripe's payment reference is needed for it.
You can also ask us to correct anything that is wrong, or object to how we use your data. If you are unhappy with how we handle a request, you can complain to the Information Commissioner's Office at ico.org.uk.
Why we ask for them. A photo of the space helps us quote accurately without visiting first. They are optional – you can send an enquiry without any, and it will be answered the same way.
Location data is removed before they leave your phone. Photos taken on a phone usually carry hidden information, including the exact GPS coordinates of where they were taken – which, for a photo of a room in your home, is your address. The app redraws every photo in your browser before it is sent anywhere, which strips that information out. It also makes the file smaller, so it uploads faster. The version we receive has no location data in it.
How long we keep them. Only as long as they are useful for the job they were sent for. Once a job is marked as finished, we are prompted to delete its photos, and we can delete the photos from any enquiry at any time without deleting the enquiry itself. They are also deleted if you ask us to delete your data, along with everything else.
TODO: set a backstop retention period for photos attached to enquiries that never reach “finished” – an enquiry that goes quiet still has photos attached to it. Deleting at the end of a job is prompted, not automatic, so it depends on someone acting on it. A fixed maximum age would remove that dependency.
Who can see them. Only Life Laundry. Photos are held in private storage – they are not published, not shared, and not used for anything other than quoting and carrying out your job. We will never use a photo of your home for advertising or on our website without asking you separately first.
To stop the enquiry form being used to send automated junk, we limit how many enquiries can be sent from one internet connection in a short period.
We do not store your IP address. Your connection's address is scrambled into a code the moment an enquiry arrives, and only that code is recorded. We never turn the code back into an address or use it for anything else – it is only used to count how many enquiries have come from the same connection recently. Codes older than 24 hours are no longer used, and are deleted the next time anyone sends an enquiry.
Why we are allowed to do this. The law calls this “legitimate interests”: we have a real need to keep the form working for genuine customers, and to stop it being flooded with junk. We have weighed that against your privacy and think it is fair, because we record only the scrambled code, use it for nothing else, and keep it for no longer than the count needs. You have the right to object to this. If you want to, email enquiries@lifelaundryuk.com.
TODO: the paragraph above is a draft (20 Sep 2026), not a confirmed position. Confirm in the solicitor / ICO review, and keep a short written legitimate interests assessment (the ICO expects one) – the reasoning above is its starting point.
TODO: the sections above are accurate descriptions of the app and can be kept. What remains is business detail and judgement rather than description: how long enquiries and account data are kept, the lawful bases, and the PECR reading above. None of these can be answered from the app – they need Jane and Alicia, and a solicitor or ICO guidance.