Privacy Policy

Last updated: March 2026

Who we are

SlipMind is a UK-based sole trader business. The data controller for your personal data is the operator of this service, trading as SlipMind. Our contact email is hello@slipmind.co.uk.

What data we collect

When you join the waitlist, we collect your email address. When you create an account, we collect your name, email address, trade or profession, and tax year end date. When you use the product, we store the expense data you enter (amounts, merchants, dates, categories, notes), receipt images you upload, and usage data such as when you last logged in and whether you opened the weekly digest email.

Why we collect it and our lawful basis

We process your data on the following lawful bases under UK GDPR:

• Contract (Article 6(1)(b)): Account data, expense records, and receipt images are processed to provide the SlipMind service you have subscribed to: storing expenses, detecting missing proof, generating exports, and sending transactional messages (confirmations, account notices).
• Legitimate interests (Article 6(1)(f)): We send the weekly digest email to active subscribers as part of the service. You can opt out at any time. We also retain minimal usage data (last login, digest open status) to maintain service quality and detect abuse.
• Consent (Article 6(1)(a)): We do not send marketing emails to waitlist signups without your explicit consent.

We do not sell your data. We do not share your data with advertisers. We do not use your financial data to train AI models.

How we process receipt images

When you upload a receipt photo, we send the image to a third-party AI service (Anthropic's Claude API) to extract the merchant name, amount, date, and other details. The image is processed and the extracted data is returned to us. We store your receipt images in encrypted cloud storage (Supabase, EU region). Anthropic acts as a data processor on our behalf under a data processing agreement. Anthropic does not retain your images after processing and does not use them to train AI models.

Where your data is stored

Your data is stored on servers in the European Union (Frankfurt, Germany) via Supabase. Payment processing is handled by Stripe. Email delivery is handled by Resend. All providers act as data processors under data processing agreements and are UK/EU GDPR-compliant. No personal data is transferred outside the UK or EEA without appropriate safeguards.

How long we keep it

We keep your account data and expense records for as long as your account is active. If you delete your account, we delete your data within 30 days. Waitlist email addresses are held until you unsubscribe or request deletion, and no longer than 24 months from sign-up if you have not converted to a paid account. We may retain anonymised, aggregated data that cannot identify you.

Your rights under UK GDPR

You have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your data
• Portability: receive your data in a portable format
• Objection: object to processing based on legitimate interests
• Restriction: ask us to restrict processing in certain circumstances
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email hello@slipmind.co.uk. We will respond within one month.

Right to complain

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we are not handling your data lawfully. You can contact the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We would appreciate the chance to address your concerns directly before you contact the ICO.

Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. We do not use analytics tools that track you across other websites. No consent banner is required as we use only strictly necessary cookies.

Email communications

We send a weekly digest email to active users as part of the service. Every email includes a one-click unsubscribe link. You can also disable the digest in your account settings. We do not send marketing emails to people who have only joined the waitlist without explicit consent.

Children

SlipMind is designed for self-employed adults. We do not knowingly collect data from anyone under 18.

Changes to this policy

If we make material changes, we will notify you by email before they take effect. Minor clarifications may be made without notice.

Contact

For any privacy questions or data requests, email hello@slipmind.co.uk.