Privacy Policy

Last updated: 5 July 2026

This policy explains what personal data Speakpaid ("we", "us") collects, why, and your rights over it. Speakpaid is a mobile app that helps sole traders create, send and track invoices. We're UK-first and follow the UK GDPR and the Data Protection Act 2018.

Plain-English summary: your invoicing data is yours. We use it only to run the app for you, we don't sell it, payments are handled by Stripe (we never see card details), and you can export or delete everything at any time.

1. Who we are

Speakpaid is operated by Satoshi Yamane, a sole trader trading as "Speakpaid", who is the data controller for the personal data described here. You can reach us at support@speakpaid.com; our postal address is available on request.

2. What we collect

Account — your email address, or an Apple/Google sign-in identifier. (Apple may hide your real email via a relay address.)
Business profile — your trading name, address, contact details, VAT status/number and the bank details you put on your invoices.
Invoicing data you enter — invoices, quotes, customers (name, address, email/phone), payments, notes and job photos/certificates.
Voice — when you speak a job, the audio is transcribed on your device; only the resulting text is sent to our AI to draft the invoice. We don't upload or store voice recordings.
Device & diagnostic data — basic app/usage and error data to keep the app working, and a push-notification token if you enable notifications.

3. How we use it

To provide the service: creating and sending your invoices/quotes, taking and reconciling payments, sending reminders, backing up your data so you can restore it on a new device, and improving reliability. Our legal bases are performing our contract with you and our legitimate interest in running and securing the app.

4. Payments

Card payments are processed by Stripe under their own terms. Money goes directly to your own connected account — Speakpaid never holds your funds and never stores full card numbers.

5. Where your data is stored, and who processes it

We use trusted providers ("sub-processors") to run the service:

Supabase — hosting, database and file storage (your account & invoicing data, job photos/certificates).
Anthropic (Claude) — turns your spoken job text into a draft invoice.
Stripe — payment processing.
Apple Push Notification service / Expo — push notifications.
ImprovMX — sending invoice/payment reminder emails on your behalf.
Aptabase — privacy-friendly, aggregate in-app usage analytics.
Google Analytics — website (speakpaid.com) traffic analytics.

Each processes data only on our instructions, under a data-processing agreement.

6. Sharing

We don't sell your data or share it for advertising. We share it only with the sub-processors above, or where required by law.

7. How long we keep it

We keep your data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep certain records for legal reasons — for example, records needed for tax and accounting, which are typically kept for up to six years. Backups are overwritten on a rolling basis.

8. Your rights

Access & portability — you can export your invoices, payments and customers to CSV in the app at any time.
Correction — edit your data in the app.
Erasure — delete your account (Settings → Account → Delete account) to remove your data.
You can also object to or restrict certain processing, and complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Speakpaid is for businesses and isn't directed at children under 18.

10. International transfers

Some sub-processors may process data outside the UK/EEA. Where they do, appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent) are in place.

11. Changes & contact

We'll update this policy as the app evolves and note the date above. Questions or requests: support@speakpaid.com.