InformedMoney is a UK app that helps you see how HMRC tax rules apply to your own finances. It's built and run by Three Pillars Ltd, so when this page says "we" or "us", that's who we mean. Below we've set out what data we collect, why we need it, and what you can do with it under UK GDPR. We've tried to keep it readable rather than burying it in legal jargon.
Who we are
InformedMoney is operated by Three Pillars Ltd, registered in England and Wales (company number 17220858).
If you have a question about your data, or you want to make a request, email us at privacy@informedmoney.co.uk and a real person will get back to you.
What we collect
1. Account data
- Your first and last name. We ask for these when you sign up, or pick them up from Sign in with Apple if that's how you join.
- Your email address, which is how you sign in.
- A random user ID we generate, so we can connect your account to the things you create in the app.
2. Things that never leave your phone
- The most sensitive numbers stay on your device, and we genuinely can't see them. That includes your salary, bonus, RSU vesting events, pension contributions, ISA and LISA contributions, marital status, and the other figures you type into the "Personal" tab.
3. What we receive when you use the "Ask" tab
- The messages you send and the replies you get back. We store these against your account so your history is there when you come back.
- A short summary of your profile (the figures from the section above) goes along with your question, so the answer actually fits your situation. We pass that summary to Google Gemini to write the reply, then throw it away. All we keep afterwards is a one-way hash we use for debugging.
- Some basic operational details: which model answered, how long it took, and how many messages were sent.
4. What we don't collect
- No crash logs, advertising identifiers, location, contacts, photos, device identifiers, or browsing history. We don't track you across other apps, and we never use your data for advertising.
Who we share data with
- Supabase looks after our database and sign-in. The servers are in London, UK.
- Google Gemini is the AI behind the "Ask" tab. It runs in the US under Standard Contractual Clauses, receives your profile summary and message to write each reply, then deletes those inputs after the short retention window set out in Google's API policy.
Legal basis (UK GDPR Article 6)
- Performing our contract with you. This covers actually running the app for you, like your account and the chat.
- Our legitimate interests. Things like operational logging and preventing fraud.
Your rights
You're in control of your data. You can:
- See your account data any time, right in the Personal tab.
- Get a copy of your chat history. Just email us and we'll send it over as a CSV.
- Delete your account from inside the app, under Settings, then "Delete account". When you do, your chat messages, profile snapshot hashes, and sign-in records are wiped within 30 days.
- Raise a complaint with the UK Information Commissioner's Office if you're ever unhappy with how we've handled your data. You'll find them at ico.org.uk.
Educational use only
InformedMoney is here to help you learn about UK tax. It isn't financial advice, and it isn't regulated by the FCA. If you want advice tailored to your own circumstances, please speak to a qualified accountant or financial adviser.
Changes to this policy
If we make a meaningful change to how we handle your data, we'll update this page and change the date at the top. It's worth checking back now and then.