Privacy Policy

Information We Collect

We collect the following information:

• Account. Your name and the email/identity from Sign in with Apple or Google.
• Content you create. Tasks, invoices, expenses, documents, projects, notes, clients (incl. their names, emails, phone numbers).
• Financial data. Income, expenses and invoice data you record.
• Chat with Flo. Your messages and relevant context (e.g. task/invoice/client names).
• When you connect HMRC. Your National Insurance number, business details, and the income/expense figures you choose to submit.
• When you connect a bank. Your account details, balances and transactions, accessed read-only.
• Fraud-prevention data (HMRC requirement). To file with HMRC, the law requires us to send anti-fraud data with each submission: a device identifier, your local and public IP addresses, device and operating-system details, screen size, timezone, and MAC address. This is sent to HMRC and used only for that purpose.

How We Store It

Your data is synced to and stored on our secure cloud backend (Supabase) so it's available across your devices. Sensitive credentials (HMRC and bank access tokens) are held in your device's encrypted Keychain and on our server only as needed; we never store your bank login or HMRC password.

Connecting to HMRC

When you use Making Tax Digital features, you authorise FreelanceOS (via Government Gateway sign-in) to submit your tax figures to HMRC on your behalf. You can disconnect at any time in the app.

Bank Data

Direct bank connections are not yet available. Bank statements you choose to upload are used only to reconcile your transactions into your own records. When open banking connections are offered, they will be read-only, provided through an FCA-regulated provider with your explicit consent, which you can withdraw at any time.

Third Parties We Use

We work with the following third parties to operate the app. We do not sell or share your data for marketing.

• HMRC
• Supabase (hosting/storage)
• OpenAI (Flo AI)
• Apple and Google (sign-in)
• Stripe (payments)

Legal Bases (UK GDPR)

We rely on: performing our contract with you (running the app), your consent (optional features), and legal obligation (HMRC fraud-prevention data).

Retention

We keep your data while your account is active and delete it on account deletion or request, except where we must retain records by law.

Your Rights

You have the right to access, correction, deletion, portability, and objection. For any data-protection request, contact privacy@freelanceos.so. You can also complain to the ICO (ico.org.uk).

Security

Data is encrypted in transit; API secrets stay server-side; access tokens are stored in your device Keychain. Found a security issue or vulnerability? Email security@freelanceos.so and we will respond within 24 hours.

Children

FreelanceOS is a business tool not intended for under-18s.

Changes

We'll post updates here and change the date above.

Contact Us

If you have questions about this privacy policy, contact us at hello@freelanceos.so