Privacy Policy

Who we are

TradePals (“TradePals”, “we”, “us”) is a workflow app for tradespeople. TradePals is operated by Rafael Joao, a sole trader based in England and Wales. We are the data controller for the personal data described in this policy. For any privacy question or request, contact us at support@tradepals.co.

Who this policy covers

This policy explains what we collect when you:

• use the TradePals app as a tradesperson, or
• submit a quote request to a tradesperson through TradePals as their customer.

Information we collect

• Account & profile (tradesperson): name, email, phone, business details, company logo, trade and service area, and the pricing settings you enter to train your AI.
• Sign-in details: if you sign in with Apple, Google or Facebook, we receive basic profile information (such as name and email) from that provider.
• Customer & job information: a customer’s name, contact details, job-site address (typed by you or the customer — we do not collect device GPS location), and the job description.
• Photos & voice recordings: job photos and audio you capture so the AI can produce a quote or help complete a certificate.
• Payment information: when an invoice is paid we receive confirmation and limited details (amount, status, payment metadata) from Stripe. We never receive or store full card numbers.
• Usage & device data: analytics events (screens viewed, features used) and a device/analytics identifier via PostHog, plus basic technical data (app version, device type) needed to run and secure the service.

How we use your data, and our legal bases

Under UK GDPR we rely on the following legal bases:

• To provide the app — generate quotes, invoices and certificates and manage your account (performance of a contract).
• To process invoice payments (performance of a contract).
• To secure the service, prevent fraud and understand how features are used (legitimate interests).
• To send service and transactional messages; product updates only where you have agreed (legitimate interests / consent).
• To meet legal and tax obligations (legal obligation).

Where the customer self-quote flow captures the microphone or camera, we rely on the consent we collect before capture begins.

AI processing of voice and images

To turn a spoken description and photos into a quote or certificate, your audio and images are sent to our AI sub-processors — Google (Gemini) and Deepgram — for transcription and analysis, and a result is returned to the app. Before the customer self-quote captures the microphone or camera, we show a notice naming these providers and ask for consent. We do not use this content to train our own models.

Who we share your data with

We share data only with providers that help us run TradePals, each under contract:

• Supabase — database, authentication and file storage.
• Stripe — invoice payments and tradesperson payouts (Stripe Connect).
• Google (Gemini) and Deepgram — AI processing of images and audio for quotes and certificates.
• PostHog — product analytics.
• Resend — transactional email delivery.
• Mapbox, OpenStreetMap (Nominatim) and Photon — address autocomplete, geocoding and static maps. When you type a job or customer address, it is sent to one of these services to look up the location.
• Expo — push notifications.
• FreeAgent, Xero, QuickBooks — only if you choose to connect your accounting software, to sync invoices.

We do not sell your personal data, and we do not share it for advertising.

International transfers

Some of our providers are based outside the UK (for example, in the US). Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or the EU Standard Contractual Clauses.

How long we keep your data

We keep your account and job data for as long as your account is active and as needed to provide the service and meet legal and tax obligations. You can delete your account at any time in the app (Settings → Delete Account), which permanently removes your account and associated data; some records may be retained where the law requires it (for example, transaction records).

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing;
• data portability; and
• withdraw consent at any time.

To exercise any of these, email support@tradepals.co or use the in-app account-deletion option. You also have the right to lodge a complaint with the data protection authority in the country where you live.

Cookies & analytics

We use PostHog for product analytics. We do not use advertising cookies or cross-site tracking, and the app does not use Apple’s advertising identifier (IDFA).

Children

TradePals is intended for businesses and adults (18+). It is not directed at children, and we do not knowingly collect data from children.

Security

We protect your data with encryption in transit, access controls and reputable infrastructure providers. No system is perfectly secure, but we work hard to keep your information safe.

Changes to this policy

We may update this policy as the product evolves. Any changes will be posted on this page with an updated date.

Contact

Questions about this policy or your data? Email us at support@tradepals.co.