Privacy Policy
Who we are
StillCovered is a receipts and return-window / warranty reminder app made by Azury Digital & Tech Solutions Ltd (company no. 13446812; registered office 23a The Precinct, London Road, Waterlooville PO7 7DT, United Kingdom). We are the data controller for the personal data described below and are registered with the Information Commissioner's Office under reference ZC188926. Contact: info@azurydigital.co.uk.
Receipt scanning happens entirely on your device. When you use "Scan photo to auto-fill", the text is read by an OCR engine running locally in the app (Tesseract, self-hosted) — the photo is never sent anywhere for scanning.
What we collect and why
- Your account — your name, email address and password. The password is stored only as a salted hash (PBKDF2); we cannot read it. Signing in issues a login token so the app can talk to your account. Lawful basis: performance of our contract with you.
- Your receipts and invoices — the details you choose to add: store or vendor, item, price, purchase date, return-window and warranty deadlines, an optional photo of the receipt, optional notes and an optional note of where the paper receipt is kept. Lawful basis: performance of our contract with you.
- Reminder emails — if reminders are switched on, we email you before return windows close and warranties expire. Lawful basis: performance of our contract with you; you can switch reminders off at any time (below).
- Password-reset codes — sent by email only when you request one. Lawful basis: performance of our contract with you.
- Support correspondence — emails you send us and our replies. Lawful basis: our legitimate interest in responding to enquiries.
The app contains no ads, no analytics SDKs and no third-party tracking, and we never sell personal data.
Where your data is stored, and for how long
Your account and everything you add are stored on our UK-hosted server, under your account only — each account's data is isolated from every other account's. We keep it for as long as your account exists. When you delete your account, your data — including uploaded photos — is deleted. We may keep records we are legally required to hold (for example purchase records for tax purposes) for the statutory period. Lawful basis for that retention: compliance with a legal obligation.
Emails, and how to stop them
Emails come from no-reply@stillcovered.co.uk. Reminder digests can be switched off in the app: open Account and untick "Email me before return windows close and warranties expire". Password-reset emails are only ever sent when you ask for one. We do not send marketing email.
Who we share data with
Only the service providers needed to run StillCovered: our UK hosting provider (the server the app runs on) and our email delivery provider (Fasthosts Livemail SMTP, which carries the emails above). Neither uses your data for anything else. We may disclose data where the law requires it. We never sell personal data and there are no advertising or analytics partners.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its use, and to data portability. Email info@azurydigital.co.uk and we will respond within one month. If you are unhappy with our handling of your data you can complain to the Information Commissioner's Office (ico.org.uk).
Deleting your account and data
You can delete your account yourself from inside the app (Account → Delete account…), which permanently removes your account, all receipts and invoices, uploaded photos and reminder settings. If you can't sign in, email us instead. Full details of both routes are on our account deletion page.
Changes to this policy
If we change this policy we will update this page and its effective date. Significant changes will be flagged in the app or by email.
Contact
Azury Digital & Tech Solutions Ltd, 23a The Precinct, London Road, Waterlooville PO7 7DT, United Kingdom — info@azurydigital.co.uk.