Legal
Privacy
Last updated
Draft
Draft — the final text is being prepared.
Draft for review. This notice describes what the product does today. It has not yet been approved by Reckon’s owner or checked by a solicitor, and the items marked TODO are still open.
Who we are
The business responsible for your data (the “controller”) is shown under “Who we are” at the foot of this page: the operator’s name (Reckon is run by a sole trader, not a company), trading name and contact email. We do not publish a postal address; write to us by email.
Who this is for
Reckon is for people aged 18 or over. We do not knowingly collect data from children; if you think a child has given us data, email us and we will delete it.
What we collect, why, and our lawful basis
| What | Why we use it | Lawful basis (UK GDPR Art 6) |
|---|---|---|
| Account: your email address, and the sign-in method (email link or Google). Your name only if your Google account supplies it. | To create and secure your account and let you sign in | Contract |
| Reports and observations: the address or listing link you ask about, the facts read from the listing (price, bedrooms, floor area, photo and floor-plan links), and the estimate we work out (range, grade, comparable sales and the reasons) | To produce your estimate, show it back to you, and tell you what changed when you re-check | Contract |
| Watched listings you choose to follow | To check them again when you ask | Contract |
| Companion: your purchase journeys, the milestones, tasks, items, costs and notes you add, key dates, and the high-level answers you give (for example the type of property, whether you are a first-time buyer, and which kinds of deposit source you have, such as savings or a gift, never amounts) | To run the purchase tracker you asked for | Contract |
| Payment status: that you bought a pass, which pass, when, and the amount. The card is handled only by Stripe; we never see the card number. At checkout we also keep what you ticked (that you agreed to the Terms) with the time and the version of the Terms shown | To give you access, handle refunds, and show what was agreed | Contract; legal obligation (accounts and tax records); legitimate interests (disputes) |
| Run records: when a report ran, whether it worked, what it cost us, the outward part of the postcode | To keep the service working, safe and affordable | Legitimate interests |
| AI reasoning excerpt and AI call records: when our AI provider helps write the reasoning behind an estimate, a short excerpt of that AI-generated reasoning (up to 600 characters) is saved with the observation of that listing. For each AI call we also keep only counts (tokens used, estimated cost) and, if a call fails, a short reason code. We do not store the full text we send to or receive from our AI provider, and we do not store the full report | To show you the reasoning behind an estimate, tell you what changed when you re-check, and keep the service working and affordable | Contract; legitimate interests |
| Waitlist: your email address | To tell you when it is available | Consent (you confirm by email; you can unsubscribe at any time) |
| Usage counts: daily totals of how many reports were started, finished or failed, with a coarse outcome code and at most the outward part of a postcode. No cookie, no IP address, no address, no listing link | To see where the service breaks and to improve it | Legitimate interests |
| Website visit totals (Cloudflare Web Analytics, marketing site only): page views and referrers as aggregate counts. Cookieless: nothing is stored on your device and visitors are not tracked across visits | To see which pages are read | Legitimate interests |
| Error and security logs (Sentry, Fly.io, Cloudflare): technical details of faults and requests, including IP address | To fix faults and protect the service from abuse | Legitimate interests |
| Email we send you (sign-in links, receipts, waitlist confirmations): delivery records at Resend | To deliver the messages you asked for | Contract; consent for the waitlist |
Documents. When document upload ships (for example a seller’s property information forms), they will be read by our AI provider to pull out the facts you ask about and will not be stored by us. We will update this notice before that is switched on. TODO(Zee): confirm the AI provider’s terms for no training on, and no or short retention of, uploaded content before launch.
What we never collect
Your income, salary, deposit amount or monthly budget. The affordability calculator runs in your browser, what you type is kept only in your browser’s own storage, and it is never sent to our servers.
How a listing link is handled
When you paste a link to a listing, you trigger the request, and our server fetches that page on your behalf, reads the facts on it (price, bedrooms, floor area, photo and floor-plan links), and then looks up other listings and recent sales near it to find comparables for your estimate. We do not run scheduled crawls or bulk collection, and we do not keep copies of listing pages or photos: we keep the facts and the analysis we derive from them. With the browser extension, the link is sent to us from your browser and the report runs the same server-side fetch as pasting it. If the live listing cannot be read, the report falls back to official sold-price evidence only. TODO(Zee/solicitor): confirm this description, and the lawfulness of fetching listing pages from our servers; it replaces an earlier line that gave a request count we cannot currently verify.
Listings and public records can include details about sellers or occupiers, such as an address. We use only what is needed to estimate the property’s value. TODO(solicitor): confirm the position on data about other people (UK GDPR Art 14).
Who else handles your data (our processors)
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in | London (eu-west-2) |
| Fly.io | Hosts the app and API | London (lhr) |
| Cloudflare | Hosts the website; DNS, bot checks (Turnstile), security | Global edge network (not tied to one country) |
| Anthropic | AI provider: writes the narrative parts of reports and reads photos and documents you submit. It receives property details, never your name, email or finances | US: see “International transfers” |
| Sentry | Error monitoring | Region to confirm |
| Resend | Sends email | Region to confirm |
| Stripe | Takes payment | US and EU |
| Homedata and public data sources (HM Land Registry, EPC register, Police.uk, Environment Agency, Department for Education) | Property data we look up | We send a property identifier, not you |
Google also sees your IP address when the app loads its fonts, and when you use Google sign-in or Street View. We do not sell your data and do not use it for advertising.
International transfers
Some providers above (at least Anthropic, and possibly Sentry, Resend, Stripe and Cloudflare) process data outside the UK, including in the US. Where that happens we rely on the UK’s adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, or the UK-US data bridge where the provider is certified under it. TODO(solicitor): verify the safeguard in place with each provider and that data-processing terms are signed.
How long we keep it
| Data | How long |
|---|---|
| Account details | Until you delete your account |
| Watched listings and Companion data | Until you delete your account (or delete them yourself sooner) |
| Reports, observations and run records | Today they are kept after you delete your account, with the link to you removed, and are not deleted on a timer. TODO(Zee/solicitor): this “kept indefinitely” position is under review; a fixed period (for example 12 months) is proposed |
| Payment and consent records | Kept for the period UK tax and accounting law requires (6 years, as HMRC requires), with the account link removed when you delete your account |
| AI reasoning excerpt (up to 600 characters, AI-generated) | Kept with the observation it belongs to, so for as long as observations are kept (see “Reports, observations and run records” above). No automatic deletion today |
| AI call records (token counts, cost estimate, failure reason code) | Kept with the run record (see “Reports, observations and run records” above). They hold no prompt or response text |
| Fragments of AI output in server logs | At most a short fragment (about 200 characters) is written to the server log if a response cannot be read; deleted with the server logs (30 days) |
| Waitlist | Until you unsubscribe, then removed |
| Error and security logs (server logs) | 30 days |
| Usage counts | 12 months |
Deleting your account
You can delete your account in the app. It removes your sign-in, your email, your watched listings, your Companion data and the link to your payment record, and it unlinks your past reports from you. TODO(Zee): deletion does not yet reach Resend or Sentry; email us and we will remove you from those.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and move it to another service. Where we rely on consent you can withdraw it at any time. Email us and we will reply within one month.
Complaints
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). To reach us, use the contact email under “Who we are” below.
Contact
Who we are
- Operator
- Zeeshan Khan
- Status
- Sole trader
- Trading as
- Reckon
- Contact
- hello@reckonproperty.co.uk