PromptQuote is a trading name of B.M.S Decorating, a business registered in England & Wales.
Registered address: [Registered trading address to be confirmed]
ICO Registration Number: [To be confirmed — ICO registration in progress]
Contact: promptquote.app@gmail.com
PromptQuote is a business management application for tradespeople and service businesses, providing tools for quotes, invoices, customers, calendar, jobs, gallery, reports, and reminders.
We are registered with the Information Commissioner's Office (ICO). If you have concerns about how we handle your data that you feel we haven't resolved, you can complain to the ICO at ico.org.uk.
This policy applies to visitors to the PromptQuote website (promptquote.app) and registered users of the PromptQuote app. The service is intended for businesses and sole traders aged 18 and over, and is primarily UK-focused.
If you are under 18, you must not use PromptQuote.
Under UK GDPR, the roles work as follows:
PromptQuote is the data controller for the account holder's own data — your business name, email address, and profile information.
You (the tradesperson or service business) are the data controller for your own customers' data — names, phone numbers, email addresses, property addresses, and job photos you store in PromptQuote. PromptQuote acts as a data processor on your behalf for this data.
This means you are solely responsible for having a lawful basis to store your customers' data, and for any communications you send to your customers through or using the app. You should ensure you have appropriate consents and comply with your own obligations under UK GDPR.
| Category | Examples | Why |
|---|---|---|
| Account data | Business name, email address, password (hashed) | Create and manage your account |
| Profile data | Owner name, phone number, address, trade or industry | Personalise the app and populate your documents |
| Business data | Customer records, quotes, invoices, jobs, tasks, expenses, calendar events | Core service delivery |
| Financial data | Bank account and sort code (for filling invoice templates), payment terms, Stripe payment link | Populate invoice documents; your Stripe link is stored so it can appear on your invoices — we do not process card payments |
| Image data | Job photos, gallery images, before/after photos | Portfolio and project record features |
| Usage data | App activity, feature usage patterns | Improve the service |
| Device data | Device type, operating system version | Support and compatibility |
| Notification data | Push notification subscription token | Deliver reminders you have opted in to receive |
Note: as new features such as expanded photo cloud sync, push notifications, and expenses tracking are fully rolled out, this data collected table will be updated accordingly.
We do not use your business data for advertising or marketing. We do not sell your data to any third party.
Your data is stored in the cloud using Supabase, with the primary database hosted on AWS eu-west-2 (London, United Kingdom). This means your core data is held within the UK.
A copy of certain data is also stored locally on your own device (in your browser's local storage) so that the app functions offline and loads quickly. This local copy syncs to the cloud when you are signed in.
Passwords are handled by Supabase's authentication system and are hashed on our servers — we do not store passwords in plain text on our servers.
Job photos and gallery images are stored in a private cloud storage bucket. Photos are not publicly accessible and are not shared with third parties.
Individual photo uploads are subject to a maximum file size of 10 MB.
We use the following third-party service providers. Each receives only the data necessary for the specific purpose described.
Our database, authentication, file storage, and push notification infrastructure. Supabase hosts our primary data in the AWS eu-west-2 (London) region. Supabase encrypts data at rest and in transit by default.
The app allows you to store your own Stripe payment link, which can appear on your invoices so customers can pay you directly. PromptQuote does not process card payments, receive funds, or store card details. Stripe's own privacy policy governs your relationship with Stripe.
Used to send quote and invoice emails from within the app. When you email a document to a customer, the customer's name, email address, and the document content pass through EmailJS to deliver the email. EmailJS does not store this data beyond what is required to transmit the message.
We load fonts from Google Fonts and open-source code libraries from cdnjs and jsDelivr. As a normal part of loading these resources, your device's IP address is shared with those providers. These services are covered by their own privacy policies.
Reminders and alerts are delivered through your device's own push notification service — Google Web Push, Apple Push Notification Service, or the Mozilla equivalent — via Supabase. Push notifications contain reminder content such as "invoice overdue" or "job tomorrow" and are only sent if you have opted in.
Subscription billing will be handled through Google Play and the Apple App Store. This is not yet live. When it is, your subscription is governed by those platforms' own terms and privacy policies.
We do not use any third-party advertising trackers or analytics platforms.
We share your personal data only with:
We never share your data for marketing or advertising purposes, and we never sell it.
Under UK GDPR, you have the right to:
To exercise any of these rights, email us at promptquote.app@gmail.com. We will respond within 30 days.
We keep your personal data for as long as your account is active. If you ask us to delete your account, we will delete your personal data within 30 days, subject to the exceptions below.
We may retain certain records for longer where required by law, or to prevent fraud and protect against legal claims. Anonymised usage data that cannot identify you may be retained indefinitely. Backup copies of data are purged after a limited period.
Our primary database is hosted in the UK (AWS eu-west-2, London). However, some of our third-party service providers (including Supabase, EmailJS, and Google) may process data on servers located outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreements or equivalent standard contractual clauses, in accordance with UK GDPR.
The PromptQuote marketing website (promptquote.app) does not currently use advertising cookies or third-party analytics trackers. It uses Google Fonts and open-source CDN resources (see Section 7), which involve your IP address being shared with those providers as a normal part of loading those resources.
If analytics or cookie-based tracking is added in the future, this policy and the website will be updated to include a cookie notice.
We will notify you of material changes to this Privacy Policy through the app or by email. Continued use of PromptQuote after a change takes effect constitutes acceptance of the updated policy. The date at the top of this page always reflects when this policy was last updated.
For any questions about this Privacy Policy or how we handle your data:
Email: promptquote.app@gmail.com
Address: [Registered trading address to be confirmed]
If you are not satisfied with our response, you can complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk.