Privacy Policy.

Effective date: 28 August 2026 · Version: 1.6

This policy is specific to Doddl: the mobile app and the doddl.app website. It explains what personal data Doddl holds, why, who is responsible for it, and the rights you have over it.

Who we are

Doddl Labs Limited (“we”, “us”) is the data controller responsible for your personal data.

• Registered company number: 17364783
• Registered address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF
• ICO registration number: ZC208310
• Privacy questions and rights requests: privacy@doddl.app

What we collect

• Your phone number: used to sign you in with a one-time passcode.
• Your name and email address: collected when you create your account. We use your email for messages about your account and the service. We only send you marketing if you ticked the box saying that’s OK, and you can untick it at any time.
• The bank or card statements you give us: the files you upload, and the photos you take of a paper statement page by page. We keep the original file or photo, plus the payments we read out of them.
• Tax details you choose to save: such as your Unique Taxpayer Reference or National Insurance number, if you add them to the app. Saving these is optional.
• Your plan status: whether you’re on a free or paid plan.
• A small amount of usage information: for example, that a statement was uploaded, so we can keep the app working.

Why we use it and our lawful basis

• To provide the service: reading the statements you upload or photograph, letting you sort your payments, and showing you how much to set aside for your tax. Lawful basis: performance of our contract with you.
• To keep your books available to you: your money records stay in your account so you can look back at them whenever you need to. Lawful basis: performance of our contract with you, and our legitimate interest in keeping your records intact for you.
• To understand how Doddl is used: which features help, where people get stuck, and what to build next, so we can improve the product and how we describe and market it. Lawful basis: our legitimate interest in improving and marketing the service; you can object at any time using the contact above.
• To send you marketing by email, only if you said yes. Lawful basis: your consent, which you can withdraw at any time: untick the box in the app or use the unsubscribe link in any email.

You sort your payments yourself. We don’t make automated decisions about you that have legal or similarly significant effects, and the contents of your statements and payments are never used to advertise to you.

Who we share it with

We use third-party AI providers to read and structure the statements you upload or photograph, and infrastructure providers for hosting, sign-in and text messages. Each provider is bound by a data-processing agreement, may use your data only to provide its function to us, and does not use your data to train its models. Some process data outside the UK; where they do, we rely on appropriate safeguards (the UK International Data Transfer Agreement or Standard Contractual Clauses). The specific providers we currently use are listed below.

If you photograph a paper statement instead of uploading a file, each page you snap is sent whole to our document-reading processor to read the payments out of it. Keep the statement on its own in the frame, because anything else the camera catches is sent with it. Your snaps are stored with your other statement files in the UK, and they go when you remove that statement or delete your account.

Photos of receipts you snap or upload are sent to our document-reading processor to read the shop, the date and the total, so we can match them to your payments. As with your statements, that processor is bound by contract, uses your data only to do that job, and never uses it to train its models.

If you ask Doddl a question about one of your payments, your chat messages and the details of that payment (the name on it, the amount, whether it’s money in or out, and the date) are sent to our AI processor to write the answer. If you’ve sorted that shop before, we also send a one-line note of how you usually swipe it, so the answer fits your situation. These chats are stored on our systems (hosted in London) so we can see where Doddl answers well or badly and make it better; they’re deleted when you delete your account. As with your statements, that processor is bound by contract, uses your data only to do that job, and never uses it to train its models.

If you message us from Help & support, your chat is stored on our systems (hosted in London) so you and we can pick the conversation back up later. To answer you straight away, the messages in that chat (and nothing else from your account) are sent to our AI processor to write the reply. The Doddl team, including Oli, the person behind Doddl, read support chats and can reply personally. As with your statements, that processor is bound by contract, uses your data only to do that job, and never uses it to train its models.

We never sell your data, and we never share it with anyone for their own marketing.

Our current providers

Provider list last updated: 28 August 2026.

International transfers

Where a provider processes your data outside the UK (see the country shown for each provider above), we rely on appropriate safeguards: the UK International Data Transfer Agreement or Standard Contractual Clauses. You can ask us for more detail using the contact above.

How long we keep it

Your statements and payments stay in your account for five years, so your records are there whenever you need them. Self-employed people generally need to be able to look back at their money records for around that long. Lawful basis: performance of our contract with you and our legitimate interest in keeping your books complete.

If you delete your account, we delete your data. In the rare case where the law requires us to keep a specific record for longer, we keep only that record, for only as long as required, and unlink it from you wherever possible.

Keeping your data safe

Your data is encrypted on its way to and from the app, stored in the UK, and walled off so that only your account can see it. If you ever spot something that looks like a security problem, email security@doddl.app and we’ll look at it straight away.

Your rights

• Access: ask for a copy of the data we hold about you.
• Rectification: ask us to correct data that is wrong.
• Erasure: delete your account and data; you can do this in the app at any time.
• Portability: ask for your data in a portable form.
• Restriction and objection: ask us to limit or stop certain processing.
• Withdraw consent: stop marketing emails at any time; it doesn’t affect anything else about your account.
• Complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

To exercise any of these rights, contact us using the details above. To request a copy or export of your data, email us and we will respond within one month. To delete your data, use the delete-account option in the app.

Doddl is for people running their own thing. It isn’t aimed at children under 16.

Complaints

You can complain to the UK regulator at any time:

• Information Commissioner’s Office (ICO)
• Website: ico.org.uk
• Helpline: 0303 123 1113

Changes to this policy

This policy reflects our current systems and may be updated as our technology or service changes. The effective date at the top shows the latest version, and the provider list shows when it was last updated.