TaxMate

Privacy

How TaxMate uses your information.

Last updated: 21 September 2026

What information does TaxMate use?
TaxMate can process business and Limited Company names and types; Companies House identity checks and public-record snapshots; incorporation, trading, accounting-period and Corporation Tax facts; director, shareholder and effective-dated ownership records; income, expense, salary, dividend, loan, share-funding, evidence, mileage, category, date and note records; tax-year adjustments; receipt images; backup files; partnership membership and shared records; and app preferences. Your chosen sign-in provider supplies a provider-linked account identifier and may supply your name, email address and profile information made available through that provider. Billing records can include Stripe customer, Checkout session, subscription, invoice, payment, charge and refund identifiers and statuses; Google Play obfuscated account identifiers, purchase tokens and token hashes, product details and subscription status; and App Store app-account tokens or hashes, transaction and original-transaction identifiers or hashes, product and subscription status, and signed transaction, renewal and notification data used for server verification. Promotion redemptions, support messages and limited technical diagnostics are also processed. Do not enter another person’s information unless it is genuinely needed for company records and you are entitled to use it. Billing support also records payment and refund amounts, customer requests, replies, staff decisions and calculation references, status history, plan-change quotes and versioned purchase confirmations. Access to private casework is restricted to authorised staff; bookkeeping backups do not include it.
Why does TaxMate use it?
TaxMate uses account, bookkeeping, receipt, backup, sync, partnership and entitlement information to provide the service or take steps you request before a contract. Payment and accounting records are used to perform paid services and meet legal obligations. Necessary security, abuse-prevention, promotion-integrity and strictly minimised error diagnostics support the legitimate interests of protecting and operating TaxMate. Optional usage measurement is based on consent and is off unless you enable it. TaxMate does not sell personal information or use bookkeeping records for advertising.
Where is my data stored?
The app can work locally without an account; local records remain in your browser until you clear, reset or delete them. Signed-in personal records use Firebase Authentication, Cloud Firestore and Cloud Storage. The production Firestore database and server functions use the London region. Receipt Storage uses its configured United States location.
Who receives my data?
Google and Firebase process sign-in, app security checks, cloud records, receipts and server functions. Stripe processes web checkout, payment methods, invoices and subscriptions; TaxMate does not receive complete card details. Google Play processes Android in-app subscription purchases and status. If an iOS App Store version is available and you use it, Apple processes its subscription purchases, signed transaction verification, subscription status and refunds. Sentry processes minimised error reports. If you opt in, Google Analytics 4 processes a small approved set of value-free usage events. Namecheap forwards messages sent to the support address and Microsoft Outlook is the destination mailbox service. Browsers also connect to Google Fonts and software content-delivery networks for app assets. Professional advisers, regulators, courts or law-enforcement bodies may receive information where necessary and lawful.
How long is it kept?
Effective Plus or Pro retains historical bookkeeping data across the whole account. If paid access ends and you remain Free, that history is kept through the following 5 April and deleted from 6 April. This covers ordinary and self-employed records, your partnership history, LTD records and associated receipts. New-year Free records, authentication and billing data, and shared records needed by other members are protected. Connected devices remove expired local history, rollback copies and stale queued writes when they receive the server deletion control; an offline device cannot receive that control until it reconnects. A device-only account without a verified paid-end date is not assigned an invented expiry. After a completed account deletion, TaxMate deletes the Firebase Authentication sign-in identity and personal app records. An account-deletion marker, server-only Stripe, Google Play and App Store billing mappings, provider-event records and deletion tombstones can remain where needed for security, fraud prevention, refunds, disputes, legal record-keeping or provider events. They cannot restore the deleted account. This service retention period does not replace your statutory record-keeping duties. Provider backups, logs and legally required transaction records may remain for provider-defined or legally required periods.
How do I delete my account and data?
Use Delete my TaxMate account and data in Settings. You can delete your TaxMate account while an Apple subscription is active. Account deletion does not cancel that subscription; cancel it separately in App Store subscriptions to stop future charges. Pending purchases or uncertain provider events must be reconciled. Active, pending or uncertain Stripe or Google Play billing must be managed with that provider or reconciled by TaxMate; contact support@taxmate.uk if you need help. After server-side success, TaxMate removes your personal Firestore tree, receipt objects, promotion-redemption records and Firebase Authentication sign-in identity, then clears local TaxMate data and signs you out. If a partnership has another member, its shared records remain for them and your membership is removed; if you are the last member, the partnership is deleted. Limited account-deletion and billing records may remain for the reasons described above. Signing in again creates a new, empty account; deleted records and paid entitlements are not restored. Deletion is complete only when the app reports server-side success.
What are my privacy rights?
You can use TaxMate locally, correct records, export JSON, export a full ZIP containing available receipt binaries, withdraw analytics consent and request deletion. Depending on the lawful basis and circumstances, you may have rights of access, correction, erasure, restriction, objection and portability. You may object to processing based on legitimate interests by contacting TaxMate. Withdrawing consent does not affect earlier processing.
Who runs TaxMate & how do I contact them?
TaxMate UK (“TaxMate”) is a trading name used by Hau Ying Ou-Yang, a UK sole trader and the controller for this service. ICO registration: ZC174150. Email support@taxmate.uk. Public correspondence and contact address: Unit 170198, PO Box 7169, Poole, BH15 9EL. TaxMate has not appointed a data protection officer.
International transfers
Google, Stripe, Apple, Sentry and their subprocessors may process information in the UK, EEA, United States and elsewhere. Provider terms describe applicable adequacy arrangements, the UK Extension to the Data Privacy Framework and contractual safeguards such as the UK Addendum to standard contractual clauses. Contact TaxMate for further information about applicable safeguards.
Analytics & error reporting
Optional analytics is off by default and limited to approved value-free events. Error reports are minimised to remove account identity, bookkeeping values, business names, notes, receipt content and unnecessary request details. You can change analytics consent in Settings.
Complaints
Email support@taxmate.uk about privacy or to exercise a right. You may complain to the Information Commissioner’s Office. Material policy changes will be dated and communicated appropriately.