Privacy Policy

Last updated: 10 September 2026

This policy explains how Nothing Gets Dropped ("we", "us") collects, uses and protects your personal data when you use our app and related services. It applies to everyone who uses Nothing Gets Dropped, including team members invited by their organisation.

1. Data we collect

• Account data — your name, email address, password (stored only as a secure hash) and profile settings.
• Content you create — briefs, projects, tasks, workflows, checklists, notes and uploaded files.
• Voice recordings — audio you choose to record during onboarding or in the assistant, used to transcribe your instructions.
• Team data — the teams you belong to, invitations sent on your behalf, and the email addresses of people you invite.
• Usage data — information about how you interact with the app, such as device, browser, IP address and activity logs, used to keep the service secure and reliable.

2. How we use your data

• To provide the service — creating your account, storing your projects and tasks, and sending scheduled reminders and notifications.
• To power the AI assistant — the instructions, briefs and files you provide are processed by AI providers to generate task plans, compliance checklists, email templates and schedules.
• To keep the service secure — detecting abuse, authenticating requests and maintaining audit logs.
• To communicate with you — service announcements and, where you have opted in, product updates.

3. Legal bases (UK GDPR)

We process personal data under one or more lawful bases: performance of a contract (running the service for you), legitimate interests (security and service improvement), consent (voice recordings and optional communications, which you may withdraw at any time), and legal obligation (where retention or disclosure is required by law).

4. Sharing and processors

We do not sell your personal data. We share it only with service providers who help us run the product — hosting and infrastructure, AI providers that generate plans and transcriptions, and email delivery for notifications — each bound by contract to process data only on our instructions. We may also disclose data where required by law or to protect our rights.

5. International transfers

Some of our providers process data outside the UK and EEA. Where that happens, we rely on appropriate safeguards such as UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

6. Retention

We keep your data only for as long as your account is active or as needed to provide the service. When you delete your account, we delete or anonymise your personal data, except where we must retain it for legal, security or accounting reasons. Voice recordings are deleted once they have been transcribed and are no longer needed.

7. Your rights

You can ask us to access, correct, delete, restrict or port your personal data, or object to our use of it. You may also withdraw consent at any time and complain to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

To exercise any of these rights, contact us using the details below.

8. Security

We protect your data with encryption in transit, strict access controls and regular review of our systems. No method of transmission is completely secure, but we work to keep your data safe using industry-standard practices.

9. Children

The service is not directed at children under 16, and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be announced in the app, and the date above will always reflect the current version.

11. Contact

Questions about this policy or your data? Email us at privacy@nothinggetsdropped.com and we will respond as soon as possible.