Your financial figures stay on your device. The numbers you enter into Salaryon's calculators are stored on your phone and are not sent to us unless you switch on Cloud Backup, which is optional, free and off by default. See section 6.
1. Who we are
Salaryon is a trading name of Gritain Limited ("Gritain", "we", "us", "our"), a company registered in England and Wales under company number 16233744, with its registered office at 124 City Road, London, EC1V 2NX, United Kingdom. Gritain Limited is the data controller responsible for your personal information.
Gritain Limited is registered with the UK Information Commissioner's Office under registration number ZC217211.
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use the Salaryon mobile app (the "App") or our website at salaryon.com (the "Website"), together the "Service".
Questions or requests: privacy@salaryon.com.
2. The information we collect
Information you give us
- Account information: your email address, display name, and a securely hashed password (managed by our authentication provider; we never see your password in plain text). Each account is assigned a Salaryon user number.
- Financial information you enter: figures such as salary, tax, pension, deductions, wealth, assets and budget entries. This is stored on your device and is not sent to us unless you switch on Cloud Backup (section 6), in which case a copy is stored on our servers in the United Kingdom so that you can restore it.
- Communications: messages, feedback and support requests you send us, and information you submit through Website forms (for example newsletter or waitlist sign-up).
Information we collect automatically
- Subscription and purchase data: your subscription status, plan, trial eligibility and anonymised transaction identifiers. Payments are processed by Apple and Google; we do not receive or store your card or bank details.
- Usage data: feature and page interactions used to operate and improve the Service. In the App this is collected only if you turn on Usage Analytics (section 11). On the Website it is collected only if you accept analytics cookies.
- Diagnostic data: crash reports and error logs, to fix problems and keep the Service reliable (section 11).
- Cookies and similar technologies on the Website. See our Cookie Policy.
We do not intentionally collect special category data. Please do not send us sensitive personal data that we have not requested.
3. How we use your information and our lawful bases
Under UK GDPR we must have a lawful basis for using your personal data. Our bases are:
| Purpose | Lawful basis |
|---|---|
| Create and manage your account; provide the calculators, insights and educational content | Performance of a contract |
| Provide, bill and manage Premium subscriptions and free trials | Performance of a contract |
| Store a copy of your data in our cloud so you can restore it on a new or replacement device | Consent (off by default; you can withdraw at any time by switching Cloud Backup off) |
| Keep the Service secure, prevent fraud and abuse, and diagnose and fix faults (including crash and error reporting) | Legitimate interests (running a secure, reliable service) |
| Understand how the Service is used and improve it (product analytics, session replay) | Consent, via the Usage Analytics setting in the App and cookie choices on the Website |
| Advertising and campaign measurement on the Website | Consent, via cookie choices |
| Send you marketing or newsletter emails | Consent (you can unsubscribe at any time) |
| Comply with legal, accounting and regulatory obligations | Legal obligation |
Where we rely on legitimate interests, you have the right to object (section 9).
4. Who we share your information with
We do not sell your personal information. We share it with service providers ("processors") who act on our instructions under contract, and where required by law. Our processors are:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Account authentication and database | United Kingdom (London) |
| Sentry | Crash and error diagnostics | European Union (Germany) |
| PostHog | Product analytics (event-based; session replay disabled) | European Union |
| RevenueCat | Subscription management and entitlement (no card data) | United States |
| Microsoft Clarity | Usage analytics including session replay | United States |
| Google (Analytics and Ads) | Website analytics and advertising measurement | United States |
| Netlify | Website hosting and form handling (waitlist and newsletter name and email) | United States / global |
| Google Workspace | Sending you email (access instructions and support replies) | United States / global |
Apple and Google
When you buy a subscription, Apple and Google are the sellers of record. They are not our processors: they handle your payment for their own purposes and as independent controllers of that information, under their own privacy policies. We receive only your subscription status, plan, trial eligibility and anonymised transaction identifiers, never your card or bank details. Their handling of your purchase is governed by the Apple Media Services Terms or the Google Play Terms of Service and the relevant privacy policy.
We may also share information to comply with the law or legal process, to enforce our terms, to protect the rights and safety of users, or in connection with a business sale or reorganisation (in which case your data remains subject to protections at least as strong as this policy).
5. International transfers
Where personal data leaves the UK, we rely on a specific safeguard recognised under UK data protection law:
- European Union (Sentry, PostHog): transfers are made under the UK adequacy regulations for the EEA, which permit transfers without additional safeguards.
- United States and global (RevenueCat, Microsoft Clarity, Google, Netlify): transfers are made under the UK International Data Transfer Agreement, or under the EU Standard Contractual Clauses together with the UK Addendum, in each case supported by our assessment of the transfer.
Apple and Google are not covered by these arrangements. As independent controllers for your purchase (section 4), they transfer and protect that information under their own terms rather than ours.
You can ask us for more detail about the safeguard applying to a particular provider at privacy@salaryon.com.
6. Cloud Backup
Salaryon is designed so that your financial figures stay on your device. Cloud Backup is an optional feature that keeps a copy on our servers so that you can get your data back if you lose, replace or reinstall your phone. It is free, and it is not part of a Premium subscription.
- It is opt-in and off by default, and we rely on your consent. If you do not switch it on, your financial figures remain only on your device.
- It backs up your saved calculations, budgets, net worth snapshots, the categories and settings attached to them, and your Learn progress. It does not include your sign-in credentials, analytics identifiers or subscription records.
- Your data is stored in the United Kingdom and encrypted in transit and at rest.
- This is not end-to-end or "zero-knowledge" encryption. Our systems can process your data in order to provide the feature.
- Each backup is a complete snapshot. We keep the five most recent snapshots for your account and delete older ones automatically, so that you can go back to an earlier version if a recent one is not the copy you wanted.
- Restoring replaces the Salaryon data on that device with the backup. We ask you to confirm first, and we keep a copy of what was on the device beforehand among your snapshots.
- You can withdraw your consent at any time by switching Cloud Backup off, and you can delete the cloud copy outright from the same screen. Your data stays on your device. Deleting your account deletes your backups too.
Cloud Backup keeps a copy you can restore from. It is not a sync feature: your devices are not kept in step with each other, and a change made on one device does not appear on another until you back up and then restore. If we build continuous syncing in future, we will update this policy before it is switched on.
7. How long we keep your information
We keep different information for different periods:
- Account information is kept while your account is active, and removed when you delete your account.
- Analytics data is kept only for as long as it remains useful for understanding and improving the Service, and is deleted when you delete your account.
- Crash and error reports are kept only for as long as we need them to diagnose and fix the problem, and expire automatically after that.
- Records we are required to keep by law, such as those needed for accounting or tax, are kept for the period the relevant law requires.
When data is no longer needed for the purpose we collected it for, we delete or anonymise it.
8. Security
We use appropriate technical and organisational measures to protect your personal information, including encryption in transit and at rest, access controls, and per-user data isolation. No method of transmission or storage is completely secure, but we work continually to protect your data and to detect and respond to risks.
9. Your rights
Under UK data protection law you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased ("right to be forgotten");
- restrict or object to our processing;
- data portability (receive your data in a usable format);
- withdraw consent at any time where we rely on it. For analytics, use the Usage Analytics toggle in the App or the "Cookie settings" link in the Website footer; for Cloud Backup, switch it off in the App. Withdrawing does not affect processing already carried out.
You can delete your account in the App (Account → Delete account). This removes your account and the personal data we hold about you in our core systems, and clears the data stored on your device. To request deletion of data held by our other service providers, contact us at privacy@salaryon.com. See our account deletion page for the full process. We will respond within the time limits set by law (normally one month).
Complaints
If you are unhappy with how we have handled your personal data, please tell us first at privacy@salaryon.com. We will acknowledge your complaint, look into it, and give you a response within 30 days.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk) at any time, though we would welcome the chance to put things right first.
10. Children
Salaryon is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
11. Analytics and diagnostics
In the App
Product analytics and session replay are off until you turn them on. We ask once, after onboarding, and you can change your answer at any time in Settings → Preferences → Usage Analytics. If you decline, these tools stay off.
- PostHog provides event-based product analytics. Session replay is disabled, and events do not carry your financial amounts.
- Microsoft Clarity provides usage analytics including session replay, with masking enabled so that on-screen content is obscured in recordings. Clarity is paused if you decline, or if you later switch Usage Analytics off.
- Sentry provides crash and error reporting. We treat this as necessary to keep the Service working, so it runs regardless of the Usage Analytics setting and we rely on legitimate interests. Reports are scrubbed: monetary amounts are redacted, and email addresses and IP addresses are stripped.
Where each of these providers is located, and the safeguard we rely on for it, is set out in sections 4 and 5.
On the Website
The website analytics and advertising tools listed in section 4 are not loaded until you accept analytics cookies. Until you accept, no analytics or advertising scripts run. You can change or withdraw your choice at any time using the "Cookie settings" link in the footer. Full detail is in our Cookie Policy.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and change the "Last updated" date. If changes are significant, we will provide a more prominent notice. Please review it periodically.
13. Contact us
Salaryon
124 City Road
London, EC1V 2NX, United Kingdom
privacy@salaryon.com