Free for 14 days. Cancel anytime.

Privacy Policy

Last updated: October 2026

Your privacy matters to us. This policy explains what personal data we collect, how we use it, and the choices you have. Lazybooks is registered with the Information Commissioner's Office (ICO) and is fully GDPR compliant.

1. Information we collect

We collect: account details you provide (name, email address, business name, business address, logo, currency); content you create in the app (invoices, quotes, expenses, receipts, folders, organisation members); device and usage information (device identifier, operating system version, crash reports, in-app diagnostic events); and billing identifiers processed by our payment providers (Apple App Store on iOS, Stripe on the web).

2. How we use your information

We use your data to provide and improve the service, render the invoices and quotes you generate, process subscription payments, send service-related communications, and keep your account secure. We do not sell your personal data and we do not use it for cross-app advertising or tracking.

3. Third parties we share data with

To operate the service we rely on the following processors and platforms, each subject to their own privacy practices: Google Firebase (authentication, database, file storage, push notifications, cloud functions); RevenueCat (fulfilment of Apple In-App Purchase subscriptions on iOS); Apple Inc. (App Store / In-App Purchase billing on iOS — your iOS subscription billing data is handled by Apple); Stripe (payment processing for web subscriptions); Sentry (crash and error reporting); Amazon Web Services (our backend, reading scanned receipts with Amazon Textract, and storing receipt images, on servers in London and Ireland); Resend (sending the invoice, quote and reminder emails you send to your clients, which includes their email addresses and the document); DigitalOcean (hosting for our database, our email service and our AI service, and the AI models behind Lilibet, the in-app assistant, which receive your questions and the parts of your books needed to answer them). We share with these providers only what is necessary to operate the service, and they do not have permission to use your data for their own advertising or marketing. If you connect an AI app such as Claude or ChatGPT, that app also receives the data it reads from your books; see Connecting AI apps below.

4. Connecting AI apps

You can choose to connect an AI app, such as Claude or ChatGPT, to your Lazybooks account. Nothing is shared until you connect one yourself. When you do, you choose whether it can only read your books or also make changes, and which of your businesses it can see. You can disconnect an app at any time by removing Lazybooks in that app’s settings, or from Account → Connected apps in the Lazybooks web app, which cuts off its access straight away.

What a connected app can see: for the businesses you share, your business details, invoices, quotes, clients (including their names, email addresses and addresses), income, expenses and expense folders, and totals worked out from them. It only reads what it needs to answer your request.

What it can do with full access:add clients, create invoices and quotes, record income and expenses, and mark invoices paid. It can’t email your clients: invoices it creates are saved unsent, and you send them from Lazybooks.

Where your data goes:what the app reads is sent to the company that provides it (for example Anthropic for Claude, or OpenAI for ChatGPT) and is handled under that company’s own privacy policy. We don’t control how they store or use it, so only connect apps you trust, and share only the businesses they need.

What we keep:the app’s registration details (its name and sign-in address); a record of each connection (your account, the app, its access, the businesses you shared, and when it was connected and last used); sign-in tokens, which last an hour and can be renewed for up to 90 days; and a log of every change an AI app makes to your books (what changed, when and by which app), so you can review it and undo it. We don’t receive or keep your conversations with the AI app, only its requests to read or change your books, and we don’t use any of this for advertising or to train AI models.

How long: a connection stops working as soon as you disconnect it, and we keep its record and the action log as a history of what happened while your account is open. If you delete your account, connected apps lose access to your books and these records are deleted with it. To have them deleted while keeping your account, email info@lazybooks.co.uk.

5. Cookies on this website

Essential cookies run this website and are always on, including lb_consent, which remembers your cookie choice for six months. Everything else is off until you allow it in our cookie banner, and you can change your choice at any time from “Cookie settings” at the bottom of any page.

Analytics (optional): Google Analytics, loaded through Google Tag Manager, to understand how the site is used (cookies such as _ga, kept for up to two years).

Marketing (optional): Google Ads and the Meta pixel, to measure which adverts bring people to Lazybooks (cookies such as _gcl_au and _fbp), and lb_click_ids, which keeps the ad click you arrived from for 90 days so a later sign-up can be credited to it.

Until you choose, Google’s tags only send cookieless, anonymised signals. We also use Vercel Web Analytics and Speed Insights, which don’t use cookies and only report aggregate visits and page performance.

6. Legal basis for processing

We process personal data on the basis of performing our contract with you, your consent, our legitimate interests, and to comply with legal obligations such as financial record-keeping requirements.

7. Data security

We protect your data using industry-standard TLS in transit and encryption at rest, along with organisational measures designed to prevent unauthorised access, loss or misuse.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the service and meet legal obligations. UK tax law generally requires financial records to be retained for six years.

9. Your rights

You have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can delete your account end-to-end from inside the iOS app (Profile → Settings → Account Security → Delete Account) or by contacting us at the address below. Account deletion cascades through our backend and our payment providers, cancelling any active subscription and removing the associated data.

10. Contact us

If you have any questions about this policy or your data, please contact us at info@lazybooks.co.uk.

This is a general template for illustration. Please have it reviewed by a qualified legal professional before publishing.