privacy.
plain-English summary of what we collect, how documents are read, and what you can ask us to delete.
what we collect
the documents you scan, the figures we extract, your reminders, and basic app analytics (if you allow it). no bank connection, ever.
how your documents are read
to decode a document we send it to Anthropic over an encrypted connection, where Claude reads it. it is processed to produce your result and is not used to train models.
where your data lives
your documents and the data taken from them are stored in the united kingdom and encrypted at rest. the document itself is processed by Anthropic in the united states under a data processing agreement with standard contractual clauses.
originals
by default the original photo is deleted once the figures have been taken from it — we keep the result, not the picture. keeping originals is a setting you turn on yourself.
retention & deletion
saved decodes stay in your vault until you delete them. “delete everything” removes your documents and account permanently. deleted data can persist in encrypted backups until those backups are overwritten on their normal cycle; backups are never used for anything else.
what we measure on this website
two things, and they are different in kind. Umami counts visits on our own server at stats.ontwrpn.com — no cookies, nothing stored on your device, no data sent to anyone else. Microsoft Clarity records how pages are used — clicks, scrolling, and session replays — to show us where the site confuses people; it sets cookies and sends that data to Microsoft, who act as a processor for us and may also use it under their own terms.
the website measurement is separate from the app. neither tool ever sees the documents you scan.
you can switch either of these off right here. the choice is stored in this browser only.
needs javascript — without it, Clarity never loads at all and the visit counter stores nothing on your device.
your rights (UK GDPR)
access, export, correct or delete your data at any time from settings → privacy. lawful basis: contract for the core service, legitimate interests for security and diagnostics, consent for optional analytics and for keeping originals.
we sell data to nobody and run no advertising on this site. the one third party that receives website-usage data is Microsoft, through Clarity, as described above.
contact
privacy@trydecode.app · or write to the address in settings → about.