Privacy Notice

1. Who we are

This Privacy Notice describes how Brickhouse Media ("we", "us", "our") collects and uses personal data when you use the Due Today app and website (the "Service"). Brickhouse Media is the data controller for personal data processed through the Service.

2. Data we collect

We collect the following categories of personal data:

• Account data — the name you choose to display in the app.
• Bill data — the bill names, amounts, due dates, repeat schedules, and paid/unpaid status you enter. In the current version this data is stored locally on your device.
• Support communications — messages you send us when requesting help.
• Technical data — IP address, browser/device identifiers, and basic usage telemetry needed to operate and secure the Service.
• Payment data — when you purchase a paid tier, payment details are collected and processed by Paddle, our Merchant of Record. We receive a record of the purchase (e.g. email, plan, status) but do not receive your card details.

3. Why we use it

• To provide and improve the Service (contract performance).
• To deliver reminders and notifications you have enabled (contract performance).
• To handle subscription orders, invoicing, and tax compliance through Paddle (contract performance and legal obligation).
• To detect and prevent fraud, abuse, and security threats (legitimate interests).
• To respond to your support requests (legitimate interests).
• To comply with legal obligations that apply to us (legal obligation).

4. How we share data

We share personal data with the following categories of recipients:

• Paddle — our Merchant of Record for the sale of paid tiers. Paddle handles payment processing, subscription management, invoicing, and tax compliance, and is an independent controller for the payment data it collects. See Paddle's Privacy Notice.
• Service providers — hosting, infrastructure, analytics, and support tooling acting on our behalf as processors.
• Professional advisers — legal and accounting professionals where necessary.
• Authorities — where required by law, regulation, or valid legal process.

5. Retention

We keep personal data only for as long as is necessary for the purposes described above, to comply with our legal obligations, or to resolve disputes. Bill data stored locally on your device is removed when you clear it from the app or uninstall the app. When data is no longer needed it is deleted or anonymised.

6. Your rights

Subject to your local law, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal data, to receive your data in a portable format, to withdraw consent where processing is based on consent, and to lodge a complaint with your local data protection authority. To exercise these rights, contact us using the details below; we aim to respond within one month.

7. International transfers

Personal data may be processed in countries other than the one in which you live, including by our service providers and Paddle. Where data is transferred out of the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use reasonable technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data. No system is perfectly secure, so we cannot guarantee absolute security.

9. Cookies

The Service uses only essential storage (such as local storage for your bills and preferences) required to provide core functionality. If we introduce analytics or marketing cookies in the future we will update this notice and offer the appropriate controls.

10. Contact

Questions about this Privacy Notice or your personal data? Contact Brickhouse Media through the support channel listed in your Paddle receipt or in the Service.