This policy explains what personal data Deckr collects, why, and what rights you have over it. It's written in plain English rather than legal boilerplate — if anything is unclear, contact us at the address below.
Deckr is developed and operated by Gary Stevens, a sole trader based in the UK. For any privacy question or request, contact privacy@deckr.co.uk.
Your account details — full name, business name, trade, phone number, business address, email, VAT number, and bank details (account name, sort code, account number). Bank details are shown only on invoices you generate, for your own clients to pay you by transfer — Deckr does not process payments itself and never sees your clients' payment details.
Information you enter about your clients — name, phone number, email, address, and any notes you add. This is data you collect in the course of running your trade; Deckr stores it so you can manage jobs, quotes, and invoices for those clients.
Job, quote, and invoice records — titles, schedules, line items, prices, notes, and any photos you attach to a job.
Missed-call information, where used — caller phone number and any notes or summary associated with it, so you can follow up.
Account credentials — your email and password are handled by our authentication provider (Supabase); we never see or store your password in plain text.
We do not collect location data, advertising identifiers, or any data for advertising purposes, and we do not run analytics or tracking SDKs in the app.
To provide the app's core functionality: scheduling jobs, generating quotes and invoices, managing your client list, and — if you turn it on — sending an automatic reminder email once an invoice is overdue. We don't use your data, or your clients' data, for any purpose beyond running the app you're using.
We use a small number of service providers to run Deckr, each acting as a data processor on our behalf:
When you send a quote or invoice yourself (Preview/Send), that goes through your own device's share sheet (Mail, Messages, WhatsApp, etc.) — Deckr doesn't route or see that content itself.
We do not sell your data or your clients' data, and we do not share it with anyone for marketing purposes.
When you enter a client's details into Deckr, you are the data controller for that information under UK GDPR — you're responsible for having a lawful basis to hold it (typically, your existing business relationship with that client). Deckr acts as a data processor, storing and presenting that information back to you as part of the service.
Your data is kept for as long as your account is active. If you delete your account (Settings → Account → Delete account), everything tied to it — your profile, your clients, jobs, quotes, invoices, and photos — is permanently deleted, immediately, including from our backups within a reasonable period. This cannot be undone.
Under UK GDPR and the Data Protection Act 2018, you have the right to:
To exercise any of these, email privacy@deckr.co.uk. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe your data has been mishandled.
Data is encrypted in transit (HTTPS) and access is restricted so that only you can see your own account's data. We take reasonable technical measures to protect it, but no system is 100% secure, and we can't guarantee absolute security.
Deckr is a business tool for tradespeople and isn't directed at children. We don't knowingly collect data from anyone under 16.
Some of our service providers may process data on servers outside the UK/EEA. Where this happens, we rely on appropriate safeguards (such as standard contractual clauses) required under UK data protection law.
We may update this policy as the app changes. If we make a material change, we'll let you know inside the app. The "last updated" date at the top always reflects the current version.