Privacy

Draft, last changed 3 November 2026. This has not been legally reviewed and may change before Hikewatch opens fully.

Neon Atlas runs Hikewatch and is the controller of your personal data under UK GDPR. Company number: [to add]. Address: [to add]. Contact: [email to add].

What we keep

• Your email address, plus your name and picture if you log in with Google.
• Your workspace: the tools you add, their renewal dates and how you pay for them.
• Receipts you forward to your Hikewatch address: the sender, subject and email text. We read the vendor, amount and renewal date from them, keep what we read, and delete the email text after 14 days.
• A session cookie that keeps you logged in.
• A record of each renewal reminder we email you, so we never send the same one twice, and whether you have turned reminders off.
• If you invite someone to your workspace, their email address until they join or the invite expires after 7 days.
• If you pay: your plan, its status, and the customer and subscription ids Paddle gives us. We never see or keep your card details.
• Your email address and IP address against login requests, to limit abuse. We delete these after about an hour.

Why we use it

• To provide the service you signed up for, which is our lawful basis of contract.
• To keep the service secure and stop abuse, which is our legitimate interest.

We don't sell your data, and we don't use advertising or analytics cookies.

Who processes it for us

• Railway hosts the app and database.
• Cloudflare carries traffic to the site and receives the receipts you forward.
• Resend sends login, reminder and invite emails.
• Paddle sells paid plans as our merchant of record. If you upgrade, Paddle collects your payment details, name, address and tax details under its own privacy notice.
• Anthropic reads receipts that our own rules can't, using its Claude AI model.
• Google handles sign-in, if you choose it.

Some of these companies may handle data outside the UK. We'll update this list before adding anything else that shares your data.

How long we keep it

We keep your account and workspace until you delete them. You can download your data or delete your account from the Account page in the app, or email us and we'll do it.

Your rights

You can ask for a copy of your data, or ask us to correct, delete or stop using it. If you're unhappy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.