Privacy Policy
Last updated: 11 May 2026
This Privacy Policy explains what personal data Street-Lawyer UK collects, why we collect it, how long we keep it, and what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. In short: we collect the minimum needed to run the Service and to respect any legal obligations on us, and we never sell your data to anyone.
1. Who is the data controller?
The operator of Street-Lawyer UK is the data controller. You can contact us at support@streetlawyeruk.com. (For Apple App Store subscriptions, Apple is a joint controller for the purchase-related personal data they collect on our behalf — see Apple's privacy policy at apple.com/legal/privacy.)
2. What we collect, why, and how long we keep it
| Data | Why | Legal basis (UK GDPR Art. 6) | Retention |
|---|---|---|---|
| Email address (only if you contact us via the contact form, purchase the Handbook, or restore a subscription) | To reply to your support request, to deliver the Handbook PDF, to verify your subscription | (b) Performance of contract; (f) Legitimate interest in providing support | 3 years from last contact, then deleted |
| Anonymous IP address & daily question count | To prevent abuse of the AI assistant by enforcing per-IP daily rate limits | (f) Legitimate interest in fair use and cost control | Reset every UTC day; no historical IP log kept |
| Questions you ask the AI Legal Assistant | To generate a response; we do not retain the question after the response is delivered, except for the last 3 turns kept temporarily for multi-turn context within a single session, and any answers you choose to save to your in-app Research Folder (stored only on your device) | (b) Performance of contract | In-memory only; deleted on session end |
| App settings, scenario favourites, Incident Log entries, Research Folder entries | To make the App work as you've configured it | (b) Performance of contract | Stored only on your device. We never see this data. |
| Audio recordings made via the in-app recorder | To let you record an encounter | (b) Performance of contract | Stored only on your device. We never see or receive your recordings. |
| Apple In-App Purchase receipt token | To verify your subscription tier on the backend | (b) Performance of contract | Until your subscription ends, plus 6 years for HMRC accounting purposes |
| Stripe / PayPal payment token (Handbook only) | To process the £19.99 one-off payment | (b) Performance of contract | Held by Stripe / PayPal under their own policies; we receive only the transaction outcome and your email address |
3. AI processing — third-party LLM providers
The AI Legal Assistant uses OpenAI's GPT models (GPT-5.2 for Plain English mode and GPT-4o for Research & Study mode), routed through the Emergent Integrations service. When you submit a question:
- The question text is sent to OpenAI for processing. No personally identifying information from your account is sent with the request (no email, no IP, no device ID).
- OpenAI's published policy is not to train its production models on API request content. See openai.com/policies/api-data-usage-policies.
- If you have enabled the "Bring Your Own OpenAI Key" feature (Pro only), the request is sent directly to OpenAI using your personal key and is governed by your own OpenAI account terms.
By using the AI Legal Assistant, you understand that question text is processed by OpenAI under their data-processing terms. Please do not include real names, addresses, NHS numbers, NI numbers, or other identifiers in your questions. The AI is configured to refuse to act on personal-fact prompts (see the Personal-situation safeguard in our Terms of Use).
4. Cookies
The Site uses only strictly necessary cookies (or equivalent local storage) to remember:
- that you have dismissed the cookie banner;
- that you have a current paid subscription tier (in the App only — the Site does not gate any content);
- your selected daily AI usage count (in the App only — to enforce the cap).
We do not use analytics, advertising, cross-site tracking, social-media pixels or fingerprinting cookies. Under the Privacy and Electronic Communications Regulations (PECR), strictly necessary cookies do not require prior consent, but the cookie banner is shown for transparency.
5. Who we share data with
We share the minimum necessary data with the following processors, all of which provide UK-GDPR-compliant safeguards:
- Apple — for App Store distribution, subscriptions and receipt verification.
- Stripe (UK) Ltd — for card payments on the Handbook.
- PayPal (Europe) S.à r.l. et Cie, S.C.A. — for PayPal payments on the Handbook.
- Resend — for transactional email delivery (Handbook download links, support replies).
- OpenAI / Emergent Integrations — for AI processing of your questions.
We do not sell, rent or barter your personal data to anyone. Ever.
6. International transfers
Some of our processors (e.g. OpenAI, Stripe US) may process data outside the UK. These transfers are protected by the UK International Data Transfer Agreement or equivalent Standard Contractual Clauses.
7. Your rights under UK GDPR
You have the right to:
- request a copy of the personal data we hold about you (subject access request);
- ask us to correct anything inaccurate;
- ask us to delete your data ("right to be forgotten");
- object to processing or request restriction of processing;
- data portability (where applicable);
- complain to the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.
To exercise any of these rights, email support@streetlawyeruk.com from the address associated with your account. We aim to respond within one calendar month.
8. Children
Street-Lawyer UK is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Changes to this policy
We will update the "Last updated" date at the top whenever this policy changes. If a change materially affects how we process your data, we will notify existing subscribers by email and/or via an in-app notice.
10. Contact
For any privacy questions: support@streetlawyeruk.com