Privacy Policy

Last updated 29 June 2026

This policy explains what personal information SimpliHeat collects, why we collect it, who we share it with, and the rights you have over it. It applies to the SimpliHeat website, web app and the SimpliHeat Android app.

1.Who we are

SimpliHeat is operated by [COMPANY LEGAL NAME] Ltd (company number [NUMBER]), whose registered office is at [REGISTERED ADDRESS] (“SimpliHeat”, “we”, “our” or “us”). For the personal data described in this policy, we are the data controller. We are registered with the UK Information Commissioner's Office (registration number [ICO REGISTRATION NUMBER]). You can reach us about privacy at hello@simpliheat.app.

2.What information we collect

Account information

When you create an account we collect your name, your company name and your email address. Your password is stored only in a securely hashed form — we never store it in plain text and cannot see it.

Survey and design information you enter

To do its job, SimpliHeat stores the information you put into a project. This can include property addresses and postcodes, the names and contact details of the customers you are quoting, the heat-loss inputs and equipment choices for the design, and survey photographs you take or upload, which may show the inside of a customer's property. You decide what goes into a project.

Technical information

To keep you signed in we set one essential session cookie. Our servers also keep standard logs (such as IP address and timestamps) for security, troubleshooting and to keep the service running.

3.How and why we use it

We use your information to:

• provide the service, create and manage your account, and save and display your projects — this is necessary to perform our contract with you;
• keep the service secure, prevent misuse, maintain backups and meet our legal obligations — this is in our legitimate interests and, where applicable, a legal obligation;
• respond to messages you send us through the contact form or by email — this is in our legitimate interests in answering enquiries.

We do not use your information for advertising, we do not sell or rent it, and we do not build advertising profiles.

4.Cookies

We use a single strictly-necessary cookie to keep you logged in to your account. We do not use advertising or cross-site tracking cookies. Because the login cookie is essential to the service working, it does not require consent.

5.Who we share it with

We do not sell your data. We share it only with the service providers that help us run SimpliHeat, who act on our instructions under contract:

• Hosting and delivery — our application and website are hosted on Vercel.
• Database — your account and project data are stored in a Turso (libSQL) database.
• Email — transactional and contact emails are sent using Resend.

We may also disclose information if required to do so by law, or to protect our rights, users or the security of the service.

6.Where your data is stored

Our providers may store or process data on servers outside the United Kingdom. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or transfers to countries the UK considers to provide adequate protection.

7.Your customers' personal data

When you enter your customers' details and take photographs of their property, you are responsible for that information: in data-protection terms you are the controller of your customers' personal data and SimpliHeat acts as a processor on your behalf, processing it only to provide the service to you. You must have a lawful basis and the necessary permission to enter that information and those images, and to share them in the proposals you produce.

8.How long we keep it

We keep your account and project data for as long as your account is active, and for a reasonable period afterwards so you can reactivate or recover it. When data is no longer needed, or when you ask us to delete it, we remove it — except where we need to keep certain records to meet a legal, security or accounting obligation.

9.Your rights

Under UK data-protection law you have the right to: access a copy of your personal data; have inaccurate data corrected; have your data erased; restrict or object to how we use it; ask for your data in a portable format; and, where we rely on consent, withdraw it. To exercise any of these, email hello@simpliheat.app and we will respond within one month. Exercising your rights is free, and you will not be treated differently for doing so.

10.Deleting your data or closing your account

You can ask us to close your account and delete the personal data associated with it at any time by emailing hello@simpliheat.app from the address on your account, or using any in-app account-deletion option where available. We will delete your account data within 30 days of confirming the request, other than anything we are required to retain for legal or security reasons. Deleting your account is permanent and cannot be undone.

11.Security

We protect your data with measures including encryption in transit (HTTPS), securely hashed passwords, and access controls limiting who can reach your information. No method of transmission or storage is completely secure, but we work to protect your data and to handle any incident responsibly.

12.Children

SimpliHeat is a professional tool intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

13.Changes to this policy

We may update this policy from time to time. When we make a material change we will update the date at the top of this page and, where appropriate, let you know by a notice on the site or by email.

14.Contact & complaints

If you have any questions about this policy or how we handle your data, email hello@simpliheat.app. If you are unhappy with how we have handled your information, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk, though we would welcome the chance to put things right first.