Privacy Policy

Effective Date: April 14, 2026

1. Introduction

Welcome to 2plus1finance (operated by TwoPlusOneStudio Ltd). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (2plus1finance.com) and use our mobile application 2plus1finance app.

2. Information We Collect

To provide our invoicing, expense tracking, and mileage services, we collect the following types of information:

• Personal Information: When you create an account, we collect your name, email address, company name, and secure passwords.
• Financial & Business Data: We store the data you actively input into the App, including invoice details, client contact information, expense amounts, and custom vehicle rates.
• User Content (Images & Files): If you use our receipt scanning feature, we collect the images or PDF files you upload to extract text and generate expense records.
• Location Data: If you use our Mileage Tracker, we collect location data (via Mapbox) to calculate route distances. We only process the start, stop, and destination waypoints you input or select on the map.
• Payment Information: We do not process or store your credit card data on our servers. Subscription payments made via our website are processed by GoCardless, and subscription payments made via the iOS app are processed by Apple through the App Store. We only receive transaction identifiers, subscription status, and renewal dates — never your full card or bank details.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App's core features (generating invoices, tracking expenses, and calculating profit & loss).
• Authenticate your account and secure it using Two-Factor Authentication (MFA).
• Utilize Optical Character Recognition (OCR) and AI to read and extract data from the receipts you upload.
• Calculate driving routes and mileage claims.
• Send you administrative emails, such as password resets and subscription updates.
• Provide customer support.

4. How We Share Your Information

We do not sell your personal data. We only share information with trusted third-party service providers necessary to operate the App:

• Mapping Services (Mapbox): We share waypoint coordinate data with Mapbox strictly to calculate driving routes and distances.
• Payment Processors: We share necessary account identifiers with GoCardless (for web subscriptions) and Apple (for iOS In-App Purchases) to manage and verify your subscription.
• Cloud Hosting & Database: Your data is securely stored on our cloud infrastructure providers, and our secure servers.

5. Data Retention & Deletion

We keep your personal and financial data only for as long as your account is active or as needed to provide you with our services.

• Soft Deletion: Items moved to the "Trash" within the App are retained temporarily so you can restore them.
• Permanent Deletion: You can permanently delete items from the Trash, which immediately wipes them from our database.
• Account Deletion: You have the right to request the complete deletion of your account and all associated data by contacting us.

6. Data Security

We implement industry-standard security measures to protect your data, including encrypted database connections, JSON Web Tokens (JWT) for secure login sessions, and optional Two-Factor Authentication (MFA). However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Data Protection Rights (GDPR)

Depending on your location (such as the UK or EEA), you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request Erasure of your personal data ("Right to be forgotten").
• Restrict or Object to our processing of your data.
• Data Portability (requesting a copy of your data, such as our CSV export feature).

To exercise any of these rights, please contact us using the details below.

Email: support@tpostudios.co.uk

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the "Effective Date" at the top of this page and, where appropriate, sending an email notification.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: support@tpostudios.co.uk
Website: 2plus1finance.com