Privacy Policy

Last updated 30 September 2026

ProMeasure is built by Quantum Encoding Ltd (United Kingdom), the controller of the personal data described here unless a section says otherwise. This policy explains, in plain English, what the app stores, what our servers hold, who else receives data, how long we keep it and what your rights are. We do not sell your data, and there is no advertising.

What the app stores

Your business records — scans, measurements, evidence photos, clients, quotes, invoices, expenses and tax figures — are stored on your device and in your own private iCloud database. They are yours. We do not keep a copy of your books on our servers.

Your sign-in

You sign in with Apple. The app keeps your name and email on your device. When you set up payments or HMRC filing, the app sends our servers the identity token Apple issues, which we check with Apple. We then keep only Apple's user identifier for you and a hashed token for each device you pair; we never receive your Apple ID password.

Payments and Stripe Connect

If you set up card payments, you become your own Stripe account holder: Stripe is the payment processor, and you are the merchant.

• Account setup. You give your country, business name and email in the app, and we ask Stripe to create your connected account. Our server keeps a record linking your ProMeasure identity to that Stripe account, with the country, business name and email you entered and the setup status Stripe reports (for example, whether you can take payments yet).
• Identity checks. Stripe's own onboarding screens run inside the app and collect what Stripe needs to verify you, such as your legal name, date of birth, address, phone number, bank details and photos of an identity document. Stripe collects and holds that information as an independent controller under its own privacy policy; it does not pass through our servers.
• Payments. When your customer pays by card or by an online payment link, Stripe tells our server, and we record the payment's Stripe reference, the invoice number, the amount, and any refund or dispute, so the app can mark the invoice paid. We also keep the payment links we create for you. Card numbers are handled only by Stripe; we never see or store them.

HMRC filing (Making Tax Digital and CIS)

Live filing with HMRC switches on once HMRC approves ProMeasure. When you connect and file:

• Your HMRC connection. You sign in with your own Government Gateway credentials on HMRC's website; we never see that password. HMRC gives our server access tokens, which we encrypt (AES-GCM) before storing. We also keep the connection's status and the permissions you granted.
• Your tax identifiers. We store your National Insurance number and your HMRC business ID so we can file for you, and the VAT registration number or contractor tax reference sent with a VAT return or CIS submission.
• What you file. Our server relays each submission to HMRC and keeps a log of it: what was sent (amounts and periods) and HMRC's reference.
• Fraud-prevention data. HMRC requires every submission to carry information about your device and connection: a random device identifier the app creates, your device's local network addresses, your public IP address, time zone, screen size, and the app and operating-system versions. We send it to HMRC with each call and do not store it.
• CIS Online. For CIS returns and subcontractor verifications, your Government Gateway user ID and password travel inside the submission to HMRC and are never stored. We keep the submission's reference, status, a summary of counts and totals, and HMRC's response (for a verification, the result for each subcontractor).

Working for an organisation (enterprise installs)

Some businesses give ProMeasure to their installers. On those installs, the photos, videos and scans you capture for a job are uploaded to that organisation's own storage, with the job reference, your ProMeasure user ID, the time, and the location, compass heading and accuracy recorded when the photo was taken. The organisation is the controller of that data and decides how long it is kept. We process it only on their instructions, as their processor. Ask the organisation you work for about their privacy notice or to access or delete that data.

A site-visit log can record when you arrive at and leave a job's address. It is off unless switched on, asks for your location permission first, and its entries are stored in the job's notes on your device.

ProMeasure Cloud

ProMeasure Cloud (app.promeasure.co.uk) is a web workspace open by invitation only. Invited users sign in with Google. It stores the documents, receipts, expenses, jobs and supplier details its users upload, on Cloudflare. Uploaded documents may be sent to AI services (Google Gemini and Anthropic Claude) to read the figures from them.

Where our servers run

Our servers run on Cloudflare Workers (Cloudflare, Inc.), a global edge network: a request is handled at the data centre nearest your device. The data we keep is stored in Cloudflare's Western Europe region.

How long we keep it

• Device pairings and your Apple user identifier: until you delete your account.
• Payments account record, payment records and payment links: until you delete your account.
• HMRC connection, encrypted access tokens, National Insurance number and business ID: until you disconnect HMRC (tokens) or delete your account (everything). HMRC's own grant expires about 18 months after you last connect.
• HMRC and CIS submission logs: until you delete your account. HMRC keeps its own record of everything you filed.
• An HMRC sign-in in progress: deleted when HMRC returns you to the app, refused after 15 minutes, and deleted with your account.
• Waitlist email: until ProMeasure launches and we have told you, or until you ask to be removed.
• Waitlist abuse counter: a one-way hash of your IP address, deleted within a day.

You must keep your own tax records for as long as HMRC requires (for Income Tax, 5 years after the 31 January filing deadline; for VAT, 6 years). Those records live in the app on your device and in your iCloud, so export a backup before deleting your account.

Deleting your account

In the app, go to Settings › Account › Delete account and confirm with Apple. That deletes, straight away:

• everything our servers hold for you: device pairings, your payments account record, payment records and links, your HMRC connection, tokens, National Insurance number and submission logs;
• the copy of your data in your iCloud, and everything the app stores on the device.

We also ask Apple to end ProMeasure's Sign in with Apple access. Your Stripe account belongs to you: we disconnect it from ProMeasure where Stripe allows, and it stays open at Stripe, which keeps its own records as the law requires. Close it at dashboard.stripe.com if you no longer need it. Data held by an organisation you work for is theirs to delete. You can also ask us by email to delete your data.

The launch waitlist on this website

If you join the launch waitlist on promeasure.co.uk, we store the email address you give us, plus your trade and business type if you choose to tell us, and the date you signed up. We use them only to email you when ProMeasure launches and to understand which trades are interested. We never share or sell them.

The list is stored in Cloudflare's Western Europe region. To stop sign-up abuse we count sign-ups per connection for an hour; that count is kept against a one-way hash of your IP address, never the address itself, and is deleted within a day. Our lawful basis is your consent. To be removed from the list, email info@quantumencoding.io and we will delete your details.

Lawful basis

Under UK GDPR, our lawful bases are:

• Contract — processing needed to provide the service you asked for: pairing your device, setting up your payments account, recording payments, and connecting to HMRC and filing when you choose to.
• Legal obligation — the fraud-prevention data attached to HMRC submissions, which HMRC requires by law.
• Legitimate interests — keeping submission logs so a filing can be traced if HMRC or you ever query it, and keeping the service secure; we collect nothing for marketing or profiling.
• Consent — the launch waitlist, which you join by choice and can leave at any time.

Who else receives data

• Apple — Sign in with Apple, and your iCloud storage.
• Stripe — payment processing and merchant identity checks.
• HMRC — the submissions you choose to file, with the fraud-prevention data the law requires.
• Cloudflare — hosts our servers and stores the data above, as our processor.
• Your organisation — on an enterprise install, the field data you upload for them.

International transfers

Cloudflare and Stripe are part of US groups, and some of their processing can happen outside the UK. Where personal data leaves the UK, it is protected by the UK Extension to the EU-US Data Privacy Framework or by the UK International Data Transfer Addendum to the EU standard contractual clauses, as set out in those providers' data processing terms.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time where we rely on consent. To use any of these rights, email info@quantumencoding.io. We reply within one month.

What we never see

• Your Apple ID or HMRC Government Gateway password.
• Your customers' full card numbers — those are handled entirely by Stripe.
• The identity documents and bank details you give Stripe.
• The contents of your books, beyond what is contained in a specific submission you choose to file.

Analytics and tracking

None. ProMeasure contains no analytics, no tracking, no advertising SDKs, and no third-party profiling. This website sets no cookies and loads nothing from third parties.

Cookies

This website sets no cookies and stores nothing in your browser, so there is no cookie banner and nothing to accept or decline. Joining the launch waitlist doesn't set a cookie either. If that ever changes, this section will say what each cookie is for before any is set.

Security issues and data breaches

If you believe you have found a security problem in ProMeasure, or need to report a suspected data breach, email info@quantumencoding.io with "SECURITY" in the subject line. Security reports are triaged with priority; where a personal-data breach is confirmed we notify the ICO within 72 hours in line with UK GDPR.

Contact

Quantum Encoding Ltd, registered in England and Wales, company number 16575953.
Registered office: 33 Oxford Street, Coalville, LE67 3GS.
Registered with the Information Commissioner's Office, registration number ZC258495.
info@quantumencoding.io

If you're unhappy with how we've handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.