Privacy Policy

Last updated 15 July 2026

ProMeasure is built by Quantum Encoding Ltd (United Kingdom). This policy explains, in plain English, what the app stores, what our backend processes, and what we never see. We do not sell your data, and there is no advertising.

What the app stores

Your business records — scans, measurements, evidence photos, clients, quotes, invoices and tax figures — are stored on your device and in your own private iCloud database. They are yours. We do not keep a copy of your books on our servers.

What our backend processes

Our backend does the minimum needed to make payments and tax filing work, and keeps as little as possible:

• Payments (Stripe). When you take a card payment, our backend mints a short-lived token so your device can talk to Stripe. Card details are handled by Stripe as payment processor — they never pass through us and we never store card numbers.
• HMRC submissions. When you file a Making Tax Digital update, our backend relays the submission to HMRC on your device's behalf, attaching the fraud-prevention headers that HMRC requires by law. You sign in with your own HMRC Government Gateway credentials; we never see your Gateway password.
• Submission receipts. We keep the confirmation references HMRC returns for a filing, so a submission can be traced if there's ever a query.

Where our backend runs

Our backend runs on Cloudflare Workers (Cloudflare, Inc.), a global edge network — the request itself is handled at the data centre nearest your device. The small amount of data we retain server-side (submission receipts and encrypted access tokens) is stored in Cloudflare's Western Europe region. Access tokens are encrypted (AES-GCM) before they are stored.

Lawful basis

Under UK GDPR, our lawful bases are:

• Contract — processing needed to provide the service you asked for: minting payment tokens when you take a card payment, and relaying an HMRC submission when you choose to file.
• Legal obligation — the fraud-prevention header data attached to HMRC submissions, which HMRC requires by law, and retaining submission receipts for traceability.
• Legitimate interests — keeping minimal operational logs to keep the service secure and working; we collect nothing for marketing or profiling.

What we never see

• Your HMRC Government Gateway password.
• Your customers' full card numbers — those are handled entirely by Stripe.
• The contents of your books, beyond what is contained in a specific submission you choose to file.

Analytics and tracking

None. ProMeasure contains no analytics, no tracking, no advertising SDKs, and no third-party profiling.

Deleting your data

Because your records live on your device and in your iCloud, deleting the app and removing its iCloud data removes them. If you would like us to remove any submission receipts we hold, or you have any question about your data, email info@quantumencoding.io and we will help.

Security issues and data breaches

If you believe you have found a security problem in ProMeasure, or need to report a suspected data breach, email info@quantumencoding.io with "SECURITY" in the subject line. Security reports are triaged with priority; where a personal-data breach is confirmed we notify the ICO within 72 hours in line with UK GDPR.

Contact

Quantum Encoding Ltd, United Kingdom
info@quantumencoding.io