Legal
Privacy and data minimisation
This app provides general information only and does not constitute legal advice. Always check the official GOV.UK website or consult a regulated immigration adviser.
We store only what the planner needs: visa type, dates, nationality (for English-language exemptions), and optional account email. Never enter passport numbers, Home Office references, or biometric IDs. Optional document copies stay in this browser only, encrypted on this device; at most the last four characters of a detected identity number are kept, and those files are never uploaded to our server. You can download a redacted copy of a signed-in plan or delete the account from the account page; guests can clear this browser. GOV.UK polls store page titles, descriptions and update timestamps only. Opt-in benchmarks store a visa category, coarse nationality region and sketched dates — not your name or email. Guidance questions are not saved. Optional read-only share links store a redacted snapshot until they expire or you revoke them; passport numbers and vault files are never included. Preview plan choices, service enquiries and employer worker sketches (staff label, visa type, dates) may be stored — never card numbers or share codes.
In particular, this planner:
- does not ask for passport numbers, national insurance numbers, or biometric IDs;
- does not ask for Home Office unique application numbers unless you type them into a free-text box yourself — please do not;
- uses nationality only as a coarse English-language exemption check;
- stores guest plans in this browser only;
- stores signed-in plans in a local database (email, optional name, visa type, dates, absences, reminders) so you can reopen them;
- lets you download a redacted JSON copy of a signed-in plan, or delete the account (type DELETE to confirm). Guests can download or clear this browser from the same page. Vault files stay on the device until you clear them and are never uploaded;
- keeps optional document copies (passport scans, BRPs, payslips) only in this browser, encrypted with a key that never leaves the device. Detected identity numbers are reduced to the last four characters. Files are not uploaded to our server, and this is not a cloud OCR service;
- stores a redacted snapshot for signed-in read-only share links (no vault files, no passport numbers). Links expire and can be revoked;
- polls GOV.UK’s public Content API for page titles, descriptions and update timestamps (not full HTML, and not your plan);
- may store an opt-in anonymous sketch (visa category, coarse nationality region, sketched years to ILR) so averages can be shown once at least five similar sketches exist. Name and email are not included.
- may store a preview plan (Basic / Pro / Premium), service enquiries (email and a short note), and employer worker sketches (staff label, visa type, dates, ticks). Card numbers and passport numbers are not collected.
Accuracy reports may include an optional contact email. Do not put identity documents in those reports.
Your rights (UK GDPR)
Access, portability and erasure are on the account page. A signed-in download is a JSON file that lists what we process. Vault files stay on this device and are not in that file. Deleting the account also removes service enquiries and share links tied to you. Opt-in anonymous benchmarks have no email, so they cannot be matched back. More detail: security and architecture.