Privacy Policy

Who we are

Quidough is a product of Cambridge Motion Ltd, a company registered in England and Wales (company no. 08115942, registered office 483 Green Lanes, London N13 4BS, United Kingdom). We trade as "Quidough" and refer to ourselves here as "Quidough", "we", or "us". For the purposes of UK data-protection law, Cambridge Motion Ltd is the controller of the personal data described below.

If you have any question about this policy or your data, contact us at hello@quidough.com.

What we collect

We keep as little as the service needs to work, and no more.

Your account

• One name, whichever you choose – Quidough asks what you'd like the rest of your household to see, and keeps that. Most people use their first name, but it's yours to pick. We never ask for a surname, and there's nowhere to put one.
• Your email address – you can't hold an account without one. It's how you sign in and how we reach you, and it's a separate field from the name above.

The financial data you enter

The accounts, transactions, transfers, budgets, categories, payees, tags, scheduled payments, and account logos you add. You provide all of it – no bank aggregator sits in the data path, so no outside company ever hands us a copy.

How you use the app

We keep a note of the days you opened the app – the date and nothing more – so we can tell whether Quidough is genuinely useful day to day. It's included in your data export, and you can delete it.

Your subscription

To bill your household, we store things like its subscription status, billing cycle, renewal date, the price it joined at, who set it up, and any change you've scheduled – along with the references our payment provider uses to recognize your household as its customer. We never see or store your card details. You enter those in the payment provider's own checkout, not on our servers, and they stay with them – see sub-processors.

Only the person who looks after the subscription deals with any of this. Everyone else in the household sees when it renews, how often, and who looks after it – no prices, no payment details.

If you subscribe to the Journal

If you ask for new Journal posts by email, we keep your email address, and a record that you confirmed it. Nothing is added until you press the confirm button in the email we send you, so if you never press it, you're never on the list. Like every email we send, that confirmation email appears in our email provider's delivery logs.

Technical data

Like any hosted service, our infrastructure records basic operational logs (such as IP address and request time) needed to run the service securely and reliably. We don't use these to build a profile of you or to track you across other sites.

What we deliberately don't collect or do

Some of these are conscious choices, stated plainly rather than hidden:

• No surname. The app never asks for it.
• No ad networks, and no analytics that carry your financial data off to anyone. The marketing website uses privacy-first, cookieless visitor stats (Fathom) that never touch your finances – see cookies and this website.
• No "anonymized" resale of your data. There is no version of this where we sell it.
• No bank aggregator. The whole point is that no outside company sits between you and your data. (If that ever changed, it would be an openly announced decision, never slipped in quietly.)
• No "zero-knowledge" or end-to-end encryption claim. Quidough reads your figures to show you balances and reports, so claiming we can't see them would be dishonest. We won't say it just because it sounds reassuring.

Why we use your data, and our legal basis

We use your data only to provide Quidough to you, and to send you the Journal if you ask for it:

Who can see your data

This is where trust is won, so it's worth being completely straight.

Quidough is a paid, hosted service. That means your data lives on our servers and, like every mainstream finance app of this kind, the service can technically read it. We don't pretend otherwise.

In practice, we access your data only with your permission and only to help when you've reported a problem. We never browse it, and we never sell or share it. We don't offer the kind of encryption where "even we can't see it", because that wouldn't be true for an app that also shows you balances and reports.

Within your household, everyone you invite can see and edit every account, transaction, and budget in it – access is what membership grants. Owner labels are about organization ("whose is this?"), not about locking anyone out. You choose who is in your household.

Who we share it with (sub-processors)

We don't sell or share your data. We do rely on a small number of trusted service providers to run Quidough, who process data on our instructions and only to provide their service to us – Paddle is the one exception, explained below:

Paddle works differently from the others. It is the seller of record for your subscription, which means it takes the payment and handles the tax on it in its own right, not purely on our instructions, and it holds your payment details under its own privacy notice. From it we receive your subscription's status and dates – never your card.

Where a provider processes data outside the UK, we rely on appropriate safeguards (such as Standard Contractual Clauses or the UK equivalent) to protect it. We may also disclose data if the law genuinely requires us to.

How we protect it

Your data is encrypted in transit and at rest, and access is tightly controlled. You sign in without a password – either with a one-time code sent to your email, or with your Google account – so there's no password to be guessed, leaked, or reused. Honestly, what encryption does is protect you from outside attackers and stolen backups – it does not mean we ourselves can't read your data, and we won't claim it does.

One thing to watch: when you export your data, the file is plain and readable – anyone who opens it can see everything in it. That's by design, so your data is genuinely yours and portable. Keep the file somewhere safe.

How long we keep it

• Your account data is kept for as long as you have an account. When you delete your account, we delete your personal data, other than anything we're required to keep by law (for example, billing records) or that remains part of a shared household you were in.
• If a household's access ends – its free trial runs out, its subscription ends, or a paused subscription is never picked back up – we keep that household's data for 90 days, then delete it. Losing access doesn't delete anything on its own: through those 90 days you can still export everything, and subscribing again picks up exactly where you left off. After that it's gone, and we can't bring it back.
• If you're no longer in any household – because you left one, you deleted it, or its owner deleted it or removed you – we remove your sign-in details after 14 days, along with your avatar, your settings, and the record of the days you opened the app. Starting or joining another household cancels that, and there's nothing else you need to do. The financial data you added stays with the household, because it belongs to everyone who shares it.
• When you leave a household – what you added stays with the household, because it's the household's shared record rather than yours alone; only the household's owner can delete it. Your first name and the email you signed in with stay on the household's records too, beside the entries you made, and are included when the household exports its data. This holds even if you later delete your Quidough account. The household's owner is told this is what they're asking of you, and you're shown it before you join.
• Billing records – what was paid and when – are kept for as long as tax and accounting law requires, which in the UK is six years. This applies even after you delete your account, because the law leaves us no choice.
• Journal subscriptions last until you unsubscribe, with the link in any Journal email or by writing to us. We stop sending straight away. We keep your address marked as unsubscribed so we don't email you again by mistake, and delete it completely whenever you ask.
• Operational logs are kept only as long as needed to keep the service secure, then discarded.

Your rights

You can, at any time:

• Get a copy of your data – export all of it from within the app, whenever you want.
• Correct it – edit your data directly in the app.
• Delete it – delete your account whenever you want.
• Withdraw consent – unsubscribe from Journal emails with the link in any of them, or write to us.
• Object to or restrict certain uses – for example the record of the days you opened the app, which we keep only to tell whether Quidough is useful day to day.

If you're in the UK and think we've handled your data poorly, you can complain to the Information Commissioner's Office (ICO). We'd rather you told us first at hello@quidough.com so we can put it right.

Children

Quidough isn't intended for anyone under 18, and we don't knowingly collect data from them.

Cookies and this website

quidough.com is where Quidough is explained rather than used: what the app does, what it costs, a help center, and a link to sign in. None of your money appears on it – that lives in the app. The site runs no advertising and no cross-site tracking.

We do use Fathom Analytics to count visits and see which pages people read, so we can tell whether the site is working. Fathom is a privacy-focused service that doesn't use cookies and doesn't collect personal data or build a profile of you – so there's no tracking banner to click through. It never receives any of your financial data, which lives in the app, not on this page.

Paddle's payment script also runs on every page, along with ProfitWell, its payment-recovery tool.

Changes to this policy

If we change how we handle your data, we'll update this page. If a change is significant – and especially if we ever reconsidered any of the promises above – we'd tell you directly, not slip it in quietly.

Contact

Questions, requests, or concerns: hello@quidough.com, or write to Quidough, 483 Green Lanes, London N13 4BS, United Kingdom.