SpherasPrivacy policy
Last updated 15 November 2026 · DRAFT, to be checked before launch
The short version
Spheras is an app that runs on your own Windows computer. Your payslips, bills, balances, investments and documents are stored on your computer and are never sent to us. To sell you a subscription we keep a small account record: your email address, your plan and the computers you use Spheras on. We don’t sell or share your information for marketing, and this website uses no cookies, analytics or trackers.
Who we are
Spheras is run by [YOUR FULL NAME], a sole trader in the United Kingdom, trading as Spheras (“we”). We are the controller of the account information described below. Contact: hello@spheras.co.uk. [ICO registration number: to be added.]
What stays on your computer
Everything you put into the app: payslips and pay figures, bills, spending, bank statements you import, investments, receipts, notes, profile names and PINs. It is stored in the app’s own storage and, if you choose, in a Spheras folder on your computer. Documents are read on your computer; nothing is uploaded to be scanned. We cannot see any of it.
If you use household sync, changes are shared through a folder in your own cloud storage (for example OneDrive), encrypted before they leave your computer. The files go to your cloud provider under your own account with them, not to us.
What we keep, and why
| Information | Why | Lawful basis |
|---|---|---|
| Email address | Your account login, sign-in codes and password resets, and messages about your subscription | Contract |
| Password hash | To check your password. We never store the password itself (it’s hashed with PBKDF2) | Contract |
| Computer ID and name | A one-way code made from your computer’s ID (it can’t be traced back) and the name Windows gives it, so you can see and remove your computers and we can apply the computer limit | Contract |
| Plan and payment status | Which plan you’re on and until when, received from Stripe, so the app knows it’s paid for | Contract |
| Free-trial check | The computer a trial started on and Stripe’s card fingerprint (Stripe’s anonymous ID for a card, which can’t be turned back into the card number), so each person, computer and card gets one free trial | Legitimate interests (preventing abuse of free trials) |
| Household sync keys | If you use household sync with an account, a copy of your sync keys, locked with a separate key, so a password reset gets sync working again. We don’t receive your sync files, so we can’t use the keys to read anything | Contract |
About once a day while you’re online, the app checks your plan. It sends your sign-in token and the computer ID above, and nothing else: no names, figures or files.
Payments
Payments are taken by Stripe, which acts as its own controller for payment information. Your card details go straight to Stripe and never reach us or the app. We receive your plan, its status and dates, and the card fingerprint used for the trial check.
Optional features that go online
- Live prices (off unless you switch them on): the app fetches prices from CoinGecko, the Frankfurter exchange-rate service and, with your own key, EODHD. Only coin IDs, currency codes and ticker codes are sent, never amounts or holdings.
- Update check (direct-download version only): the app downloads a small public file listing the newest version. Nothing about you is sent.
Who processes data for us
- Cloudflare hosts our account service, database and this website.
- Resend sends our emails (sign-in codes, password resets).
- Stripe takes payments and manages subscriptions.
Some of these providers may process data outside the UK. Where they do, they use safeguards recognised under UK law, such as the UK International Data Transfer Addendum.
How long we keep it
We keep your account information while you have an account. If you ask us to delete your account, we delete it within 30 days, except records we must keep by law (for example payment records for tax, normally six years), which Stripe holds.
Your rights
You can ask us for a copy of the information we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Email hello@spheras.co.uk. If you’re unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
This website
spheras.co.uk uses no cookies, no analytics and no third-party scripts or fonts. Like any website, our host sees your internet address when you visit, and keeps short-lived logs for security.
Changes
If we change this policy we’ll update the date above, and tell you by email if the change matters.