Privacy notice
Last updated 6 October 2026
The short version
- Linup never connects to your bank. It only knows what you and your family type in.
- We use your information to run Linup for your household and to take payment. We don’t sell it, show adverts, or use advertising or analytics cookies.
- Inside your household, each thing can be private, shared with the adults who run the household, shared with people you choose, or shared with everyone. The database enforces that, not just the screen.
- Children under 13 never have a login. An adult looks after their profile.
- You can correct, download or delete your information. Ask us at privacy@linup.io about anything here.
A shorter version written for teenagers is at linup.io/privacy-teens.
1. Who we are
Linup is provided by Curavest Ltd, a company registered in England and Wales (company number 15433116), whose registered office is 334 Reading Road, Winnersh, Wokingham, England, RG41 5EJ. Curavest Ltd is the controller of the personal information described here: we decide why and how it is used.
Contact us about privacy at privacy@linup.io.
2. What we collect
When you create an account
- Your email address and password, used to sign in. Passwords are stored by our sign-in service in a form we cannot read. If you choose to sign in with Google, we receive your email address and name from Google.
- Your name as you want it shown in the household, and, for teenagers and children, a date of birth, used to check the right kind of profile is set up.
- An optional profile photo, visible to members of your household.
What your household enters
- Money: spends and income you record, the shops or payees you name, categories, budgets, notes, and any splits.
- The plan: debts, savings, assets and accounts you choose to add, with balances, rates and payments, and the settings you choose.
- Together: habits and check-ins, chores, campaigns, goals, coins, experience points (XP), rewards and requests.
- Spreadsheet imports: the file is read on your device and is not uploaded. We keep its file name and the rows you review, so you can see where each figure came from.
- A record of changes: who changed what and when, for important actions such as changing a setting, so the household can see it and so we can keep the service secure.
Ask Linup and suggestions
If your household has Ask Linup switched on, we keep your questions and its answers, so you can see the conversation again. Every figure in an answer is worked out by Linup’s own calculations from your household’s records; the AI model does not invent numbers. See section 6 for how this works and who processes it.
Paying for Linup
Payments are taken by Direct Debit through GoCardless. When you set one up, we give GoCardless your name and email address. You enter your bank details on GoCardless’s own pages; Linup never sees or stores your bank details. We keep the reference numbers GoCardless gives us, and a log of the payment updates it sends us.
Sharing your month
If you choose to share a post about your month, anyone with its link can see it. A post shows the month and the lines you chose to include. To count visits without storing anyone’s IP address, we keep a scrambled fingerprint (a one-way hash) made from the link, the visitor’s IP address and their browser type.
Advisers
If your household gives a financial adviser access, the adviser’s name and organisation are stored, and any notes they write are kept with your household.
The app-store email list
If you leave your email address on linup.io to hear when Linup reaches the app stores, we store that address only. Each email will include a link that deletes it straight away.
What we do not collect
- We never connect to banks or import transactions.
- We don’t use advertising, analytics or tracking cookies, and we don’t sell or rent your information.
3. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Run your account and your household’s Linup, and show each person what they are allowed to see | Contract: it is the service you asked for |
| Take payment and keep payment records | Contract, and legal obligation for tax and accounting records |
| Answer questions in Ask Linup and make category and plan suggestions | Contract, as part of the service, while your household has it switched on |
| Keep the service secure, record important changes, prevent misuse, and fix faults | Legitimate interests: keeping Linup safe and working for everyone |
| Count visits to a shared post | Legitimate interests: knowing whether a link is used, without identifying visitors |
| Email the app-store list | Consent: you can withdraw it at any time with the link in each email |
Some information you enter, such as notes or debts, may say something sensitive about your situation. We use it only to provide Linup to you and your household.
4. Who in your household sees what
Linup is shared by a household, so some of what you enter is seen by others in it. Each kind of information can be private, shared with the adults who run the household, shared with people you choose, or shared with the whole family. A teenager’s own spending and budget are shown only to the adults who run the household unless the household chooses otherwise, and their habits and goals start private. Adults who run the household can hide particular budget lines from particular people. These rules are enforced by our database, so another member’s app cannot ask for something it isn’t allowed to show.
5. Children and teenagers
- You must be 13 or over to have a Linup login. Someone who creates a household and pays for it must be 18 or over (see our terms).
- Teenagers (13 to 17) join by invitation from an adult in the household, and confirm their date of birth.
- Children under 13 never have a login. An adult creates a profile for them, with a name, date of birth and optional photo, and an adult in the household looks after it. The child’s chores, habits, coins and own pot are recorded on that profile. An adult decides who in the household can see it, and the profile can be shared with a second household, for example a separated parent’s home.
- The household summary that our AI suggestions work from leaves out under-13 profiles.
6. Ask Linup and AI suggestions
Ask Linup answers questions about your household in plain words, and Linup can suggest a category for a spend, a change to your plan, or what the columns in an imported spreadsheet mean. To do this we send an AI model your question or the text being categorised (for example, a shop’s name), along with the figures Linup has worked out to answer it, limited to what you yourself are allowed to see. We don’t send your email address or password.
The AI request goes through OpenRouter, a service based in the United States that passes it to an AI model provider. Those providers may process it outside the UK. A suggested change to your plan is never made until a person confirms it.
Any adult who runs the household can switch Ask Linup and suggestions off in the Household tab.
7. Who processes your information for us
| Provider | What they do | Where |
|---|---|---|
| Supabase | Our database, sign-in, stored files (such as profile photos), server functions, and the emails we send to confirm your address and reset your password | Data stored in London, UK |
| Cloudflare | Hosting linup.io and the web app at app.linup.io, and storing the Android download | Global network |
| GoCardless | Direct Debit payments. GoCardless also uses your payment details under its own privacy notice | UK and EU |
| OpenRouter, and the AI model providers it uses | Ask Linup and AI suggestions, when switched on | United States and elsewhere |
| Expo | Delivering app updates to Android phones, and phone notifications | United States |
We may also share information if the law requires it, or with a buyer if the business or Linup is ever sold, in which case this notice would continue to apply.
8. Information leaving the UK
Your household’s records are stored in the UK. Some providers above work from other countries, mainly the United States. When information goes to them, we rely on the protections UK law requires for international transfers, such as adequacy regulations or the UK’s standard data transfer clauses. Ask us at privacy@linup.io for details.
9. How long we keep it
- While your household uses Linup, we keep what it enters, so you can look back at earlier months.
- If you delete your account, we erase your name, date of birth and photo from your profile straight away. Your sign-in (email address and password) and your photo file are deleted shortly afterwards, normally within the hour. If you sign in again before then and start or join a household, that sign-in is kept, because you are using it again. Spends and other records you added to the household stay as the household’s shared records, shown as “Erased member”, until the household is closed.
- If a household is closed, there is a 30-day pause in which any adult in it can change their mind. After that its records are deleted, including Ask Linup conversations, and so are its members’ sign-ins and profile photos, normally within the hour. We cancel its Direct Debit at the same time. We keep a short record that the household existed and was closed, and the payment references and payment updates needed to finish any Direct Debit and meet tax and accounting rules.
- Backups are kept for 7 days, so deleted information can remain in them for up to 7 days.
- The app-store email list: until you remove yourself or we no longer need the list.
10. Keeping it safe
Information travels between your device and our servers encrypted. Access is controlled by the rules described in section 4, enforced by the database. On a phone or in a browser, the app keeps your sign-in and anything you record while offline on the device until it can be sent. That stored copy is not separately encrypted yet, so please protect your device with a lock screen.
11. Cookies and storage on your device
linup.io sets no cookies. The Linup app and app.linup.io set no cookies either. They store your sign-in, anything waiting to be sent while you’re offline, and a few settings in your device’s or browser’s storage, because the app cannot work without them. We use no tracking or analytics storage.
12. Your rights
Under UK data protection law you have the right to:
- see the information we hold about you and get a copy of it;
- correct it — most of it you can change in the app yourself;
- delete it — you can delete your account in the app, and the adults who run a household can close it;
- take it with you in a format other software can read. The adults who run a household can download its records when closing it, or ask us;
- object to, or ask us to limit, how we use it;
- withdraw consent where we rely on it, such as the app-store email list.
Email privacy@linup.io to use any of these rights. We reply within one month. We don’t charge for this. A parent or guardian can act for a child who cannot yet do so themselves.
Linup does not make decisions about you by automated means that have legal or similarly significant effects. Scores and projections are calculations to help your household plan; they are not credit decisions.
13. Complaints
Please tell us first at privacy@linup.io, and we will try to put it right. You can also complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
14. Changes to this notice
If we change this notice in a way that matters, we will say so in the app before the change takes effect. The date at the top shows when it was last updated.