Privacy
Privacy policy
Last updated 26 September 2026
The short version: we collect as little as possible, use it only for what you gave it to us for (or, if you run a plumbing business we call, only to invite you to try LeakScan — see “Contacting plumbing businesses” below), and delete it when you ask. Most of it is stored securely in the UK or European Economic Area, and our email is hosted in Switzerland. A few named service providers process specific data outside those areas, mainly in the United States, under UK-approved safeguards — see “Who else sees app data” below for exactly who and why. No cookies, no trackers, no ads, and we never sell your data.
Who we are
LeakScan ("we", "us") is operated by LeakScan Ltd, a company registered in England and Wales (company number 17363486, registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ), which is the data controller for this website at leakscan.uk, for the LeakScan app, and for our outreach to plumbing businesses. For anything in this policy, or any question about your data, contact us at privacy@leakscan.uk. We aim to reply within a few days, and always within one month as UK GDPR requires.
What we collect, and why
Right now this website does one thing with personal data: the early-access waitlist. If you join it, we collect:
| Data | Why we collect it | Legal basis (UK GDPR) |
|---|---|---|
| Your email address | To contact you about LeakScan early access and launch | Consent — you gave it to us for this (Art. 6(1)(a)) |
| Your role (homeowner or plumber) | So we send you the right kind of updates | Consent (Art. 6(1)(a)) |
| Your answers to the three sign-up questions | In aggregate, to shape the product and pricing before launch | Legitimate interest — building a product people actually want (Art. 6(1)(f)) |
That's the whole list. This site has no user accounts, no payments, no cookies, no analytics scripts and no third-party trackers. We don't collect your name, address or anything else.
Where your data lives
Waitlist entries are stored in our database hosted by Supabase on servers located in the European Economic Area (Ireland). UK GDPR permits this — the EEA is covered by the UK's adequacy regulations, so your rights are unchanged. Access to that database is restricted and protected — the website itself has no ability to read it back out.
Three service providers help us run things, and each sees only what it technically must: Cloudflare serves this website (like any web host, it briefly processes your IP address to deliver pages securely and defend against attacks), Proton (Proton AG, Switzerland) hosts our email, so anything you email us is stored in Proton's end-to-end-encrypted mailboxes, and Supabase hosts the database described above. None of them is permitted to use your data for their own purposes.
How long we keep it
We keep waitlist entries until LeakScan has launched and the early-access programme is finished, at which point the list is deleted or (with your fresh consent) moved to a normal product-updates list. If you ask to be removed at any point, we delete your entry — usually within days, at most within one month. We review anything still held after 24 months and delete what's no longer needed.
Your rights
Under UK GDPR you can, at any time and for free:
- Ask what we hold about you (right of access) — we'll send you a copy;
- Correct it if it's wrong;
- Have it deleted ("right to be forgotten") — for the waitlist, this simply means we remove your row and stop emailing you;
- Withdraw consent — same effect as deletion for a waitlist;
- Object to, or ask us to restrict, any processing;
- Take your data with you (portability).
To use any of these, email privacy@leakscan.uk from the address you signed up with — that's all the proof we need for waitlist data.
If you're unhappy with how we've handled your data, you have the right to complain to the UK's regulator, the Information Commissioner's Office — ico.org.uk or 0303 123 1113. We'd appreciate the chance to sort it out first, but you don't have to give us one.
The LeakScan app
The LeakScan app is live on iOS and Android. This section covers what we collect there, in addition to the website waitlist data described above.
What we collect in the app
- Account details (email, name, tenure, role) — to run your account and the service you signed up for. Legal basis: contract — necessary to provide the app (UK GDPR Art. 6(1)(b)).
- Photos you submit for diagnosis — to analyse your plumbing problem. Legal basis: contract, necessary to provide the diagnosis you ask for (UK GDPR Art. 6(1)(b)).
- The AI diagnosis generated from a photo — to show you the result and keep it in your account history. Legal basis: contract (Art. 6(1)(b)).
- Basic app usage events (e.g. screens opened, actions taken) — to keep the app working, find bugs, and improve it. Legal basis: legitimate interest — running and maintaining the service (Art. 6(1)(f)).
- Property, tenancy and case data (landlord/tenant features — see below) — to let landlords and tenants share plumbing reports. Legal basis: consent (Art. 6(1)(a)).
- Reports about an AI result (if you use "Report this result" to flag something wrong with a diagnosis) — your account ID, the reason you selected, the AI's confidence level for that diagnosis, and a reference to the diagnosis itself, so our team can review it. Legal basis: legitimate interest — monitoring and improving the safety and quality of the AI diagnosis service (UK GDPR Art. 6(1)(f)).
- DIY guide confirmation (if you continue to DIY guidance after a diagnosis instead of reporting to your landlord) — a timestamp and your account ID, recording which of three things you confirmed: that you have permission to do the work, that you accept responsibility for it, and that it doesn't involve gas or electrical work. Legal basis: legitimate interest — keeping a record that safety guidance was shown and what you confirmed, in case of a dispute about what you were told (UK GDPR Art. 6(1)(f)).
Photos you submit are used to analyse your plumbing problem and nothing else — never sold, never handed to advertisers, and never used to train our AI without your separate consent.
If you're linked to a landlord or tenant
LeakScan has an optional landlord feature. If you're a tenant and you link your account to a landlord (by accepting an invite, or by a landlord claiming a report you sent them), and you then choose to send a plumbing report to that landlord:
- Your diagnosis results (the AI's findings — what the problem likely is, the confidence level, and the reasoning — along with the date of the scan) are stored in your LeakScan account so your history is available across devices and survives reinstalls. Your photos are NOT stored by us — they are sent to our AI analysis provider and immediately discarded after the result is generated. When you send a report to a linked landlord, we also store the photo, any note you add, and the timestamps of that report, so your landlord can see and act on it.
- Your landlord can also see your display name, the email address you were invited with, your tenancy status and dates, and — only if you switch on sharing in the app (off by default) — your phone number. They cannot see anything else: not your other scans, not your tenure answers, not any profile field beyond this list.
- Your landlord is a separate data controller for how they use this information — once it's shared with them, what they do with it (for example, keeping their own records to manage the property) is their responsibility under data protection law, not ours. We're the controller for running the app itself: storing the data securely, keeping it accurate, and applying the retention below.
- If you delete your LeakScan account, any report you've sent to a landlord through the app is deleted too — the case record, photo, diagnosis, note and dates — and is no longer visible in your landlord's LeakScan account. We can't recall an email that's already been delivered: if your landlord received the report by email before you deleted your account, that copy stays in their inbox, outside our systems and outside this deletion. Everything else tied to your account is deleted or, where a shared record depends on it, irreversibly anonymised — either way it is no longer linked to you.
- If a landlord invites you and you don't submit any reports, we hold only your name, invited email and tenancy status for as long as the tenancy record exists, so the roster stays accurate.
How long we keep app data
- App usage events: no longer than 90 days, then deleted.
- Diagnosis results stored in your account: Retained until you delete individual results, or until your account is deleted, at which point all results are permanently deleted from our servers within 30 days.
- Case reports sent to a linked landlord: see "If you're linked to a landlord or tenant" above.
- Reports about an AI result: kept for 12 months from when you submit the report, then deleted automatically. If you delete your account, your reports are deleted with it.
- DIY guide confirmations: kept for as long as your account exists, then deleted when your account is deleted.
- Free-tier abuse prevention: if you delete your account, we keep one small technical marker for up to 12 months from when it was first created (deleting and re-registering doesn't restart the clock) — a one-way, keyed cryptographic hash of your email address (not the email itself, and it cannot be reversed back into your email), together with a count of how many free scans that email has already used. Its only purpose is to stop a new account made with the same email getting unlimited free analyses by repeatedly deleting and re-registering. Legal basis: our legitimate interest in preventing abuse of the free tier (UK GDPR Art. 6(1)(f)) — this is separate, narrower processing than your account data, continuing after the rest is deleted because its purpose is different. It's purged automatically, at the very latest 12 months after it was first created.
When you delete your account, all diagnosis results stored in your account are permanently deleted from our servers within 30 days. One narrow exception survives, described above: the free-tier abuse marker (kept for up to 12 months). It holds neither your name nor your email, but it is pseudonymised rather than anonymous: it can be matched to your email if you sign up again with it.
Who else sees app data
Supabase hosts the app database and file storage, in the same EEA (Ireland) location as the waitlist, alongside the Cloudflare and Proton services described above. We also briefly check the IP address a sign-up or account-deletion request comes from to limit automated abuse (for example, scripted attempts to create and delete accounts repeatedly), keeping that address for up to 48 hours before it's deleted.
Resend sends emails on our behalf — landlord invitations and case-report notifications, notifications to us about new plumber applications (including the applicant's contact details), and account emails such as sign-up confirmation and password reset — including the content of those emails, which may contain case or diagnosis details. Resend is our data processor for these messages and is not permitted to use them for its own purposes; it keeps delivery logs and message content for 30 days. Resend's servers are located in the United States; this transfer is covered by the EU Standard Contractual Clauses and the UK extension to the EU–US Data Privacy Framework, providing protection equivalent to UK GDPR.
Sentry provides crash and error reporting so we can find and fix bugs. Alongside technical error data (e.g. stack traces, device and app version), Sentry also receives a random account ID (not your name or email), attached automatically by our backend, and a short trail of what you were doing in the app just before the error (e.g. which screen, and details like a diagnosis's ID and confidence level, whether a scan was blocked, your tenancy type, or how many photos you'd added), but never the photos themselves or the diagnosis text. Sentry is our data processor for this and is not permitted to use it for its own purposes. Sentry's servers for this are located in the European Economic Area (Frankfurt).
Google LLC provides the AI analysis service (Gemini API) that processes photos you submit for diagnosis. Your photo is transmitted to Google's servers to generate the diagnosis result. Google keeps it for up to 55 days to detect and prevent misuse of its service and to meet any legal or regulatory disclosure requirements. It does not use it to train its AI models, except the safety systems it uses to detect misuse. Google is our data processor for this step and, apart from that misuse monitoring, is not permitted to use your photos for its own purposes. Google's data-centre locations include the United States; this transfer is covered by standard contractual clauses providing equivalent protection to UK GDPR.
Your rights (access, correction, deletion, objection, portability, and the right to complain to the ICO) apply to app data exactly as described above for the waitlist. Email privacy@leakscan.uk.
Children
This site, the waitlist and the LeakScan app are not aimed at children. Our Terms of Service require users to be at least 18 years old, and we don't knowingly collect data from anyone under that age. If you believe a child has joined the waitlist, email privacy@leakscan.uk and we'll delete the entry.
Contacting plumbing businesses
To find plumbers to trial LeakScan we may telephone plumbing businesses in the UK using business phone numbers that are publicly listed (for example on Google business listings or Yell). We rely on our legitimate interests to do this; we screen every number against the Telephone Preference Service and Corporate TPS before calling; we send a text only if you ask for one on the call; and if you ask us not to contact you again we will add you to our do-not-call list permanently. Call notes are kept for 24 months. Who sees this data: the LeakScan team member making the calls, and a licensed TPS/CTPS screening bureau that checks the numbers against the preference registers before we call. Your rights: every right described under “Your rights” above applies to you as well — access, correction, erasure, restriction, objection, portability and complaint to the ICO. Because you did not sign up with us, we will verify a request by calling back the business number we hold. To opt out or ask what we hold, email privacy@leakscan.uk.
Changes to this policy
If we change how we handle your data, we'll update this page and the date at the top. If a change materially affects waitlist members, we'll email you about it before it takes effect.