nule.ai

1. Who we are

Nule Limited ("we", "us", "our") operates Nule (available at nule.ai), an AI-native business ledger designed for UK tradespeople. We are a company registered in the United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Nule Limited is the data controller for the personal data we collect through Nule.

2. What data we collect

We collect and process the following categories of data:

Account information

• Email address (for account creation, waitlist registration, and communications)
• Name and business name (if provided)

Business data

Data you enter into Nule to manage your business, including:

• Jobs and job descriptions (including location, client details, notes)
• Expenses and transactions (amounts, suppliers, payment methods, receipts)
• Invoices and quotes
• Client records (names, addresses, contact details, notes)
• Materials and specifications
• Mileage and travel records
• Time entries and calendar events

Device and usage data

• Device type, operating system, and browser information
• IP address
• Usage patterns and feature interactions
• Error logs and performance data

Location data

• Job site locations you enter
• Device location (only when you explicitly provide it for mileage tracking or job records)

3. How we use your data

We use the data we collect for the following purposes:

• Providing the service: storing and displaying your business records, generating invoices, tracking expenses and jobs
• Business insights: computing patterns, anomalies, and summaries from your transactions, jobs and materials so we can surface useful answers in the app (for example: profitability per job, week-on-week spend, recurring supplier patterns). Insights are computed locally on your device or in our infrastructure from data you have entered — they are not generated by external AI services.
• Service improvement: understanding how features are used to improve and develop the product
• Communications: sending service-related emails including updates, security notices, and support responses
• Security and fraud prevention: protecting accounts and detecting abuse

4. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract: processing necessary to provide Nule to you as a registered user (Article 6(1)(b))
• Legitimate interests: improving our service, ensuring security, and providing business insights that enhance your experience (Article 6(1)(f))
• Consent: where you opt in to waitlist communications or marketing emails (Article 6(1)(a))

5. Data processing for insights and suggestions

To deliver in-app features, your records are processed by deterministic and statistical methods that run either on your device or on our infrastructure:

• Computing business insights and reports (e.g. profitability per job, weekly spend summaries)
• Suggesting autocomplete entries (supplier names, material descriptions) and categorisations based on patterns in your own data

We do not currently use external large language models or third-party AI services to process your data, and we do not use your data to train general-purpose AI models. If we add machine-learning features in the future that change this, we will update this policy and notify users in advance.

6. How we store your data

Your data is stored securely on Amazon Web Services (AWS) infrastructure, using DynamoDB as our primary database. Data is encrypted in transit (TLS) and at rest (AES-256). We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.

We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required by law to retain it (e.g. financial records required under HMRC regulations).

7. Who we share data with

We do not sell your personal data to third parties.

We may share data with the following categories of service providers who process data on our behalf:

• Cloud infrastructure: Amazon Web Services (AWS) for data storage and computing
• Email services: for transactional and service communications
• Payment processing: Stripe for subscription billing (handled on our website, not in the app)

All third-party processors are bound by data processing agreements and are required to protect your data to standards consistent with UK GDPR.

We may also disclose data where required by law, regulation, or legal process.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: request that we limit how we process your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@nule.ai. We will respond within one month as required by UK GDPR.

9. Cookies

Nule uses essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising or tracking cookies.

10. International transfers

Your data is primarily stored within AWS regions. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the Information Commissioner's Office (ICO).

11. Children

Nule is a business tool designed for tradespeople and is not intended for use by individuals under the age of 18. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. The "effective date" at the top of this page indicates when the policy was last revised.

13. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Nule Limited
Email: privacy@nule.ai

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.