Privacy notice

Blue Light Leavers Ltd is the data controller for the personal data you give this app. Our ICO registration number is ZB620344. Questions go to hello@bluelightleavers.com.

• Account details: email address and password, handled by our authentication provider.
• Profile answers: your stage, role type, years of service, and anything optional you add such as name, force or region.
• Experience Bank entries: the examples you write about your service.
• Plan progress: which steps you have ticked off.
• Tool inputs and outputs: job adverts, CV text and the drafts produced for you.
• Payment records: subscription and purchase status. Card details are handled by Stripe and never reach us.
• Technical data: basic logs needed to keep the service running and secure.

• To provide the app and your plan. Basis: performance of a contract with you.
• To process payments and keep financial records. Basis: contract and legal obligation.
• To send emails about your account. Basis: contract.
• To send marketing emails. Basis: your consent, which you can withdraw at any time.
• To send your text to an AI provider so the tools can produce a draft. Basis: your consent, given during sign up and changeable in More.
• To keep the service secure and improve it. Basis: our legitimate interests.

Some stages, such as leaving on ill health grounds, may reveal health information. We only record the stage you select so the wording and order of your plan make sense. Do not put operational detail, names of victims, suspects or colleagues, crime reference numbers or anything protectively marked into the app. Write your examples in general terms.

Only the suppliers needed to run the service, each under a data processing agreement:

• Our hosting and database provider, for storing your account and content.
• Our AI provider, for generating tool outputs from the text you submit.
• Stripe, for payments.
• Our email provider, for account and marketing emails.

We do not sell your data. We do not share it with your force, your employer or any recruiter without your instruction.

Some suppliers process data outside the UK. Where that happens we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU standard contractual clauses.

• Account and content: while your account is open, then deleted within 30 days of you closing it.
• Financial records: six years, as UK tax law requires.
• Marketing consent records: for as long as we rely on them, plus two years.

Under UK GDPR you can ask for a copy of your data, correct it, have it deleted, restrict or object to how we use it, ask for it in a portable format, and withdraw consent at any time. Email hello@bluelightleavers.com and we will respond within one month.

If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Access to your content is restricted to your own account through database level access rules. Traffic is encrypted in transit. Payment card details never touch our systems.