Privacy notice

Blue Light Leavers Ltd is the data controller for the personal data you give this app. Our ICO registration number is ZB620344. Questions go to andy@bluelightleavers.com.

• Account details: email address and password, handled by our authentication provider.
• Profile answers: your stage, role type, years of service, and anything optional you add such as name, force or region.
• Experience Bank entries: the examples you write about your service.
• Plan progress: which steps you have ticked off.
• Tool inputs and outputs: job adverts, CV text and the drafts produced for you.
• Payment records: subscription and purchase status. Card details are handled by Stripe and never reach us.
• Technical data: basic logs needed to keep the service running and secure.

• To provide the app and your plan. Basis: performance of a contract with you.
• To process payments and keep financial records. Basis: contract and legal obligation.
• To send emails about your account. Basis: contract.
• To send marketing emails. Basis: your consent, which you can withdraw at any time.
• To send your text to an AI provider so the tools can produce a draft. Basis: your consent, given during sign up and changeable in More.
• To keep the service secure and improve it. Basis: our legitimate interests.

Some stages, such as leaving on ill health grounds, may reveal health information. We only record the stage you select so the wording and order of your plan make sense. Do not put operational detail, names of victims, suspects or colleagues, crime reference numbers or anything protectively marked into the app. Write your examples in general terms.

The tools that write drafts for you use artificial intelligence. We use the Lovable AI Gateway, which sends your text to Google Gemini models. No other AI provider is used.

Your data is never used to train any AI model. Not by us, not by the gateway, not by Google. Your text is processed to produce your draft and nothing more.

What is sent. Only the text needed to produce the draft:

• The Experience Bank entries relevant to the tool you are using, including the title, the account you wrote, and the situation, action and result
• Any job advert or CV text you paste in
• Your role type, rank or grade, years of service, region and stage, so the wording fits your service

What is removed before it is sent. Every piece of text is filtered first. We automatically remove email addresses, UK phone numbers, postcodes, and short reference codes such as collar numbers and crime reference numbers, and replace them with a marker. Your name, your email address and your account identifier are never sent. The AI provider does not know who you are.

This filter is a safety net, not a substitute for care. Do not put operational detail, protectively marked material, or the names of victims, suspects or colleagues into the app.

How long we keep AI content:

• Experience Bank entries: kept while your account is open, because they are the raw material for your CV. Delete any entry yourself at any time, and it is removed from our database immediately.
• Tool inputs and generated drafts: kept for 12 months so you can return to them, then deleted automatically.
• The AI provider does not retain your text after the draft is returned, other than short lived operational logs for abuse prevention.

Basis. We rely on your consent, given during sign up. Withdraw it at any time in More. If you withdraw it, the AI tools stop working. The rest of the app continues as normal.

Only the suppliers needed to run the service. Each is a data processor acting on our instructions, under a written agreement.

• Lovable Cloud, built on Supabase, for hosting, the database, sign in and account emails. Data is held in the United Kingdom or the European Economic Area.
• Cloudflare, for delivering the site and protecting it from attack. Processes your IP address and request details in transit.
• Lovable AI Gateway and Google Gemini, for generating drafts, under the consent you gave during sign up.
• Stripe, for payments. Stripe receives your email address and manages your card details directly.
• Apple, Google or Mozilla push services, only if you turn on notifications, and only to deliver the notification to your device.

If you buy or enquire about a service delivered by CK Futures Ltd or CVIA Ltd, your name, email and what you write in the enquiry go to that company so they can respond. They are separate data controllers and their own privacy notice applies.

We do not sell your data. We do not use advertising networks. We do not share anything with your force, your employer or any recruiter without your instruction.

Where a supplier processes data outside the UK, we rely on UK adequacy regulations, or on the International Data Transfer Addendum to the EU standard contractual clauses.

• Account, profile and Experience Bank: while your account is open. Deleted within 30 days of you closing it.
• Tool inputs and generated drafts: 12 months, then deleted automatically.
• Job applications and saved jobs: while your account is open.
• Enquiries about paid services: 24 months from your last contact with us.
• Financial and subscription records: six years, as UK tax law requires. This is a legal obligation and survives account closure.
• Marketing consent records: for as long as we rely on them, plus two years.
• Analytics events: 25 months, then deleted. They hold no name or email.

You can close your account and delete your data at any time from the More tab. You can download everything you have written from the same place.

Under UK GDPR you can ask for a copy of your data, correct it, have it deleted, restrict or object to how we use it, ask for it in a portable format, and withdraw consent at any time. Email andy@bluelightleavers.com and we will respond within one month.

If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Your data is encrypted in transit using TLS, and encrypted at rest on our database and file storage. Access to your content is restricted to your own account by database level access rules, so no other member can reach it. Only the founder has administrative access, and administrative access to member records is logged.

Card details never touch our systems. Stripe handles payment in full and is certified to PCI DSS Level 1.

Passwords are stored as salted hashes and cannot be read by us.

If there is a personal data breach that puts your rights at risk, we will tell the ICO within 72 hours and tell you without undue delay.