Sorted Dot Privacy Policy
Last updated: 15 October 2026
Who we are
Sorted Dot is a trading name of Lynch 369 Ltd, company no. 17522352, registered in England and Wales. Sorted Dot is run by LYNCH 369 LTD (company no. 17522352, registered in England and Wales; registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ). We are the data controller. ICO registration: [ICO registration number to be added]. Contact: hello@sorteddot.co.uk.
What we collect
| Data | Why | Lawful basis (UK GDPR Art.6) |
|---|---|---|
| Name, messaging app user ID, mobile number | Run your account, send nudges | Contract |
| Postcode, chosen address and its UPRN, council | Look up your bin days | Contract |
| Tasks, reminders, renewal dates, birthdays and names of people you add | Send the reminders you asked for | Contract |
| Calendar events (only if you connect Google/Microsoft/iCloud) | Remind you before appointments, add events you ask for | Contract (you can disconnect any time) |
| Nudge times, quiet hours, bluntness setting | Personalise when and how we message you | Contract |
| Payment status (card details are held by Stripe, not us) | Billing | Contract / legal obligation |
| Usage counters, message logs (short-term) | Fair-use caps, fraud and one-trial-per-number checks, support | Legitimate interests |
| Hashed phone number after closure | Stop repeat free trials | Legitimate interests |
We do not ask for or need health information. We never ask about diagnosis, conditions or medication, and you don't need a diagnosis to use Sorted Dot. If you choose to tell Dot something about your health, we don't keep it in your profile: our system automatically strips medication and diagnosis fields. Please don't send health details.
Age
Sorted Dot is for adults 18 and over only. We don't knowingly collect data from under-18s and will delete it if we find out.
Who processes your data for us
- Our secure messaging partner (chat messages)
- Twilio (SMS and call nudges)
- xAI (AI processing of your messages to understand tasks; not used to train models under our API terms)
- Stripe (payments)
- Resend (email)
- Cloudflare (hosting and storage)
- Ideal Postcodes (address lookup)
- Your local council website (bin lookups use your address/UPRN)
- Google/Microsoft (only if you connect your calendar)
Some of these process data outside the UK (for example in the USA). Where they do, we rely on the UK International Data Transfer Agreement/Addendum or the UK-US Data Bridge.
Google user data
Sorted Dot's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. - We use calendar data only to provide reminders and add events you request. - We do not sell it, use it for ads, or use it to train AI models. - Humans don't read it unless you ask for support, it's needed for security, or the law requires it.
How long we keep it
- While your account is open: all of the above.
- Message history: a rolling short window (latest messages only).
- On closure: we delete your profile, reminders and calendar tokens within 30 days.
- Billing records: kept for 6 years for tax.
- Hashed phone number: kept for 2 years to prevent repeat trials.
Your rights
You can ask to access, correct, delete, restrict or move your data, and object to processing based on legitimate interests. - Send "export my data" or "delete my account" to Dot, or email hello@sorteddot.co.uk. - You can complain to the ICO (ico.org.uk, 0303 123 1113).
Security
Data is encrypted in transit, and calendar tokens are encrypted at rest. Access is limited to what's needed to run the service.
Changes
We'll message you before any material change.