Short version: nothing. They are read on your device and never sent anywhere.
Pay Audit is operated by [YOUR NAME OR COMPANY] of [ADDRESS]. For anything in this notice, write to [CONTACT EMAIL]. Under UK data protection law we are the controller for the small amount of personal data described below.
When you add a payslip, the file is opened and read inside the page on your own device. Reading a PDF, and recognising the text in a photo or a scan, both run locally.
The figures read from your payslips are kept on your device so that a pile of two hundred does not have to be uploaded again every time you open the app. They never leave the device, and the original files are not kept — only the figures already read out of them.
They stay until you delete them, with one exception outside our control: Safari, and every browser on an iPhone or iPad, clears a site's stored data after seven days without a visit. Adding Pay Audit to your home screen exempts it, because a web app added that way is not part of Safari. Other browsers keep it until you clear it yourself.
Your name, National Insurance number and employer address are ignored. The assignment number is read for one purpose only — to tell one employment from another, so that bank work is not confused with your substantive post — and it never leaves the page either.
Two things, both in this browser's own storage and neither sent anywhere:
payaudit.docs — the
figures read from each payslip and P60: dates, pay periods, tax codes, the
amounts, and the assignment number used to tell one post from another. Your
name, National Insurance number and address are not among them, because
they are never read in the first place.
payaudit.licence,
recording that this device is licensed. It holds no personal data.
Under Start here in the app every document is listed with a tick box. Select any of them and press delete and they are gone from the device immediately. Clearing this site's data in your browser removes everything, licence flag included.
Anyone with access to this browser profile can open the app and see those figures, in the same way they could see any other site you stay signed in to. On a shared or public computer, delete them when you have finished.
The app also caches its own files so it works offline. That cache holds the program and the pay reference data, never your payslips.
There is no analytics, no tracking, no advertising, no cookies, no profiling and no sale or sharing of anything. We do not know how many payslips you have added, which employer you work for, or what the app told you.
Your email and payment record sit with Stripe for as long as your subscription runs and afterwards for the period Stripe and UK tax law require of business records. Everything else is on your device and under your control.
You have the right to ask what we hold about you, to have it corrected or deleted, to object to its use, and to complain to the Information Commissioner's Office at ico.org.uk. Write to [CONTACT EMAIL] and we will answer within a month.
Pay Audit is for working doctors and is not directed at anyone under 18.
If this notice changes materially the date below changes with it, and the version in the app is always the current one.