Policies
Privacy policy
Written to be read, not skimmed past. Last updated 27 August 2026. The Boutique is run by Kel Mc, the data controller for everything below.
The short version
We hold as little as we can get away with. Your letters, intake answers and results stay on your own device unless you deliberately save or share them. Nothing is sold, and there are no advertising trackers anywhere in the app.
What we store, and where
On our database
- Your account email and sign-in details, so you can get back in.
- Your subscription record: plan, status, renewal date and the payment reference — never your card number.
- Notification preferences, so reminders go where you asked.
- Anonymous counts of steps through checkout (plan picked, card form reached, outcome), only if you agreed to the cookie question.
- A log of payment events and plan changes on your account, so billing problems can be traced.
On your device only
- Saved results, letters and intake answers, held in your browser's storage.
- Reading progress, bookmarks, favourites and audio position.
- Your cookie choice and export preferences.
Clearing your browser data removes everything in the second list. We cannot recover it for you, because we never had it.
Card payments
Payments are handled by Stripe. Your card details are entered on Stripe's own form and never pass through the Boutique. We receive only the outcome: which plan, whether it succeeded, and a reference to look it up.
Stripe processes your name, email, billing address and card data as an independent controller under its own privacy policy, and keeps transaction records for the periods UK tax and anti-fraud law require.
AI-assisted tools
The letter generator, companion and other AI tools send the text you type to a model provider to produce a reply. That text is processed to answer you and is not used to train models. Please leave out anything you would not want a stranger to read — full bank details, medical records, other people's private information.
Who else touches your data
- Stripe — card payments, invoices and subscription billing.
- Supabase — the database and sign-in service holding your account.
- Lovable — hosting for the app itself.
- AI model providers — only the text you send to an AI tool, only while it answers.
Nobody else. We do not sell, rent or share your data for marketing, and there are no advertising or social-media trackers in the app.
Cookies and measurement
Essential storage keeps you signed in and remembers your settings; it cannot be switched off without breaking the app. Everything else is optional.
The banner asks once whether we may count anonymous steps through checkout. Say no and nothing is recorded — no visitor id is created at all. You can change your mind by clearing this site's data in your browser, which brings the question back.
How long we keep things
- Account and subscription records: while your account exists, then up to 6 years for tax and accounting.
- Payment and webhook logs: 24 months, then deleted.
- Anonymous checkout counts: 24 months, then deleted.
- Anything stored on your device: until you clear it.
Your rights
Under UK GDPR you can ask for a copy of what we hold, have mistakes corrected, have your data deleted, object to how it's used, or take it elsewhere. Email support@self-help-letters-boutique.store and we'll answer within one month, free of charge.
Deleting your account removes your profile, subscription record and preferences. Billing records Stripe must keep for tax purposes stay with Stripe.
Unhappy with our answer? You can complain to the Information Commissioner's Office at ico.org.uk.
© 2026 Kel Mc. Self Help Letters Boutique.