Privacy Policy

Philometrix is desktop software. Your spend data, models and results stay on your computer, and we never receive them. This policy explains the small amount of personal data we do handle to sell you a licence, check it, and help you when you contact us.

Philometrix Ltd is the controller of the personal data described in this policy. We are a company registered in England and Wales, company number 17357225. Our registered office is Suite RA01, 195–197 Wood Street, London E17 3NU.

For anything about your personal data, email hello@philometrix.com.

Everything you put into Philometrix stays on your computer: your datasets, models, decompositions, plans and exports. Your computer does all the processing. The app does not send any of it to us, and it has no analytics, usage tracking or advertising.

The app also keeps a log file on your computer to help diagnose problems. It stays there unless you choose to send it to us (see "When you contact us").

Your account

• What: your email address; your password, if you set one; your subscription status, plan and renewal or trial dates; and reference numbers that link your account to your payment records at Stripe. Passwords are stored only as a one-way hash by our sign-in provider. We never see them.
• Why: to create your account, sign you in and check that your licence is active.
• Legal basis: performing our contract with you.

Signing in with an email code

If you sign in with a one-time code, we use your email address to send you that code.

• Legal basis: performing our contract with you.

Your computer

Each seat is for one computer. When you sign in, the app sends:

• a device identifier. It is made by scrambling your computer's network hardware address, name and operating system into a code that cannot be turned back into those details;
• your computer's name and operating system, for example "Sam's MacBook (Darwin)".

We also record when that computer first and last signed in. When you sign out, we delete that computer's record.

• Why: to keep each seat to one computer, and to show which computer is using a seat.
• Legal basis: performing our contract with you.

Licence checks

While you are online, the app checks your licence from time to time. Each check sends your signed licence token, which includes your email address, and your device identifier. Offline, the app keeps working for up to 14 days and checks again when you reconnect.

• Legal basis: performing our contract with you.

Security records

We record refused sign-ins and changes to your subscription, such as a cancellation or a refused payment, together with your email address. We also use the IP address a sign-in request comes from to slow down repeated failed attempts.

• Why: to stop people guessing passwords or sign-in codes, to spot misuse, and to find and fix problems that lock a paying customer out.
• Legal basis: our legitimate interest in keeping the service secure and working.

Payments

Stripe handles all payments. Stripe collects your name, email address, billing address and card details. We never see or store your full card number. Stripe tells us your email address and whether your subscription is active, in a trial, cancelled or unpaid.

• Legal basis: performing our contract with you, and our legal obligation to keep tax and accounting records.

When you contact us

If you email us, including from the app's feedback option, we keep your message and our reply.

The app can create a diagnostic bundle for you to attach. It contains the app's log files, the app version and your operating system. It never contains your datasets or model files, and runs of numbers are removed from the log lines. The logs can still include file names and folder paths, variable and channel names, and occasionally a value quoted in an error message. The bundle is an ordinary zip file, so you can look inside before you send it.

• Why: to answer you and fix problems.
• Legal basis: our legitimate interest in supporting our customers.

Our website and update check

Cloudflare serves our website and downloads. Like any web host, Cloudflare processes your IP address and browser details to deliver pages and files and to protect the site from attacks. We do not use analytics, advertising or tracking cookies.

The app checks for new versions by downloading a small file from our website. The request carries nothing about you, your licence or your data. Like any internet request, it reveals your IP address to Cloudflare.

• Legal basis: our legitimate interest in running a secure website and telling you about updates.

We do not sell your data, and we do not use it for profiling or advertising. We use these service providers, who process data for us under contracts that require them to protect it:

• Supabase: our licence database and sign-in service, hosted in Frankfurt, Germany.
• Stripe: payments and subscriptions.
• Resend: sends sign-in code emails.
• Google Workspace: our email.
• Cloudflare: our website, downloads and domain.

We may also disclose data where the law requires it, or to protect our rights, for example in a payment dispute.

Some of these providers are based in, or may access data from, the United States or other countries outside the UK. Where that happens, the transfer is protected in the way UK data protection law requires, for example by UK adequacy regulations or the ICO's international data transfer agreement or addendum.

• Account and computer records: for as long as you have an account. If you ask us to delete your account, we will do so within one month.
• Records of failed sign-in attempts, including IP addresses: one day.
• Records of refused sign-ins and subscription changes: 90 days.
• Payment and invoice records: six years, as UK tax law requires.
• Emails and diagnostic bundles: for as long as we need them to help you and deal with any follow-up.

Our providers also keep short-term technical logs, which can include IP addresses, for security and reliability.

Under UK data protection law, you can ask us to:

• give you a copy of your personal data;
• correct it;
• delete it;
• restrict how we use it, or object to it;
• send it to you or to another company in a reusable format.

Email hello@philometrix.com. We will reply within one month, and there is no charge.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

We need your email address and your computer's device identifier to provide a licence. Without them, you cannot sign in.

When we change this policy, we will publish the new version here with a new effective date. If a change is significant, we will also email account holders.