Privacy Policy
Last updated 2 September 2026
DueTrack keeps track of when your documents expire. To do that it has to hold some information about you, and this page says exactly what — in plain language, because a privacy policy nobody can read is not consent.
The short version. We store the details read from your documents — the type, a label, the expiry date, and the last few characters of a reference number. We never store an image of a document, we never store a full card number, and we do not sell anything about you to anybody.
Who we are
DueTrack is operated from the United Kingdom. For questions about this policy, or to exercise any of the rights below, write to hello@duetrack.co. We are the data controller for the information described here.
What we collect
Account information
- Your email address, which is how you sign in and how we reach you.
- A display name and, if you sign in with Google, your Google profile photo.
- The country pack you choose, so that the right document types and renewal guidance are shown.
- Whether you have completed setup, and which plan you are on.
Document details
For each document you add, we store the category, the label you give it, the issue and expiry dates, an optional note, whether it is archived, and the last four characters of its reference number. You may also create "holders" — a partner, a child, a business — with a name and a relationship, so documents can be grouped by whose they are.
What we never store
- Images of documents. A photo or PDF you scan or upload is held in memory only for as long as it takes to read the dates from it, and is discarded when you save or close the form. There is no image field in our database and nothing is written to disk.
- Full card numbers, or CVV codes. If you track a payment card, only the last four digits are kept.
- Passwords. Sign-in is by one-time email link or by Google, so there is no password for us to hold.
- Your payment details. Card information is entered on Stripe's own checkout page and never reaches DueTrack.
Technical information
Our hosting provider records ordinary server logs — IP address, browser type, the page requested and when. These are used to keep the service running and secure, and to diagnose faults.
How your documents are read
When you scan or upload a document, the image is sent to Google's Gemini API, which returns the text it reads. Google processes the image to produce that answer; it is not retained by us afterwards, and it is not used by us for anything else. If you would rather not have an image leave your device at all, you can type the details in by hand — every field the scanner fills can also be entered manually.
Passports and identity cards are read from the machine-readable strip and verified against its check digits, which happens on your own device rather than by a model.
Why we are allowed to hold it
Under UK and EU data protection law we rely on:
- Performance of a contract — we cannot tell you when your passport expires without holding the expiry date.
- Legitimate interests — keeping the service secure, preventing abuse, and fixing faults.
- Consent — for optional features you switch on yourself, such as Google Calendar sync. You may withdraw it at any time by turning the feature off.
- Legal obligation — retaining records of payments for as long as tax law requires.
Who else is involved
We use a small number of providers, each for one job:
- Google Firebase — sign-in and account identity.
- Google Gemini — reading the text from a document image, as described above.
- Supabase — the database your document details are stored in.
- Vercel — hosting and server logs.
- Stripe — payments. Stripe holds your card details; we hold only whether you are subscribed and until when.
- Google Calendar — only if you switch calendar sync on, and only the renewal events you ask it to create.
On the free Personal plan the app shows advertising. Ad providers may set their own identifiers; they are never given your document details, and Premium removes advertising entirely.
We do not sell your personal information, and we do not share it for anyone else's marketing.
Where your data is held
Our providers operate infrastructure in the United States and Europe, so your information may be transferred outside the UK and the EEA. Those transfers are covered by the standard contractual clauses or an equivalent safeguard offered by each provider.
How long we keep it
Your documents stay in your vault until you delete them or close your account. Delete your account and the account record, its holders and all its documents are removed from our database. Payment records are kept for as long as tax law requires. Server logs are kept for a short period and then discarded.
Support access
Very occasionally, resolving a support request requires someone on our side to look at an account. Access to a person's documents by staff is restricted, requires a written reason, and is recorded in an audit log alongside who looked, when, and why. We do this only in response to a request from you or to investigate a fault, never to browse.
Security
Traffic is encrypted in transit. Every request for your data is authenticated against your account, and the copy of your vault held in your browser for offline use is scoped to your account and erased when you sign out. You can add a PIN or biometric lock to the app itself. No system is perfectly secure, but not storing document images means the most sensitive thing you could lose is not there to lose.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, or restrict what we do with it. Most of this you can do yourself in the app — edit or delete any document at any time. For anything else, email hello@duetrack.co and we will respond within 30 days. If you are in the UK you may also complain to the Information Commissioner's Office; in the EU, to your national supervisory authority.
Children
DueTrack is not intended for children under 16, and we do not knowingly create accounts for them. An adult may of course track a child's passport within their own household vault — that document belongs to the adult's account.
Changes
If this policy changes in a way that affects you, we will say so in the app and update the date at the top. Continuing to use DueTrack after a change means you accept the updated policy.