Filing Sorted

Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains how 786 Infinite Ltd ("we", "us", "our") collects, uses, stores, and protects your personal data when you use the Filing Sorted mobile application ("the app"). We are the data controller for the personal data described here.

1. Who we are

786 Infinite Ltd
128 City Road, London, EC1V 2NX, United Kingdom
Registered in England & Wales, Company No. 12533644
VAT No. GB516006822
ICO Registration No. ZC130465

Contact for any privacy matter: info@filingsorted.co.uk

2. What Filing Sorted does

Filing Sorted helps UK sole traders and landlords meet their Making Tax Digital for Income Tax Self Assessment (MTD ITSA) obligations. It connects to HMRC on your behalf, reads your filing deadlines, lets you record income and expenses, and submits your quarterly updates to HMRC.

3. The personal data we handle, and where it lives

Stored on your device only (not on our servers)

• Your HMRC access and refresh tokens — the secure credentials that let the app act on your behalf with HMRC. Stored in your device's secure storage (Apple Keychain).
• Your National Insurance number (NINO) — stored in your device's secure storage.
• Your income and expense records — amounts, dates, categories, notes, property labels, mileage, CIS deductions, and any receipt photos you take. Stored in the app's local storage on your device.

Because this data is held on your device, it is protected by your device's own security (passcode, Face ID / Touch ID, and device encryption). We cannot see it, and we do not back it up to our servers.

Processed by our server, but not stored

To talk to HMRC, your device sends requests through a server that we operate, hosted on cloud infrastructure located in the United Kingdom (London). In the course of relaying a request:

• Your HMRC token and NINO pass through our server to reach the relevant HMRC endpoint. They are used only to complete that request and are not written to any database, log, or file on our server.
• Your public IP address is observed by our server on the incoming connection and included in the fraud-prevention information HMRC requires (see section 4). It is not stored.

Receipt scanning (only if you use it)

If you take a photo of a receipt and use the scan feature, the image is sent to a third-party AI service (Anthropic) to read the amount, date, vendor, and category, which are then returned to your device as suggestions for you to confirm. The photo is sent only to perform that single read and is not stored on our server. See section 6 for third parties.

4. Fraud-prevention data sent to HMRC (legal requirement)

HMRC legally requires software that connects to its systems to send a set of "fraud prevention headers" with each request. When you file or read data, the app collects and transmits the following technical information about your device and connection to HMRC:

• A device identifier generated by the app (a random ID stored on your device, not linked to any hardware serial number)
• Device type, operating system and version, manufacturer and model
• Screen size, window size, and time zone
• Local and public IP addresses available to the device
• The connection method and our software's identity and version

This information is sent to HMRC to help HMRC detect and prevent fraud, as required by the Income Tax (Digital Requirements) rules and HMRC's fraud-prevention specification. It is not used by us for any other purpose.

5. How we use your data and our lawful bases (UK GDPR)

• To provide the service you asked for — connecting to HMRC, reading deadlines, and submitting your updates. Lawful basis: performance of a contract with you.
• To comply with HMRC's fraud-prevention requirements — sending the headers in section 4. Lawful basis: legal obligation.
• To read receipts you choose to scan — only when you use that feature. Lawful basis: performance of a contract / your instruction.

We do not use your data for advertising, and we do not sell your data to anyone.

6. Third parties we use

• HMRC — the ultimate recipient of your tax data and the fraud-prevention information, as the whole purpose of the app.
• DigitalOcean — provides the cloud infrastructure (a server located in London, United Kingdom) on which we run the server that relays requests between your device and HMRC. Requests pass through this server only in transit.
• Anthropic — reads receipt images, only if you use the receipt-scan feature.
• RevenueCat and Apple — manage your subscription and process your payment. Your payment card details are handled by Apple, not by us; we never see your full card number. RevenueCat records your subscription status so the app knows whether you have an active subscription.

Each third party processes data under its own privacy terms. Our relay server is located in the United Kingdom. Where a provider processes data outside the UK (for example the receipt-scanning and subscription providers listed above), such transfers are protected by appropriate safeguards under UK data protection law.

7. Payment and subscription data

Filing Sorted is a paid subscription. Payment is taken through Apple's in-app purchase system and managed via RevenueCat. We receive confirmation of your subscription status (active, expired, cancelled) but not your payment card details. Apple's and RevenueCat's own privacy policies govern how they handle your payment information.

8. How long we keep data

Data stored on your device remains until you delete it (either individual records, or everything via "Delete all my data"), or until you delete the app. Because we do not store your tax data or credentials on our servers, there is nothing for us to retain once a request is completed. Subscription records held by Apple and RevenueCat are retained under their own policies.

9. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Because your core data lives on your device, you can exercise most of these directly in the app at any time:

• Delete everything: use "Delete all my data" in the app to permanently remove your HMRC connection, your NINO, all your records, and your saved details from the device.
• Disconnect from HMRC: use "Disconnect HMRC" to remove your stored HMRC connection.

To make any other request, or if you have a concern, contact us at info@filingsorted.co.uk. Note that deleting data from the app does not delete updates you have already submitted to HMRC — those are held by HMRC under HMRC's own retention rules, and you would need to contact HMRC regarding those.

10. Security

Credentials and your NINO are held in your device's secure storage (Apple Keychain). Data in transit between your device, our server, and HMRC is encrypted using HTTPS/TLS. Our server does not store your tax data or credentials. No system is perfectly secure, but we take reasonable technical measures appropriate to the sensitivity of the data.

11. Children

Filing Sorted is intended for adults managing their own tax affairs and is not directed at children under 18.

12. Complaints

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or by calling the ICO helpline. We would appreciate the chance to address your concern first — please contact us at info@filingsorted.co.uk.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed. Significant changes will be notified in the app where appropriate.

14. This website

This website (filingsorted.co.uk) is an information and sign-up page only. It sets no cookies, uses no advertising or analytics trackers, and does not collect personal data about visitors. If you email us using an address shown on this site, we use your message and email address only to reply to you.