Privacy notice

Last updated 18 September 2026

Kiarrica Labs, who operates HowMuch, is the data controller for the personal data described here. This notice explains what we collect, why, who we share it with and what rights you have.

Personal data we collect

  • Account data — name, email address, password (stored hashed), and sign-in method.
  • Business profile data — business name, trade, town or city, currency, rates, logo and photos you upload.
  • Customer and quote data — the customer names, email addresses, phone numbers, job details, quotes, files and notes you enter about your own clients.
  • Billing data — subscription plan, payment status, invoices and partial card details supplied to us by our payment provider. We never see or store full card numbers.
  • Enquiry data — messages sent through our contact, advertising, directory and review forms.
  • Technical data — IP address, device and browser information, and usage logs used for security, rate limiting and diagnostics.

Why we use it

  • To provide the service and your account (performance of our contract).
  • To take payments and manage subscriptions (contract and legal obligation).
  • To generate price estimates and quotes you request (contract).
  • To send service emails, including quote links to your customers (contract).
  • To keep the service secure, prevent fraud and spam, and improve it (legitimate interests).
  • To meet tax, accounting and legal duties (legal obligation).

Who we share it with

  • Paddle.com — our online reseller and Merchant of Record, who processes payments, billing and refunds.
  • Supabase — database, authentication and file storage hosting.
  • Cloudflare and Lovable — application hosting and delivery.
  • Resend — sending transactional email such as quote links.
  • AI providers used through the Lovable AI Gateway — job details sent for a price estimate. We do not send your customers' contact details for this.
  • Google AdSense — where adverts are shown, subject to Google's own privacy notice.
  • Authorities or advisers where we are legally required to.

We do not sell personal data.

International transfers

Some of these providers process data in the United States and other countries. Where data leaves the UK or EEA, it is protected by standard contractual clauses or an equivalent safeguard.

How long we keep it

Account, quote and customer data is kept while your account is open and for up to 12 months after you close it, unless you ask us to delete it sooner. Billing records are kept for up to 7 years to meet tax rules. Enquiry messages are kept for up to 24 months.

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to another provider. You can also withdraw consent where we rely on it, and complain to your data protection regulator. Email us and we will respond within 30 days.

Cookies

We use cookies and similar storage that are necessary to keep you signed in and to keep the service secure. Where advertising is shown, our advertising partner may set its own cookies.

Contact

Kiarrica Labs contact@howmuchpro.app