Radiant Approach LTD

Privacy policy

Effective: 22 September 2026 · Last updated: 22 September 2026

This policy explains how Radiant Approach LTD (“Radiant Approach”, “we”, “us”) handles personal data when you use Done and Due. Radiant Approach LTD, company number SC824975, is the controller of personal data described in this policy.

What Done and Due does

Done and Due helps sole traders and freelancers record amounts owed, plan payment reminders, send or hand off follow-up messages and record payment updates. It does not hold customer funds, move money or collect bank-card details.

Information we process

• Account information: your email address, authentication identifiers and account status.
• Sender information: the personal or company name and reply-to address you choose for chase messages.
• Payment-chasing records: customer names and contact details, invoice or payment references, amounts, due dates, balances, promise-to-pay dates, notes, reminder schedules, status and activity history.
• Message information: reminder templates, message content, delivery stage and delivery result. Reusable templates are stored locally on your device; activated message and schedule snapshots are stored with the relevant payment.
• Subscription and allowance information: entitlement status and free or paid chase usage needed to provide the service.
• Technical and security information: limited request, delivery, error and security logs created when the app communicates with our services. These may include account, payment, job and run identifiers.

How we use information

• To create and secure your account.
• To store, synchronise and display the records you enter.
• To prepare, schedule and, when authorised, deliver payment-chase emails.
• To open a user-confirmed WhatsApp handoff with the message you selected.
• To manage subscriptions, usage allowances, support, security and service reliability.
• To meet legal obligations and protect users, Radiant Approach and others from misuse.

Our legal bases

Depending on the activity, we process data because it is necessary to perform our contract with you, because we have legitimate interests in operating and protecting the service, because you have made a choice or given consent, or because we must comply with law.

Your responsibility for customer data

You decide which customer and payment details to enter and which messages to send. You must have a lawful basis for using that information and contacting each recipient. Done and Due is a tool used on your instructions; it is not a debt collector, legal adviser or financial institution.

Service providers

Your account data is scoped to your account within the app, but Radiant Approach and the service providers below process limited data where needed to operate Done and Due:

• Google Firebase and Google Cloud provide authentication, database storage, server functions and operational logging.
• Resend receives the recipient address, sender display name, reply-to address, subject and message body when an email chase is sent.
• RevenueCat and Google Play process subscription identity, purchase and entitlement information when subscription features are used.
• WhatsApp receives the phone number and prepared message only when you deliberately open the WhatsApp handoff and choose to continue in WhatsApp. Done and Due does not send the WhatsApp message itself.

Each provider processes relevant information under its own terms and privacy commitments.

Sharing and selling

We do not sell personal data. We share information only with service providers needed to operate Done and Due, when you direct us to send or hand off a message, when required by law, or when necessary to protect rights and security.

International processing

Some providers may process information outside the United Kingdom. Their privacy terms describe the locations and transfer safeguards that apply to their services. Contact us if you would like more information about the safeguards relevant to Done and Due.

Retention

We retain active account and app records for as long as needed to provide Done and Due. We may retain limited information where necessary to meet legal obligations, resolve disputes, prevent fraud, protect security or establish legal claims. Our providers maintain their own retention and backup processes, so deleted information may remain temporarily in protected backups or operational logs before being removed under their applicable policies.

Account and data deletion

You can start deletion inside Done and Due through More → Privacy & data → Delete account. The process cancels pending reminder work, requests deletion of the associated RevenueCat customer, deletes the active Firebase account data and Firebase Authentication account, signs the user out and then attempts to remove that account’s locally saved reusable templates. If a required provider is temporarily unavailable, deletion may need to be retried.

If locally saved templates remain because device cleanup could not complete, you can remove them by clearing Done and Due’s local app storage in Android settings. Deleting a Done and Due account does not cancel a Google Play subscription; subscriptions must be cancelled separately in Google Play.

If you no longer have the app, use our account-deletion page to submit a request. We may ask you to verify control of the account email before deletion.

Security

We use technical and organisational measures designed to protect personal data, including authenticated access and access controls. No online system can guarantee absolute security.

Your rights

Depending on applicable law, you may have rights to access, correct, erase or restrict your personal data, object to certain processing, request portability and complain to the UK Information Commissioner’s Office. You may also withdraw consent where processing relies on consent. Contact us to exercise these rights.

Children

Done and Due is a business productivity app and is not directed to children.

Changes to this policy

We may update this policy when the app, our providers or legal requirements change. We will publish the revised date on this page and provide additional notice where appropriate.