Idle

Legal

Privacy policy

Last updated 8 May 2026. Plain English version below — the full legal text mirrors it.

What we collect

Only what you give us: an email if you create an account, and the bank statements, CSVs or screenshots you upload so we can identify recurring spending patterns. We do not ask for online banking passwords. We do not move money.

What we do with it

We parse the document, extract recurring transactions, and show you a list of subscriptions and direct debits. Processing happens on our servers. We do not sell your data. We do not share it with advertisers. We do not build a profile to target you.

How long we keep it

Uploaded files are deleted within 30 days. Extracted insights stay until you delete your account. You can wipe everything at any time from your profile page.

Open Banking (coming later)

When we add a bank-connect option (via an FCA-authorised provider such as TrueLayer), it will be strictly read-only. Idle will never have permission to initiate payments. You'll be able to disconnect at any time.

Your rights (UK GDPR)

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@useidle.uk and we'll respond within 30 days.

Contact

Idle, United Kingdom. Email hello@useidle.uk.