Legal
Privacy Policy
This Privacy Policy explains how StaySorted collects, uses, stores and shares personal data, and how you can exercise your rights under the GDPR.
Effective: 19 September 2026 · Last updated: 19 September 2026
Related documents: Terms of Service and Cookie Policy.
Data controller
- Service
- StaySorted · staysorted.ie
- Controller
- Brian Ó Ciardha, trading as StaySorted
- Business type
- Individual / sole trader
- Location
- Republic of Ireland
- Address
- Unit 1A, Heatherview Business Park, Athlone Road, Longford, Co. Longford, N39 KD82, Ireland
- Privacy contact
- info@staysorted.ie
1. Who we are
The data controller for StaySorted is Brian Ó Ciardha, trading as StaySorted, an individual sole trader based in the Republic of Ireland. The data controller decides why and how personal data is processed.
Brian Ó Ciardha, trading as StaySortedUnit 1A, Heatherview Business Park, Athlone Road, Longford, Co. Longford, N39 KD82, Ireland
Email: info@staysorted.ie
Website: staysorted.ie
StaySorted has not appointed a Data Protection Officer. Send privacy questions, requests and complaints to info@staysorted.ie.
2. Scope of this Privacy Policy
This policy applies to the StaySorted website at staysorted.ie, StaySorted accounts, household-organisation features, paid subscriptions, uploaded documents, emails we send or receive, and customer-support correspondence.
StaySorted accounts are individual. Another person cannot currently share or access your account as a household member. Household names and similar labels are stored on your own account only.
Websites, payment pages and services operated by other organisations — including Stripe, Google sign-in, hosting providers and any site we link to — have their own privacy policies.
3. Personal data collected
The categories below are those StaySorted actually uses, or may receive through the providers that run the service. We do not store passwords in readable form. Authentication credentials are handled by Supabase Authentication.
| Data category | Examples | How it is collected | Why it is used |
|---|---|---|---|
| Account and identity data | Email address; user ID; account creation time; login and authentication information; name or other profile details you provide; household name; account status; Basic or Full plan status; notification preferences | When you register, sign in with email or Google, or update your account | To create and operate your account, identify you, apply your plan, and store the preferences you set |
| Household-organisation data | Tasks and descriptions; due dates and times; reminders; shopping lists, quantities and item prices; bills, amounts, providers and payment or renewal dates; calendar events; maintenance records; appliance or item make, model and serial information; notes you enter | When you type or edit information in StaySorted | To store, display and organise the household information you ask the service to keep |
| Uploaded documents | Files you upload; filenames; file types; upload dates; categories, titles, providers, references, dates and other document metadata | When you upload or label a document | To provide document storage and expiry tracking that you request |
| Service-provider information | Provider names; business contact details; categories; notes you enter | When you add or edit a service-provider record | To keep contacts you associate with household jobs or maintenance |
| Subscription and transaction data | Selected plan; billing interval; payment and subscription status; Stripe customer identifiers and transaction or invoice information returned by Stripe; StaySorted user ID stored as Stripe metadata | When you start checkout, manage billing, or when StaySorted looks up your subscription with Stripe | To administer Basic and Full plans, open the billing portal, prevent payment abuse, and keep accounting records |
| Communications | Support emails; privacy requests; complaints; other messages you send to StaySorted | When you email or otherwise contact us | To reply, investigate issues and keep a record of the request |
| Technical and security data | IP address; browser and device type; date and time of access; requested pages; authentication and security events; diagnostic information; cookie or session identifiers | Automatically through hosting, authentication and security systems | To operate, secure and diagnose the service. StaySorted does not use this information to build advertising or analytics profiles |
StaySorted is intended for ordinary household records such as policies, warranties, receipts and certificates. We do not verify or read every uploaded document.
Please do not upload:
- passwords or other authentication secrets;
- complete payment-card details;
- medical records or health information;
- highly sensitive identity documents unless that is genuinely necessary;
- unlawful material;
- personal information about another person unless you have authority or another valid reason to do so.
If you enter another person’s private contact details — for example a tradesperson’s mobile number — you are responsible for having an appropriate reason to store that information.
4. Data not intentionally collected
StaySorted is not intended to collect:
- medical or health records;
- biometric information;
- racial or ethnic origin;
- political opinions;
- religious or philosophical beliefs;
- trade-union membership;
- information about sexual orientation;
- criminal-conviction information;
- complete payment-card details;
- children’s personal data.
Please do not upload special-category or other highly sensitive personal data. If you voluntarily put sensitive information into a general note or file, it may be processed only so that we can store what you asked us to store. Remove it if it is not needed.
5. How data is collected
We may collect personal data:
- directly when you register or sign in;
- when you enter household information;
- when you upload documents;
- when you buy or manage a subscription;
- when you contact support or send a privacy request;
- automatically through strictly necessary authentication, security and server technologies;
- from Stripe, in relation to payment and subscription status;
- from Google, if you choose to sign in with a Google account.
StaySorted does not collect data from banks, government databases, insurers or utility providers. Information about those organisations appears only if you enter it.
6. Purposes and legal bases
We process personal data only where a GDPR legal basis applies. The main bases we rely on are set out below.
| Purpose | Data involved | GDPR legal basis |
|---|---|---|
| Create and operate accounts, including sign-in and profile details | Account and identity data; technical and security data | Contract — Article 6(1)(b) |
| Store and display household information you enter | Household-organisation data; service-provider information | Contract — Article 6(1)(b) |
| Provide document storage and related metadata | Uploaded documents | Contract — Article 6(1)(b) |
| Show in-app reminders and, when enabled, send reminder emails you have requested | Household-organisation data; notification preferences; email address | Contract — Article 6(1)(b) |
| Supply Basic and Full features according to your plan | Account data; household data; documents; subscription status | Contract — Article 6(1)(b) |
| Process subscriptions, billing portal access, cancellations and related support | Subscription and transaction data; account data | Contract — Article 6(1)(b) |
| Process account-deletion and similar service requests | Account data and associated household records | Contract — Article 6(1)(b) |
| Keep tax, accounting and consumer-law records; respond to valid legal requests; meet data-protection duties | Transaction records; identity data; request correspondence | Legal obligation — Article 6(1)(c) |
| Secure accounts, prevent misuse, diagnose faults and protect the service | Technical and security data; limited account identifiers | Legitimate interests — Article 6(1)(f). The interest is keeping the service secure and usable. We use only information needed for that purpose and balance it against your rights. |
| Establish, exercise or defend legal claims | Relevant account, transaction and correspondence records | Legitimate interests — Article 6(1)(f). The interest is protecting StaySorted and users in a dispute, balanced against your rights. |
| Improve reliability using limited operational information, without advertising profiles | Technical and security data already generated by hosting and authentication | Legitimate interests — Article 6(1)(f). The interest is a stable service. We do not use analytics or advertising trackers for this. |
| Optional marketing emails, if introduced, and any future non-essential cookies | Email address and consent records; any non-essential cookie identifiers | Consent — Article 6(1)(a). You may withdraw consent at any time. Withdrawal does not affect earlier lawful processing. |
We do not use legitimate interests as a blanket basis for every activity. Essential service, security, billing and user-requested reminder emails are not treated as marketing consent.
7. Email communications
Essential service emails
These emails are sent to provide the service or to comply with the law. They may include:
- account verification and confirmation emails;
- password-reset emails, where that flow is used;
- security notices;
- subscription and billing notices;
- important service changes;
- user-created reminders, when reminder email is enabled.
Those messages may be sent through Supabase authentication services and, where configured, Resend. Notification preferences can be stored on your account. In-app reminders already use dates you enter. Email delivery of those reminders depends on that feature being enabled.
Optional marketing emails
StaySorted does not currently operate a marketing-email system. If we introduce marketing messages, we will send them only where you have separately opted in, using an unticked option, or where another lawful basis clearly permits the message. You will be able to unsubscribe and to withdraw consent without losing essential account emails.
8. Automated reminders
StaySorted uses information you enter — such as due dates, lead times and notification preferences — to schedule reminders in the product and, when email reminders are enabled, to send those reminders.
This is not automated decision-making that produces legal or similarly significant effects. StaySorted does not use reminder data to make insurance, credit, employment or eligibility decisions.
9. Payments
Paid StaySorted Full subscriptions are processed by Stripe. Stripe acts as an independent payment-services provider and, for relevant payment processing, as a separate controller.
- Payment details are entered into Stripe-controlled payment interfaces.
- StaySorted does not directly store complete payment-card numbers or card security codes.
- StaySorted receives limited payment and subscription information, such as status, interval, amounts and identifiers needed to administer the plan.
- StaySorted looks up Stripe customer and subscription records associated with your account email and may pass your StaySorted user ID to Stripe as metadata.
- We use that information for subscription administration, fraud prevention, accounting and legal compliance.
Stripe’s own privacy policy applies to its processing: stripe.com/privacy.
10. Service providers and data recipients
We use trusted providers to run StaySorted. We do not sell your personal data and we do not share it with advertisers.
| Provider | Purpose | Relevant data | Location or transfer position |
|---|---|---|---|
| Supabase | Authentication; database hosting; file storage; security and infrastructure; account emails where used | Account data; household data; documents and files; authentication events | The primary StaySorted project is hosted in London, United Kingdom (West Europe, eu-west-2). The UK is outside the EU/EEA and currently benefits from a European Commission adequacy decision, which remains subject to Commission review. Provider subprocessors may process data in other countries. |
| Vercel | Website and application hosting; delivery; server or edge functions; security and operational logs | Technical and security data; account identifiers present in application requests | Vercel may process data in the EU and in other countries. StaySorted does not claim that Vercel processing is limited to the EU. |
| Stripe | Checkout; payments; subscription management; invoices; fraud prevention | Name and email used for checkout; payment-method data held by Stripe; subscription and invoice data | Stripe may process data in the EU, the United Kingdom, the United States and other countries. Processing is not limited to the EU. |
| Resend | Sending reminder or other transactional emails where that service is used | Email address and the content needed to send the message | Resend may process data outside the EU. StaySorted does not claim that Resend processing is limited to the EU. |
| Supabase email services | Account verification, authentication and password-reset emails where used | Email address and related authentication content | Processed as part of Supabase infrastructure and any email provider configured for that project. |
| Optional sign-in, if you choose Continue with Google | Identity information Google provides for that sign-in, typically including email and name | Governed by Google’s privacy policy. Processing is not limited to the EU. |
Personal data may also be shared:
- with professional advisers, such as an accountant or solicitor, where necessary;
- with public authorities when the law requires it;
- in connection with a genuine business transfer, subject to confidentiality and data-protection requirements;
- to protect users, StaySorted or others where that is lawful and necessary.
11. International data transfers
StaySorted is operated from Ireland. The primary Supabase database and storage project is located in London, in the United Kingdom. The UK is outside the EU and the EEA. Transfers to the UK currently rely on the European Commission’s adequacy decision for the United Kingdom. That decision is subject to ongoing Commission review.
Some technology providers or their subprocessors may process information in other countries. StaySorted does not claim that all personal data stays in the EU, the EEA or the UK.
Where no adequacy decision applies, appropriate safeguards may include European Commission Standard Contractual Clauses and supplementary measures where required. For information about the safeguards that apply to a particular transfer, email info@staysorted.ie.
12. Data security
StaySorted uses reasonable technical and organisational measures appropriate to a household-organisation service. These include:
- HTTPS/TLS encryption for data transmitted between supported browsers and the service;
- provider-managed encryption at rest for supported Supabase database and storage infrastructure;
- Supabase Authentication;
- Row Level Security on StaySorted user-data tables, so ordinary API access is limited to the signed-in user’s own rows;
- access controls and environment-variable protection for application secrets;
- restricted access to operational systems;
- security updates, monitoring and backups provided through the relevant infrastructure.
No method of transmission or storage is completely secure. We do not promise that unauthorised access is impossible.
You must keep your password and sign-in details confidential and tell us at info@staysorted.ie if you think your account has been compromised.
13. Data retention
StaySorted does not currently operate fixed, automated deletion schedules for every category of data. We keep information for as long as needed for the purposes below, then remove or anonymise it where we reasonably can.
| Category | Retention approach |
|---|---|
| Account and household data | Kept while the account remains active and as needed to provide the service. |
| Uploaded files | Kept while you store them and while the account remains active. |
| Items you delete in the product | Removed or scheduled for deletion from active systems, subject to technical processing and backups. |
| Subscription and transaction records | Kept for the period required by Irish tax, accounting and consumer law. |
| Support and complaint records | Kept only as long as reasonably necessary to handle the issue and to establish or defend legal claims. |
| Security and technical logs | Kept for a limited period appropriate to security, fraud prevention and diagnostics. StaySorted has not published an exact log period because no fixed application-level period is configured. |
| Optional marketing consent records | If marketing consent is collected in future, kept while consent remains active and for a reasonable period needed to show compliance after withdrawal. |
| Backups | Residual copies may remain until they are securely overwritten under the provider’s backup schedule. |
Data may be kept longer where the law requires it, where it is needed for a dispute, or where it is needed to prevent fraud or misuse.
14. Account deletion
You can start an account-deletion request in account settings where that option is available, or by emailing info@staysorted.ie. Please download anything you want to keep before asking us to delete the account. Individual documents can be downloaded from the Documents page while the account remains active.
Cancelling a subscription and deleting an account are separate actions. Cancelling Full stops future charges and returns the account to Basic. It does not by itself delete your data.
After a deletion request, StaySorted will process it and remove or anonymise associated personal data, unless we must keep a record because the law requires it or because it is justified for legal claims, security or fraud prevention. Some transaction records may need to be retained for legal and accounting purposes. Residual copies may remain temporarily in secure backups until they are overwritten.
We do not promise that the current account-settings control immediately or automatically deletes every related database record and uploaded file. If you need confirmation that a particular record has been removed, contact info@staysorted.ie.
15. Your GDPR rights
Depending on the circumstances, you may have the right to:
- be informed about how we use your data;
- access the personal data we hold;
- have inaccurate data corrected;
- request erasure;
- restrict certain processing;
- receive data you provided in a portable form;
- object to processing based on legitimate interests;
- withdraw consent, where processing is based on consent;
- rights relating to automated decision-making. StaySorted does not carry out automated decision-making with legal or similarly significant effects.
These rights are not absolute. They may depend on the legal basis we rely on and on exceptions in data-protection law.
To exercise a right, email info@staysorted.ie. We may ask for proportionate information to confirm your identity before we release or delete data. We will normally answer a valid request within one month. That period may be extended where the law allows, for example if a request is complex or you have made several requests. We will tell you if we need more time.
You will not normally be charged. The law allows a reasonable fee, or a refusal, where a request is manifestly unfounded or excessive.
16. Data portability
Where the GDPR right to portability applies, you may request personal data you provided to StaySorted in a structured, commonly used and machine-readable format.
StaySorted does not currently offer a self-service export of an entire account. You can download individual uploaded files from the Documents page. For a wider copy of your data, email info@staysorted.ie.
17. Complaints
Please contact StaySorted first at info@staysorted.ie so we can look into the issue.
You also have the right to complain to the Irish supervisory authority:
Data Protection Commission6 Pembroke Row
Dublin 2
D02 X963
Ireland
Website: www.dataprotection.ie
The Commission’s public contact details are published on that website and may change. Use the Commission’s online contact options for complaints.
18. Children
StaySorted accounts are available only to people aged 18 or over. We do not knowingly offer accounts to children or intentionally collect children’s personal data.
If you are a parent or guardian and you believe a child has supplied data to StaySorted, please email info@staysorted.ie.
19. Cookies and similar technologies
StaySorted uses strictly necessary authentication and security technologies required for login and session management. These include cookies set by Supabase Authentication and a small session-preference cookie used for the “remember me” sign-in choice.
The browser may also store functional preferences on your device, such as whether shopping or bills insights are shown. Those preferences stay on your device and are not an advertising profile.
StaySorted does not currently use Google Analytics, Vercel Analytics, Hotjar, Microsoft Clarity, LogRocket, Sentry or advertising trackers, and it does not currently set analytics or advertising cookies.
See the Cookie Policy for fuller detail. If non-essential cookies are introduced, this policy and the consent controls must be updated before those cookies are switched on.
20. Third-party links
Links to Stripe, Google, suppliers or other websites are governed by those organisations’ privacy notices. StaySorted is not responsible for privacy practices on independently operated third-party sites.
21. Changes to this Privacy Policy
We may update this policy to reflect legal, technical or service changes. The “Last updated” date will change when we do. If a change is material, we will give appropriate notice, usually by email or a message in the service.
Continued use of StaySorted after an update is not treated as consent for processing that legally requires consent. Where we need consent, we will ask for it separately.
22. Contact
For privacy questions or requests, contact the data controller:
Brian Ó Ciardha, trading as StaySortedUnit 1A, Heatherview Business Park, Athlone Road, Longford, Co. Longford, N39 KD82, Ireland
Email: info@staysorted.ie
Website: staysorted.ie
You can also read the Terms of Service and the Cookie Policy.