I'm Bloody Late! Get early access

Privacy policy

Effective 24 October 2026

Draft, not yet reviewed by counsel

In plain terms

  • We only ever read your calendar. We never change it.
  • We never send a message. You do, from your own phone.
  • Your address book stays on your phone.
  • Phone numbers, appointment titles and messages are encrypted, and everything is kept in London.
  • The words of a message are erased 30 days after the delay ends, and the delay itself after 90.
  • You can delete your account, or just disconnect Google Calendar, from the app at any time.
  • No adverts, no tracking, no AI, and we never sell your data.

This summary does not replace the policy below.

I'm Bloody Late! helps someone who works alone through a day of booked appointments or one-to-one meetings tell clients when they are running late. You say how late you are; the app works out which of today's appointments are affected and prepares a message for only those clients, which you send from your own phone.

This policy explains what the app reads, what it keeps, why, and how you remove it. It is written to match what the software actually does.

Who we are

The data controller is TRUEIGHT LTD, a company registered in England (company number 17090683), registered office 115a Queensway, Petts Wood, Orpington, BR5 1DG, and registered with the Information Commissioner's Office (ZC110163). Contact us at hello@imbloodylate.com.

What we read, and what we keep

Your account

You sign in with Google or Apple. We keep an identifier from that provider, your email address (encrypted), the business name you enter, your working time zone and where you are in setting up. We do not keep your password — we never see it — or the name on your Google or Apple account.

Your calendar, if you connect Google Calendar

We ask Google for two permissions, both read-only:

  • calendar.calendarlist.readonly — to show you your calendars so you can choose which ones hold your bookings;
  • calendar.events.readonly — to read the appointments in the calendars you chose.

We never create, change or delete anything in your Google Calendar.

We read appointments from the start of yesterday to fourteen days ahead, and nothing else. For each one we keep its start and end time, whether it is all-day, whether it is cancelled, its title and its guest list. The title and guest list are encrypted. Appointments that fall out of that window are deleted the next time your calendar is read. We do not read locations, descriptions, attachments or video-call details.

We keep the names of the calendars on your Google account so you can choose between them. Your permission from Google is stored as an encrypted refresh token; the short-lived access token made from it is never stored.

Your calendar, if you use your phone's calendar instead

If your bookings live in iCloud, Exchange or another calendar on your phone, the app sends us, for the calendars you choose and the same fifteen-day window, each appointment's time, all-day flag, status and title. It does not send locations, guests, descriptions or calendar names. We never ask for, and have nowhere to store, an Apple ID or iCloud password.

Your clients

Your address book stays on your phone. When you search it to pick a client, the search happens on the phone. Only what you then confirm is sent to us: the client's name as you want it shown, one phone number or email address, and whether you reach them by WhatsApp or text. The number or address is encrypted; we keep its last four digits unencrypted so you can tell two numbers apart. If you tell the app to recognise a client from an appointment title in future, we keep that title.

The messages

We never send a message to your clients. The app prepares the wording and opens WhatsApp or your text-message app with it filled in; you press send. Whether it arrives is between your phone and WhatsApp or your mobile network. We keep an encrypted copy of each prepared message and a note that the app was opened, not whether the message was delivered. The app cannot read or send text messages on its own and does not ask for permission to.

Your phone

We record your phone's platform, app version and operating system version. On the phone, your sign-in is kept in Android's encrypted storage, the app's data is excluded from cloud backups, and no client names, contacts or appointments are cached.

What we do not do

  • No advertising, and no advertising or analytics tools in the app.
  • We do not sell or rent your data, or anyone's in your calendar.
  • No artificial intelligence or machine learning: every decision the app makes — who is affected, who gets a message — follows fixed rules.
  • No one reads your data. It can be decrypted only with keys held in our cloud account; we would use that access only to keep the service secure, to investigate a problem you ask us to look at, or where the law requires it.

Google user data

I'm Bloody Late!'s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to work out your day and which clients your lateness affects, and to suggest which client an appointment is for by matching a guest's email address to a client you have already confirmed. We do not transfer it to anyone, use it for advertising, or use it to train any model.

Where it is kept, and who processes it

Everything we keep is stored on Google Cloud in London (europe-west2). Google Cloud is our only processor. Google or Apple confirms who you are when you sign in, and Google supplies your calendar if you connect it. WhatsApp and your mobile network are involved only when you press send in their app, under their own terms.

How long we keep it

Appointments are kept only while they are inside the fifteen-day window. When a delay ends, the words of the messages prepared for it are erased after 30 days; the note that a message was prepared stays. The delay itself, with everything recorded about it, is deleted after 90 days. Your account and your clients are kept until you delete them. Database backups are kept for 7 days, so anything deleted is gone from them within a week.

Deleting a client removes their name, their number, any appointment title the app remembered for them, and the words of any message written for them, at once. We keep only a note that a client existed and was deleted.

Deleting your data

Everything: in the app, choose Delete account. You are signed out on every device at once. We tell Google to cancel the calendar permission you gave us, then delete your calendars, appointments, clients and messages. We keep only a record that an account existed and was deleted, with no name, email or content.

Calendar only: in the app, open Settings and choose Disconnect Google Calendar. We tell Google to cancel the calendar permission, then delete your calendars and appointments; your account and clients stay. You can also remove I'm Bloody Late! at myaccount.google.com/connections; the app notices on its next read and stops.

A client asking to be forgotten: ask the professional who booked you to delete you as a client, or write to us at the address above.

Your rights

Under UK data protection law you can ask for a copy of your data, have it corrected or deleted, object to how it is used, and complain to the Information Commissioner's Office. Write to hello@imbloodylate.com.

Changes

If this policy changes in a way that affects you, we will say so in the app before the change takes effect.