Everything NI is a local services directory for Northern Ireland. This page explains what we hold about you, who can see it, and how to get it removed. It is written to describe what the app actually does, so you can check it against the app rather than take it on trust.
Everything NI is operated by Wee Apps NI Ltd (NI743523), registered at 1 Innisgarry Park, Antrim, BT41 4LA. We are the data controller for the information described here. We are registered with the Information Commissioner's Office, registration number ZC250993. Any question about this policy: hello@everythingni.com.
1. The short version
- Your email address is how you sign in. It is never shown to anyone and never used to advertise at you.
- Other people only ever see your first name and one initial - “David S.”, with no photo and no profile page.
- Your postcode is never shown to anybody. It works out distances; other people see a town name and how far away you are.
- If you run a business, your business page and your customer activity are never publicly linked.
- We do not sell your information and we do not use it for advertising.
- You can delete your account from inside the app, and it really deletes.
2. What we collect, and why
Everyone
| What | Why | Legal basis |
|---|---|---|
| Email address | Signing in. A six-digit code is sent to it | Contract |
| First name and surname | Your first name and initial are shown to others; your surname is held for support and moderation and is never displayed | Contract; legitimate interests |
| Postcode, and the location derived from it | Working out what is genuinely near you, and how far away a business is | Contract |
| Town name | Shown to others in place of your address | Contract |
| What you post - job requests, messages, photos | Providing the service | Contract |
| Your job alert choices - whether you want them, and which hours, roles and distance | Telling you about vacancies you asked to hear about. Private to you, never shown to anybody | Consent |
| Things you save (businesses, posts, jobs, events) and events you say you are going to | Keeping your lists for you. Private to you; a business that lists an event sees only how many people are going, never who | Contract |
| Notification token | Sending the notifications you turned on | Consent |
| Reports you make, and warnings we send you | Keeping the app safe | Legitimate interests |
Businesses only
| What | Why | Legal basis |
|---|---|---|
| UK mobile number, confirmed by text | Proving a real person is behind a business page. A number that must be possessed is most of what stops fake listings | Contract; fraud prevention |
| Full business address | Working out distance and coverage, verifying the business is real, and legal or dispute contexts | Contract; legitimate interests |
| Business details you enter | Your public listing | Contract |
| Purchases | What the business bought, when it starts and ends, whether it renews or was refunded, and the App Store or Google Play order or transaction id - so each purchase reaches the right page and a refund can be matched to it. Apple or Google takes the payment. We never see card details | Contract |
| A scrambled form of the business's mobile number | So an introductory free offer is given once per business, not once per new account. It is held only on our servers and never shown to anybody. It could be matched back to the number, so we treat it as personal data. It is kept after an account is deleted, because that is when it does its job | Legitimate interests; fraud prevention |
Collected automatically
- Page views on business pages, counted once per person per business per day, to produce the visitor count a business sees. A business is never shown who viewed it.
- That you tapped a business's phone number, email or website, once per person per business, so the business can be shown how many enquiries it has had. A business is never shown who made them, and it is never told a name.
- That a featured placement was shown to you, or that you opened a post or got in touch from one, once per person per day, so the business can see how its adverts are doing. Counts only - a business is never shown who. Kept 120 days.
- Searches that found nothing, as the words and the town only, with nothing to say who searched, so we know which services people are looking for and cannot find. Kept 90 days.
- Signup progress, as six anonymous step markers with no identifier attached, so we can tell where people give up. Deleted after 90 days.
- The IP address a sign-in code was asked for from, with the email address it went to, so we can limit how many codes are sent and stop abuse. Kept 2 days. Legal basis: legitimate interests.
- The IP address a business bought, restored or changed a purchase from, with the page, so we can limit repeated tries and stop abuse. Kept 2 days. Legal basis: legitimate interests.
- Roughly where you are looking from, to about 1 km, and your IP address, by the hour, so we can spot anybody using the app to work out where a business or a person is. Kept 2 days. Legal basis: legitimate interests.
- Technical error records from our own servers, kept 14 days.
We do not use advertising trackers, analytics SDKs, or third-party cookies.
Businesses we listed from public information
Some business listings were not created by their owner. To make the app useful on its first day rather than empty, we built a small number of listings from publicly available business information - the sort of thing printed on a shopfront, a website or a public directory: the business name, what it does, the town it works from, and a contact number or website where one was published.
Every one of these is marked "Unclaimed" wherever it appears, cannot be messaged, receives no job requests, has no badges and can post nothing. We hold it on the basis of legitimate interests - a local directory people can actually use - balanced against the fact that it is business information published to be found.
If that is your business, you decide what happens to it. Claim it in the app and it becomes yours to edit, or email hello@everythingni.com and we will take it down. A takedown is remembered against the business name and town, not just the row, so a later import cannot quietly put you back. You can also object at any time under the rights in section 8.
The early list on our website
The form on our home page asks for a business name and an email address, so we can tell you when the app launches. We use it for nothing else. It is held by Netlify Forms, in the US, and deleted once the app has launched, or sooner if you ask. Legal basis: your consent, which you can withdraw at any time by emailing hello@everythingni.com.
3. Your address, and who can see it
This is the part worth reading twice.
Every business gives us a full address. Who has to give one and who may see one are different questions.
- A business that travels to customers - a mobile hairdresser, a plumber, a dog groomer - has an address that is usually their home. It is never displayed to anybody, in any form. Not the street, not the town line, not the postcode. Other people see the town it works from and a distance.
- A business customers visit - a shop, a salon, a garage - chooses whether to publish its address. It is off unless they turn it on.
- A customer's postcode is never shown to anybody, ever. Requests carry a town and a distance. If you want somebody to come to your house, you tell them yourself in a message.
Addresses are held in a separate part of the database that only the business itself can read. It is built that way so that publishing one by mistake is not possible, rather than relying on a rule being remembered.
4. Who we share it with
We do not sell your data. We share it only with the services that make the app work:
| Who | What they get | Where |
|---|---|---|
| Supabase | Hosts the database, accounts, photos and server code | London, UK |
| Resend | Your email address, to send sign-in codes | EU/US |
| Twilio | A business's mobile number, to send the confirmation text | EU/US |
| Expo | Delivers push notifications and updates to the app itself. A notification carries what you would see on your lock screen - who it is from and the first line of a message | US |
| Cloudflare | Checks that a real person is signing in, looks up whether a business's email domain can receive mail, and keeps a backup copy of uploaded photos | Global; backups in Western Europe |
| Netlify | Hosts this website, the pages a shared link opens, and the early-list form on our home page (a business name and an email address). It sees the ordinary details any website sees, such as your IP address | US |
| Apple and Google | Deliver push notifications to your phone. They also take every payment a business makes in the app, through the App Store or Google Play: we send each purchase a random reference so it reaches the right business page, and they send us back what was bought, the dates, whether it renews or was refunded, and an order or transaction id - never card details | US |
| Stripe | Only for plans bought before version 1.6.0 of the app, which Wee Apps NI Ltd may bill directly. They get the business name and our own reference for the account, and what was typed on their payment page, such as card details and an email address. We never receive card details | EU/US |
| postcodes.io | A postcode, to turn it into coordinates. No personal details are sent with it | UK |
| Companies House | A business name, only when it claims to be a limited company | UK |
Cloudflare Turnstile
The sign-in screen runs Cloudflare Turnstile to stop automated scripts asking us to email sign-in codes to people who never asked for one. It is a check on the request, not on you: Turnstile is not sent your email address, your name, or anything you have typed. Usually nothing appears on screen at all.
Cloudflare processes the data it collects for this in accordance with the Cloudflare Turnstile Privacy Addendum.
Separately, when a business page is created we ask Cloudflare's public DNS service whether the sign-in address's domain can receive mail. Only the domain is sent - never the address itself.
Some of these are outside the UK. Where that is the case, transfers rely on UK adequacy decisions or standard contractual clauses. We will also disclose information where the law requires it, or where it is necessary to investigate fraud, abuse, or a safety issue.
5. What other people see about you
The app deliberately keeps two identities apart:
- As a customer, you appear as your first name and one initial, with no photo and no profile page. Posting a job request shows a person.
- As a business, your page, posts and replies show the business.
Nothing on the app publicly links the two. If you run a business and also ask for a plumber, nobody can tell those are the same account.
Names are read from your profile every time they are shown rather than copied, so changing your name updates everywhere at once and leaves no old copy behind.
6. How long we keep it
| What | How long |
|---|---|
| Your account and profile | Until you delete it |
| Job requests | 14 days live, then kept as a record |
| Messages | While either of you still has the chat, and 12 months after an account is deleted |
| Business page views | 90 days |
| Post and featured-week views and taps | 120 days |
| Searches that found nothing | 90 days |
| Signup step markers | 90 days |
| Server error records | 14 days |
| Sign-in code records, purchase attempts and rough-area checks, with IP addresses | 2 days |
| Backup copies of photos | Removed within 30 days of the photo leaving the app |
| Early-list sign-ups from our website | Until the app launches, or sooner if you ask |
| Reports and warnings | Kept as a safety record |
| Payment records | 6 years after the purchase, as UK tax law requires, including after an account is deleted |
7. Deleting your account
Settings → Delete my account, or email hello@everythingni.com from your sign-in address and we will delete it for you. It removes your name, number, postcode, location, notification settings, business page, posts, gallery, job replies and every photo you have uploaded. We also keep a backup copy of photos, so one deleted by mistake can be put back; a photo that has left the app is removed from the backup within 30 days.
If you run a business on a paid plan that still has days left, you choose. Delete now: everything above goes straight away, and the days left on the plan are lost. Or delete when the plan ends: the plan is set not to renew and the account is deleted on the day it ends, so the month you have paid for is not taken from you, and you have a way back if you change your mind. You are signed out at once, and signing back in before that date keeps the account with nothing deleted. The wait is never longer than one billing period. Everybody else is deleted straight away.
Deleting your account does not stop Apple billing you. A plan or Events Pass bought through the App Store carries on until you turn it off in your Apple subscriptions, so turn it off first - which is also why, on an App Store plan, "when the plan ends" is offered only once it is turned off. A Google Play plan or Events Pass is stopped for you when the account is deleted, and so is a plan billed directly by Wee Apps NI Ltd.
Three things deliberately survive, and it is worth being straight about why:
- An emptied record of your account remains, carrying no personal details apart from the purchase references below, because conversations you were part of point at it and the other person's copy has to still make sense.
- A record of what your business bought, with its App Store or Google Play reference, is kept for 6 years after each purchase, as UK tax law requires. It also lets us recognise a charge that carries on after the account is deleted.
- The other person keeps their side of any conversation you had. Your name is replaced with “Deleted account”. That conversation is their record of a dealing they had, and it is not ours to erase from their account.
Your sign-in details are genuinely removed, so signing up again creates a completely new account. If a business page has been reported or suspended, we keep a minimal record of that for safety purposes.
8. Your rights
Under UK GDPR you can ask us to:
- give you a copy of what we hold about you
- correct anything wrong (most of it you can edit in the app yourself)
- delete your account and data (in the app, or by asking us)
- restrict or object to how we use it
- withdraw consent for notifications at any time (Settings → Notifications)
Email hello@everythingni.com and we will respond within one month.
If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk, or call 0303 123 1113.
9. Children
Everything NI is not intended for children. You must be at least 16 to create an account.
10. Security
Accounts are protected by a code sent to your email rather than a password, so there is no password to be stolen or reused. Every rule about who can see what is enforced on our server, not in the app - the app cannot be modified to see somebody else's data.
Photos on public things (business logos, cover photos, posts) are publicly readable, because the things they belong to are published. Photos on job requests and in conversations are private, and released only to the people entitled to see them.
No system is perfectly secure. If we ever have a breach affecting your rights, we will tell you and the ICO as the law requires.
11. Changes
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.
12. Contact
Wee Apps NI Ltd
1 Innisgarry Park, Antrim, BT41 4LA
hello@everythingni.com