Last updated 2026-09-13. This explains what we collect and what we do with it. Bank Switcher is the data controller; a sole trader in the United Kingdom.
What we collect
·
Your email address, so you can sign in and so we can send reminders about your plan. If you sign in with Google we receive your address and name from Google, and nothing else.
·
The banks you tell us you hold a current account with, which bank your salary lands in, and which switch bonuses you have taken before. This is the input the planner runs on.
·
Your progress: which steps you have ticked, which bonuses you have marked as received, which offers you have put aside.
·
If you set up a direct debit with us: a record that it exists, its status, and the identifiers Stripe gives it. We never see or store your sort code or account number — you type those on Stripe’s own page.
·
Anonymous usage events (screens reached, steps completed). They carry no name, no email and no bank list, and they are not joined up across sessions.
Why we are allowed to hold it
·
To provide the service you asked for — the plan, the account, the progress. That is performance of a contract.
·
To send reminders a week before and the day before each deadline in your plan. These are on by default because they are part of the service you asked for, which is our legitimate interest. They are never marketing, and you can turn them off during setup, from Settings, or from the link at the bottom of every email.
·
To take payment for a direct debit you chose to set up.
·
To keep the service working and secure, which is our legitimate interest.
Who else processes it
We do not sell your data, we do not share it with banks, and we take no commission from anyone for a switch you make.
·
Supabase — the database and sign-in, hosted in the EU.
·
Stripe — payments and direct debit mandates. They are the ones who collect your bank details, under their own privacy policy.
·
Google — only if you choose to sign in with Google.
·
Resend — sending reminder emails, and the confirmation when you set up a direct debit.
·
PostHog (EU) — anonymous usage events.
How long we keep it
For as long as you have an account. Delete your account and the plan, the answers, the progress and the sign-in record are removed.
Two exceptions, and both are about money: records of payments actually taken stay with our payment provider, because that is the receipt if a debit is ever queried — a Direct Debit claim can be made at any time. Anonymous usage events are not linked to you and stay in aggregate.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Deletion is a button in Settings and it works immediately; for anything else, email hello@bankswitcher.uk.
If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first.
Cookies
We do not use advertising or tracking cookies. The app keeps your sign-in session in your browser’s local storage so you stay signed in, which is required for it to work at all.
Children
The app is for adults with a UK current account and is not intended for anyone under 18.