Legal

Privacy policy

Last updated 6 October 2026

Who we are

KiBuxs is made by RDC PD LTD, a company registered in England and Wales (company number 11633261), registered office 48 Ferrier Avenue, Cardiff, CF5 3LB. RDC PD LTD is the controller of the personal data described here, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact us at support@kibuxs.com. ICO registration number: ---------.

The short version

Your accounts, bank lines, receipts and company details stay on your own computer, encrypted. We never receive them.
We only hold what we need to sell you a licence and support you: your name, email address, company name, Companies House number and purchase details.
This website uses no advertising or tracking cookies, no analytics and no third-party scripts, fonts or embeds.
We never sell your data, and we don't use it for profiling or automated decisions.

The KiBuxs app

KiBuxs runs on your computer. Your books are stored in an encrypted file (AES-256-GCM) with a key made from your password. RDC PD LTD has no access to that file, your password or your recovery key, and the app does not send us your financial data, usage statistics or anything else. There is no AI assistant or other online service built in.

During the Beta the app makes no connection to HMRC. It prepares your VAT returns, CT600 figures and accounts, and you or your accountant file them. The app only reaches outside your computer in these cases, and only when you use a feature that needs them:

Companies House. If you add your own Companies House API key, the app looks up public details about your company, such as filing dates.
Phone receipt upload (optional). If you turn this on, your phone sends receipt photos to your computer over your own local network. They don't pass through us or the internet.

What we collect when you buy or contact us

Purchase details: name, company email address, company name, Companies House number, billing address, what you bought and when, and the licence key we issue. We use the Companies House number to tie your licence key to your company. Card payments are handled by Square, our payment provider. We never see your full card number.
Support emails and problem reports: whatever you choose to tell us when you write to us. The app's Report a problem box only prepares a message for you to send. It includes what you write, plus the KiBuxs version and type of computer if you leave that ticked.
Where it comes from: you, when you buy or write to us, and our payment provider, which tells us your payment went through.
Website logs: our website is hosted by Cloudflare, Inc. (Cloudflare Pages). To deliver pages and protect the site from attacks, Cloudflare processes technical details of each visit, such as your IP address, browser type and the page requested, and keeps them only briefly under its own retention rules. We don't use this to identify you.

Why we use it (lawful basis)

To supply your licence, updates and support: performance of our contract with you.
To keep tax and accounting records of sales: legal obligation.
To keep the website secure and to tell you about important changes to KiBuxs: our legitimate interests.
To send product news: only with your consent, given by ticking a box. You can withdraw it at any time with the unsubscribe link or by emailing us.

We need your name, email address and payment details to sell you a licence. Without them we can't complete the purchase. Everything else is optional.

Who we share it with

Only the service providers that help us run KiBuxs: payment (Square), email (Zoho Corporation, through Zoho Mail) and hosting (Cloudflare, Inc.). They act on our instructions under data processing contracts that protect your data, and HMRC or other authorities where the law requires it. We never sell personal data.

The website uses the fonts already on your device, so it doesn't contact Google or any other font service.

KiBuxs Setup is downloaded from a Microsoft OneDrive folder. When you open the download link, you leave our website and Microsoft's privacy statement applies.

International transfers

Some providers may process data outside the UK. Cloudflare, Inc. is based in the United States and serves our website from data centres around the world. Zoho may store email outside the UK, depending on the data centre region of our Zoho account. Where data leaves the UK, we rely on UK adequacy regulations (including the UK-US data bridge) or the UK International Data Transfer Agreement or Addendum in the provider's data processing terms.

How long we keep it

Purchase records are kept for 6 years after the end of the financial year they relate to, as UK tax law requires. Support emails are kept for 2 years after your last contact. Marketing consent records are kept until you unsubscribe, plus 2 years. Then we delete the data.

Keeping it safe

The website is served over HTTPS only. The little personal data we hold is kept with reputable providers, protected by strong passwords and two-step sign-in, and only the people who need it can see it. If a breach puts your rights at risk, we'll tell the ICO within 72 hours, and tell you without delay where the law requires it.

Your rights

Under UK GDPR you have the right to:

be told how we use your data (this policy)
get a copy of your data
have it corrected if it's wrong
have it deleted
restrict how we use it
object to how we use it, including stopping marketing at any time
get your data in a format you can take elsewhere
withdraw consent at any time, where we rely on it
not be subject to decisions made only by automated means (we don't make any)

To use any of these rights, email support@kibuxs.com. It's free, and we'll reply within one month. We may ask you to confirm who you are first.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

KiBuxs is for businesses and isn't aimed at children. We don't knowingly collect data from anyone under 18.

Changes to this policy

If we change this policy we'll update the date at the top, and tell licence holders by email if the change is significant.

See also: Privacy policy · Terms of use · Refund policy · Cookies · Pricing