Privacy
Privacy policy
Last updated: 21 October 2026
The short version
Grady doesn't keep a copy of your pay. Only you do.
- Your payslips and pay history are saved on your phone, not on Grady's servers.
- To read a payslip, Grady sends the photo or PDF to Anthropic's AI. To suggest your job group, it sends just your job title. Anthropic keeps what Grady sends for up to 30 days, then deletes it, and doesn't use it to train its AI. Grady asks for your agreement before anything is sent.
- Grady saves the figures from your payslip, on your phone. It never saves the image, your name, home address, National Insurance number, employee number or bank details.
- You don't need an account, an email address or a password.
- One button deletes everything Grady saved on your phone. Deleting the app does too.
- Grady doesn't sell your data, show you adverts, or get paid to send you anywhere.
Who runs Grady
Grady is run by GradyPay Ltd, a company registered in England and Wales (company number 17516428), whose registered office is at 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE. In this policy, "Grady" means GradyPay Ltd and the Grady app. GradyPay Ltd is the data controller for the information described here.
GradyPay Ltd is registered with the Information Commissioner's Office, registration number ZC275134.
Questions or requests: hello@gradypay.co.uk.
Grady is for people aged 18 and over.
What Grady saves, and where
| Information | Where it's saved | Why |
|---|---|---|
| Payslip figures: pay, hours, tax, National Insurance, pension, student loan, other deductions, year-to-date totals | Your phone only | To check your pay and build your pay history |
| Pay date, tax code, NI letter, job title, the industry you pick, and your answers to setup questions | Your phone only | To check deductions and compare your pay with inflation and the market |
| Your Ask Grady questions and answers | Your phone only | So you can look back at them |
| Your payday reminder | Your phone only | To remind you on payday |
| "Did Grady read this right?" feedback: payroll system, names of the fields Grady misread, your comment | Grady's feedback database, run by Cloudflare and stored in the EU | To improve how Grady reads payslips |
| Subscription status, if you pay for Grady Plus | Apple or Google, and RevenueCat | To unlock Plus features |
Grady never saves: your name, home address, National Insurance number, employee number, employer's address, bank details, or the payslip image or PDF.
Union subscriptions. Some payslips show a trade union deduction. Union membership is special category data under UK law, so Grady saves the amount as an unnamed "Other deduction", never saves the union's name, and doesn't comment on it. Your payslip still adds up.
Feedback never includes amounts, names or images. Please don't type personal details into the comment box.
How a payslip is read
- You add a photo or PDF of your payslip. Grady doesn't need your name, address or National Insurance number for its checks. If you'd rather not send them, you can crop or mark up the photo in your phone's Photos app before choosing it.
- Grady's server, run on Cloudflare, passes the image to Anthropic's AI over an encrypted connection. Grady's server doesn't save or log it.
- Anthropic's AI reads the figures and sends them back to your phone. Grady saves the figures on your phone and nothing else.
- Anthropic keeps the image and what it read for up to 30 days, then deletes them. If Anthropic's automated safety systems flag a request, Anthropic may keep it for up to 2 years. Anthropic doesn't use it to train its AI. Anthropic works for Grady as a processor under its data processing terms.
What this means. For up to 30 days Anthropic holds the whole image, so it holds whatever is printed on your payslip: for example your name, address, National Insurance number, employer, and any union deduction or sick pay. That's why Grady asks for your agreement before your first payslip is read, and why it suggests cropping or marking up anything you'd rather not send before you choose the photo.
Ask Grady. When you ask Grady a question, the question and a summary of your pay worked out by Grady (figures, and your job group if you've chosen one) go to Anthropic's AI. Grady never sends images with a question, and never your name or National Insurance number. Grady's server doesn't save or log your question. Anthropic handles questions in the same way as payslips (up to 30 days, or up to 2 years if flagged). Please don't type personal details into a question. If you report an answer, your phone opens an email that you send yourself; Grady stores nothing else about it.
Matching your job group. To compare your pay with official figures for your kind of job, Grady can suggest the job group that fits your job title. This happens only when you tap to ask for it. Grady sends your job title, and up to three earlier titles for the same job, to Anthropic's AI, and nothing else: never your pay, your name or anything else from your payslip. Grady won't send a title that looks like a pay figure or an ID number. Grady's server adds the public list of official job groups (the Office for National Statistics' Standard Occupational Classification) and doesn't save or log your title. Anthropic handles job titles in the same way as payslips (up to 30 days, or up to 2 years if flagged). You then confirm the suggestion or pick another group, and Grady saves your choice on your phone. If you'd rather not send your job title, you can search for your job group yourself; that search happens on your phone and sends nothing.
Leaving Grady. The Savings tab links to an independent comparison site. Before it opens, Grady shows a "You're leaving Grady" note. The link is a fixed web address with nothing about you in it, so Grady sends the site no information about you, and Grady isn't paid by it. The site opens in your phone's browser, where its own privacy policy and cookies apply.
Services Grady uses
Each one gets only what it needs.
| Service | What it gets | What it's for |
|---|---|---|
| Anthropic (Anthropic Ireland, Limited) | The payslip image and the figures read from it; Ask Grady questions and the summary of your pay needed to answer them; your job title and up to three earlier titles for the same job, to suggest a job group (never your pay) | Reading payslips, answering questions and matching job titles to occupations. Kept up to 30 days (up to 2 years if flagged by safety systems); not used for training (Anthropic privacy centre) |
| Cloudflare | Payslips, job titles and questions passing through Grady's server, which doesn't save them; network details for each request, such as your IP address, country and the time (not what you sent), which Grady can see for about 30 days; feedback | Running Grady's server and website, and storing feedback. Grady switches off its own server logs; Cloudflare may process network details to keep the service secure |
| Apple and Google | Your purchase | Billing for Grady Plus |
| RevenueCat | An anonymous app ID and your subscription status | Managing subscriptions |
| Emails you send to hello@gradypay.co.uk | Forwarding Grady's email |
Outside the UK
Grady's contract with Anthropic is with Anthropic Ireland, Limited. Anthropic may process data in the US; its data processing terms cover this with the Information Commissioner's UK Addendum to the EU standard contractual clauses. Cloudflare, RevenueCat and Google may also process data outside the UK. Cloudflare and RevenueCat cover this with the UK Addendum to the EU standard contractual clauses in their data processing terms. Google is certified under the UK Extension to the EU-US Data Privacy Framework.
Emails
If you email hello@gradypay.co.uk, your message is forwarded to Grady's email account, which is run by Google. Grady keeps it only as long as it needs to deal with your question.
The Grady app has no analytics, advertising or crash-reporting tools. The website, gradypay.co.uk, has no analytics, adverts or third-party scripts, and Grady sets no cookies on it.
Keeping it safe
- Your pay data is saved inside the Grady app on your phone, protected by your phone's own encryption.
- Payslips, job titles and questions are encrypted on their way to Anthropic's AI (HTTPS).
- Before a photo is sent, Grady removes the hidden details stored with it, such as the location where it was taken.
- Grady's own servers don't store pay data or payslip images, so a breach of Grady's systems wouldn't expose them.
- Only Grady's founder can access feedback, using accounts protected by two-step sign-in.
Grady doesn't make automated decisions about you that have legal or similarly significant effects. Its checks are information for you to act on, or not.
Why Grady is allowed to use it, and for how long
| Use | Lawful basis | How long |
|---|---|---|
| Reading and checking your payslips | Contract: it's the service you asked for | On your phone until you delete it. Anthropic: up to 30 days (2 years if flagged) |
| Special category information printed on a payslip, such as a union deduction or sick pay, while Anthropic reads the image. Rarely, a job title can show it too, such as a trade union role | Your explicit consent, given on the screen before your first payslip is read | Anthropic: up to 30 days (2 years if flagged). Grady never saves it |
| Ask Grady | Contract | On your phone until you delete it. Anthropic: up to 30 days (2 years if flagged) |
| Suggesting your job group from your job title | Contract | The group you choose: on your phone until you delete it. Anthropic: up to 30 days (2 years if flagged) |
| Feedback on reading accuracy | Legitimate interests: making Grady read payslips correctly | 12 months, then deleted |
| Subscriptions | Contract | As long as Apple, Google and RevenueCat need it for billing and tax records |
| Emails to hello@ | Legitimate interests: answering you | As long as needed to deal with your question |
Changing your mind. You can withdraw your consent at any time by turning off "Read payslips with Anthropic's AI" in Settings. Grady then won't send any payslip, job title or Ask Grady question to Anthropic until you turn it back on and agree again. You can still search for your job group on your phone. Your saved history stays on your phone. This doesn't undo payslips or job titles already sent: Anthropic deletes those on its own timetable (up to 30 days), and Grady can't recall them.
Deleting your data. Settings › Delete everything wipes your payslips and history from your phone. Deleting the app does the same. If your phone backs up to iCloud or Google, copies in that backup follow your backup settings. You can export your pay history first.
Losing your phone. Grady doesn't hold a copy, so it can't restore your history. Your phone's own backup is the only copy.
Your rights
Under UK data protection law you can ask Grady to:
- tell you what it holds about you and give you a copy
- correct it
- delete it
- stop or limit how it uses it, or object to it
- move it to another service
- withdraw consent you've given
Most of your data is only on your phone, so you can see, change, export and delete it yourself in the app; Grady can't see it. For anything Grady holds, such as feedback or emails, write to hello@gradypay.co.uk. Grady replies within one month.
If you're unhappy with how Grady has handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
If Grady changes how it uses your data, it will update this page and tell you in the app before the change applies.