01At a glance
- Data stored in London
- Encrypted in transit and at rest
- No bank connection
- We never hold or move money
- Never sold
02How we protect you
Your money stays where it is
The Long Term can't move, hold or even see your money. We never ask for bank logins, and we don't connect to your accounts.
You decide what we know
Everything we know, you typed in yourself. Nothing is gathered in the background, and you can change or remove it whenever you like.
Encrypted end to end
Every connection to The Long Term uses HTTPS. Your data is encrypted in our database, which is hosted in London.
Sign-in built to resist attack
Passwords are stored only as a one-way hash, never in readable form. Repeated sign-in attempts are slowed down automatically. You can also sign in with Google instead.
Access kept to a minimum
Only the people who need it to run and support The Long Term can reach personal data, and only when they need to.
Not for sale
We never sell your data or share it with advertisers. The companies that help us run the service may only use it to do that job.
Watched and reviewed
Automatic error monitoring tells us quickly when something breaks. We review our security as The Long Term grows.
Delete means delete
Close your account in the app's settings and your personal data is removed from our live systems straight away.
03Your sign-in session
When you sign in to the app, we set one essential cookie that keeps you signed in for up to seven days. It is sent only over secure connections, and it is marked so that scripts running in the page can't read it. That protects it from a common kind of attack. Signing out ends the session straight away.
04What you can do
- Use a password you don't use anywhere else, or sign in with Google.
- Sign out when you use a shared or public device.
- We'll never ask for your password by email or phone. If a message claiming to be from us seems wrong, forward it to info@thelongterm.co.uk.
05Report a security issue
If you think you've found a weakness in The Long Term, or that your account has been misused, email info@thelongterm.co.uk with SECURITY in the subject line. We aim to reply within one working day.
If you're a security researcher, please give us a reasonable time to fix an issue before you make it public. Don't access, change or keep anyone else's data, and don't disrupt the service for other people. If you report in good faith and follow these rules, we won't take action against you.
06More detail
Our Privacy Policy lists the companies that help us run The Long Term and where they are based. Our Cookie Notice lists every cookie we use.