Privacy

Last updated: April 2026

Your privacy matters to us. This policy explains how Alright Mucka Limited (trading as Mucka), company number 16713216, ("Mucka", "we", "our", or "us") collects, uses, and protects your personal information when you use our services.

Alright Mucka Limited is the data controller for the personal data described in this policy, unless otherwise stated. We are registered with the Information Commissioner's Office (ICO) under reference ZC023304.

1. Information We Collect

Information you provide directly

  • Account details: name, email address, phone number, and business information
  • Content you create: quotes, invoices, job details, and client records
  • Voice data: when you use voice commands, which is processed to extract text
  • Payment information: processed securely through our payment providers
  • Communications: messages you send to us or through the platform
  • Marketing preferences: your consent choices for receiving promotional communications, including SMS and email marketing
  • End-customer data: contact details (including names and phone numbers) of your clients that you input into the platform for the purpose of managing quotes, invoices, job communications, and other service-related activities

Information we collect automatically

  • Device information and browser type
  • Usage data and interaction patterns
  • IP address and approximate location

2. How We Use Your Information

We use your information for the purposes set out below. For each purpose, we have identified the lawful basis we rely on under UK GDPR Article 6.

Purpose Lawful Basis
Providing, maintaining, and improving our services Performance of a contract (Art. 6(1)(b))
Processing payments Performance of a contract (Art. 6(1)(b))
Personalising your experience Legitimate interests (Art. 6(1)(f)) — to improve our services and make them more relevant to you
Responding to support requests or enquiries Performance of a contract (Art. 6(1)(b)) / Legitimate interests (Art. 6(1)(f))
Sending service communications (e.g., account alerts, job status updates, payment confirmations) Legitimate interests (Art. 6(1)(f)) — necessary for the operation of the service
Sending promotional SMS and email marketing Consent (Art. 6(1)(a)), in accordance with the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR") — see Section 3
Sending SMS and other communications to end-customers on behalf of tradespeople Legitimate interests or consent (as determined by the tradesperson as data controller) — see Section 3
Analysing trends and usage for internal business purposes Legitimate interests (Art. 6(1)(f)) — to understand how our services are used and improve them
Ensuring legal compliance and enforcing our Terms of Service Legal obligation (Art. 6(1)(c)) / Legitimate interests (Art. 6(1)(f))

3. SMS and Electronic Marketing Communications

3.1 Types of SMS Communications

We may send you the following types of text messages (SMS):

Service messages (sent on the basis of legitimate interests or contractual necessity — no marketing consent required):

  • Account verification and security alerts
  • Job status updates and appointment reminders
  • Payment confirmations and invoice notifications
  • Service disruption notices

Promotional messages (sent only with your prior consent under UK PECR):

  • Product updates, new features, and service enhancements
  • Special offers, discounts, and promotions
  • Tips and content related to running your trade business
  • Event invitations and announcements

3.2 Consent for Promotional SMS and Email

We will only send you promotional SMS or email marketing where you have given us your specific, informed, and freely given consent to do so. You may provide consent by:

  • Ticking a clearly labelled opt-in box during account registration or at a later point within the platform
  • Responding affirmatively to an in-app consent request

We will never treat pre-ticked boxes, silence, or inactivity as consent.

Soft opt-in: Where you are an existing customer of Mucka AI and we obtained your contact details in the course of providing our services to you, we may send you promotional messages about our own similar products and services without requiring fresh opt-in consent, provided that:

(a) you were given a clear opportunity to opt out when your details were first collected; and

(b) every subsequent message includes a simple way to opt out.

This is in accordance with Regulation 22(3) of the Privacy and Electronic Communications (EC Directive) Regulations 2003.

3.3 SMS and Communications Sent on Behalf of Tradespeople

Where a tradesperson using our platform instructs us to send SMS messages or other communications to their end-customers (e.g., appointment reminders, quote notifications, job completion updates, or review requests), the following applies:

  • Data controller: The tradesperson is the data controller for their end-customers' personal data. Mucka acts as a data processor on the tradesperson's behalf for these communications.
  • Lawful basis: It is the tradesperson's responsibility to ensure they have a lawful basis (such as legitimate interests or consent) for sending these messages to their customers.
  • Data processing terms: We process end-customer data in accordance with the data processing terms set out in our Terms of Service.
  • Promotional messages to end-customers: If a tradesperson wishes to send promotional SMS to their end-customers via our platform, they must ensure they have obtained valid PECR-compliant consent from those individuals before instructing us to send such messages. We will not knowingly send promotional SMS to end-customers without confirmation from the tradesperson that appropriate consent has been obtained.
  • Opt-out: All SMS sent to end-customers on behalf of tradespeople will include a clear opt-out mechanism (e.g., reply STOP). Opt-out requests will be processed within 24 hours.

3.4 How to Opt Out of Marketing Communications

You can opt out of promotional SMS at any time by:

  • Replying STOP to any promotional text message
  • Updating your communication preferences in your Mucka account settings
  • Contacting us at [email protected]

You can opt out of promotional emails at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Updating your communication preferences in your Mucka account settings
  • Contacting us at [email protected]

Opting out of promotional messages will not affect service messages that are necessary for the operation of your account.

We will process your opt-out request within 48 hours of receipt.

3.5 SMS Frequency and Charges

We will not send more than 4 promotional SMS messages per calendar month unless you have explicitly opted in to a higher frequency.

Standard message and data rates from your mobile provider may apply. Mucka does not charge you for receiving SMS.

3.6 Consent Records

We maintain records of:

  • When and how consent was obtained for promotional communications
  • Opt-out requests and the date they were actioned
  • The content and timing of messages sent

These records are retained for the duration of your account and for a period of 24 months following account closure or withdrawal of consent, in order to demonstrate compliance with UK PECR and UK GDPR.

4. How We Share Your Information

We do not sell your personal data. We may share your information with:

Service providers: We use third-party service providers to help us deliver our services. These include:

  • Payment processors: to process payments securely on our behalf
  • Hosting and infrastructure providers: to store and serve our platform
  • Analytics providers: to help us understand how our services are used
  • SMS delivery provider (Twilio): to deliver text messages to end-customers on behalf of tradespeople using our platform
  • Email marketing provider (Mailchimp / Intuit): to deliver promotional email and SMS marketing communications to our users

All service providers are bound by contractual obligations to process your data only on our instructions and to maintain appropriate security measures. Where a service provider processes personal data on our behalf, we have data processing terms in place that meet the requirements of UK GDPR Article 28. For tradespeople using our platform, data processing terms governing our handling of end-customer data are set out in our Terms of Service.

Affiliates and contractors: under strict confidentiality and security obligations.

Legal authorities: when required by law or to protect rights and safety.

Business transfers: in the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify you of any such change.

5. International Data Transfers

Some of our service providers (including Twilio and Mailchimp) are based in the United States. Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place, including:

  • Transfers to countries that have received a UK adequacy decision from the Secretary of State
  • The UK International Data Transfer Agreement (UK IDTA) or the UK Addendum to the EU Standard Contractual Clauses
  • Other legally recognised transfer mechanisms

You may request further details about the safeguards we use for international transfers by contacting us at [email protected].

6. Your Rights and Choices

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: to request a copy of the personal data we hold about you
  • Right to rectification: to request that we correct inaccurate or incomplete data
  • Right to erasure: to request that we delete your personal data, subject to certain exceptions
  • Right to restrict processing: to request that we limit how we use your data
  • Right to data portability: to request a copy of your data in a structured, commonly used, machine-readable format
  • Right to object: to object to processing based on legitimate interests, including direct marketing
  • Right to withdraw consent: where we process your data based on consent (including marketing consent), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request, as required by UK GDPR.

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Data Security

We implement technical and organisational safeguards to protect your data, including:

  • Encryption (in transit and at rest)
  • Secure authentication and access controls
  • Regular security assessments and monitoring

However, no method of transmission over the internet is 100% secure.

8. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential cookies: required to operate the service
  • Analytics cookies: to understand how our site is used
  • Preference cookies: to remember your settings

You can manage cookie preferences in your browser settings.

9. Data Retention

We retain your personal data for as long as your account is active and for the following periods after account closure:

  • Account and service data: for up to 12 months after account closure, unless a longer period is required by law
  • Marketing consent records: for 24 months after account closure or withdrawal of consent, to demonstrate compliance
  • Financial and transaction records: as required by applicable tax and accounting legislation (typically 6 years under HMRC requirements)
  • End-customer data processed on behalf of tradespeople: deleted or returned in accordance with our data processing terms upon termination of the tradesperson's account

You can request data deletion at any time by contacting [email protected].

10. Children's Privacy

Mucka is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the service. We encourage you to review this policy periodically.

12. Contact Us

For privacy-related enquiries, contact us at: