Who is responsible

RewireSim is a trading name of Bond Labs Limited. rewiresim.com

Bond Labs Limited (company number 17285766) provides RewireSim. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

You hold the jobs, customer details, and photos in this browser. For that copy, you are the controller of your customers’ personal data.

If you sign in, Bond Labs Limited is the controller of your account email and settings. You are the controller of your customers’ names, phones, emails, and site addresses. We store those records for you as a processor, only to provide RewireSim and to restore a lost phone. We do not use them for advertising. Product support is support@rewiresim.com. RewireSim does not email your customers.

Last updated 29 August 2026.

What RewireSim stores

RewireSim stores the following so the app can work. It is not advertising data and it is not sold.

• Your sign-in email, if you request a one-time code or magic link. That mail is a sign-in, not marketing (PECR / ICO electronic mail). It is sent to you, the electrician, never to your customer as a quote.
• Settings you type: business name, rates, VAT flag and VAT number if you enter one, scheme name and number if you enter them, pay-to details if you enter them.
• Jobs you create: customer name, phone, email, site address, notes, circuit schedule, quote lines, gaps, and analysis text.
• Clients derived from those job fields.
• Photos you add, as JPEG in IndexedDB on this browser and, if you are signed in, in a private storage bucket on your account. Captions you type.
• A quote sequence for numbering papers.

Photos

Photos stay on this device until you delete the job, wipe this browser, or tap Draft. If you are signed in they also sit in your account so a lost phone can restore them. RewireSim compresses them locally so the file is smaller. They are not a survey. RewireSim does not redraw a photo.

Do not photograph children for this app. RewireSim is not directed at anyone under 18.

Photo drafts and xAI

Draft sends these photos and your typed notes to xAI (SpaceXAI / Grok) to produce a labour and materials draft. They stay on this device, and in your RewireSim account if you are signed in, until you tap Draft. RewireSim does not use them for advertising. The result is an indicative estimate, not a site visit.

xAI processes the images and notes to return a structured draft. RewireSim then strips invented scheme numbers, VAT numbers, company numbers, board ways, and device ratings that were not in your typed notes. The draft is still yours to edit.

Apple App Store Review Guideline 5.1.2 requires a clear disclosure and explicit permission before personal data is shared with a third-party AI. The disclosure sits above Draft. Tapping Draft is that permission for those photos and notes. You can type a quote instead.

If Draft is not available on this copy, you can still type a quote by hand. We do not see whether a draft key is present.

What we do not collect

Bond Labs does not run analytics, advertising, crash reporters, or social pixels. There is no live customer email from RewireSim, and no card payment.

The health check on this copy only reports whether a photo-draft key, a Resend key, and the public account config are present. It does not send the key, photos, or jobs to Bond Labs Limited.

Cookies and similar technologies

RewireSim does not use non-essential cookies. It uses local storage and IndexedDB because that is how jobs and photos persist on this device. If you sign in, a strictly necessary session cookie keeps you signed in so the desk can see the session. That storage is not advertising.

The Privacy and Electronic Communications Regulations (PECR), as amended, and the ICO storage-and-access guidance treat strictly necessary storage differently from advertising cookies. There is nothing extra to opt into, so there is no Reject non-essential control that would change how the app works. A full-width notice bar in the app chrome tells you that. It is not a popup and it never covers New job, Draft, or the tab bar. Tapping Got it stores that you have seen the notice on this device. You can show that notice again from Settings.

The account is stored on RewireSim’s own Supabase project in London (eu-west-2). Owner-only row-level security is forced: only your signed-in user can read your rows, and a job_id or storage path cannot point at another electrician’s row. The browser never uses a service_role key. A European region is not the same as “GDPR certified”, and we do not claim that.

• This browser: Jobs, clients, letterhead, rates, a local Plus timestamp, and the storage notice. So jobs, clients, and settings stay on this device after you sign in.
• IndexedDB: Job photos you add. Photos are too large for ordinary browser storage.
• Sign-in session: Your electrician email session. Only to keep you signed in. Not used if you never sign in.
• RewireSim does not set advertising cookies and does not run an analytics SDK.
• What this browser stores: rewiresim.settings.v1 (letterhead, rates, VAT and scheme numbers you type); rewiresim.jobs.v1 (jobs and draft quotes); rewiresim.clients.v1 (clients you type); rewiresim.cookie-notice.v1 (that you have seen this notice); rewiresim.first-run.v1 (that you skipped the first-run steps); rewiresim:last-email (last electrician sign-in address, not marketing); IndexedDB database rewiresim (job photos); sessionStorage for a wiped-browser notice and an optional Add to Home Screen hint; and, after sign-in, a Supabase Auth session cookie so you stay signed in and the desk can see the session. Older local builds used sparkquote.* keys and an IndexedDB named sparkquote; this version copies them once to the RewireSim keys, then removes the old keys.
• Duration: until you delete a job, wipe this browser, sign out (session), or tap Got it (notice). Photos are not in the JSON export.
• Third parties that may receive data only after you act: Supabase (London account and sign-in mail); xAI in the United States if you tap Draft. Bond Labs does not sell this data.

Who else sees data, and where

Supabase hosts the account in London (eu-west-2). A European region is not the same as “GDPR certified”, and we do not claim that.

If you tap Draft, those photos and notes go to xAI in the United States. We will not pretend that send stays in the UK.

Sign-in mail is a service message from Supabase Auth so you can open the account. It is not marketing, and it is not sent to your customers.

If you subscribe to Plus on the web, Stripe processes the card. If you subscribe on Apple or Google, Apple, Google, and RevenueCat process the purchase. Those providers receive the identifiers they need to run the subscription, not your job photos or customer quotes.

Subscriptions and in-app purchases

Plus is an electrician subscription. Two free quotes on this device. Then Plus, £14.99 a month inc VAT unless a later price is shown on Account. Checking and sharing a further quote needs Plus. Typing a quote stays open. It is not a customer payment and it never appears on the customer paper.

On the web and the PWA, Stripe Checkout and the Stripe billing portal process the card. On Apple and Google, digital goods use in-app purchase through RevenueCat. Both webhooks write one plus_until timestamp on your account, plus three days’ grace.

We store your account user id, an optional Stripe customer id, and plus_until. We do not store full card numbers on RewireSim. Native purchases use the Apple or Google account, not a card typed in this app.

Restore purchases on a reinstall. Manage subscription on the Stripe portal (web) or the OS subscription screen (Apple and Google).

RewireSim is not taking a live card. Do not enter a card.

Lawful basis (UK GDPR)

Your use of RewireSim as a business tool is legitimate interests in providing the drafting software, and contract for these terms, for the software itself. Hosting a signed-in copy so you can restore a lost phone is that same purpose.

Customer names and site addresses you type are your records. Process them under your own lawful basis as the electrician (usually contract with your customer, or legitimate interests in quoting the job).

Sending photos to xAI for a draft is consent. You give it by tapping Draft after the disclosure. You can refuse by typing the quote instead, and you can delete the job afterwards.

The sign-in mail is a service message so you can access the account. It is not marketing consent.

Retention and deletion

The copy on this browser stays until you delete a job, restore over it, clear the browser, or use Remove everything on this browser in Settings. That wipe does not delete the account copy.

The account copy stays until you delete the job while signed in, or use Delete my account on the Account page or at /delete-account. That button asks you to type DELETE or your email. You can also wipe this browser in the same step so you leave clean. If you already sent photos to xAI for a draft, that request was processed to produce the draft.

Delete my account erases jobs, quotes, photos, and clients from RewireSim’s host. Sign in with the electrician email first. The email login at the host may still exist. Wiping this browser is separate and does not delete the account. RewireSim cannot unsend a draft already sent to xAI.

Quotes in RewireSim are drafts until you check them. This is not an HMRC, NICEIC, or NAPIT process. RewireSim does not claim to be HMRC-recognised and does not hold your certificates. Erase removes the hosted jobs, quotes, photos, and clients. It cannot unsend a photo draft already sent to xAI. The email login at the host may still exist. Tick the box if you also want this browser wiped.

Export my data from Settings or Account if you want a copy of jobs, clients, and settings. Photo files are not in that file. Sign in on a new phone to restore photos from the account.

Your rights

Under the UK GDPR you can access, correct, or erase personal data, object to processing, and complain to the Information Commissioner’s Office (ico.org.uk, Wycliffe House, Water Lane, Wilmslow, SK9 5AF). The right to object applies where we rely on legitimate interests (keeping the account safe). To erase the copy on this browser, edit or delete the job, or wipe this browser. To erase the account copy, use Delete my account on the Account page, or write to the registered office marked RewireSim.

RewireSim does not claim an ICO registration number. We have not invented one.

Write to Bond Labs Limited, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, marked RewireSim.

Product support is support@rewiresim.com. App mail is from hello@rewiresim.com. RewireSim does not email your customers a quote.

Children

RewireSim is for qualified tradespeople. It is not directed at children. Do not add photographs of anyone under 18.

Changes

Plus checkout does not take a live card. If payments start, or if quotes start leaving through RewireSim mail, this notice will change before that happens.