Privacy Policy
Last Updated: October 2026
Welcome to FirstRung ("we," "our," or "us"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (firstrung.app) and use our affordability and stress-test engine.
Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it. By using FirstRung, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect data to provide and improve our services to you. The types of data we collect include:
- Voluntary Personal Data: When you request a PDF export, an Agreement in Principle (AIP), or contact us, we collect your name and email address.
- Financial Inputs: To generate your stress-test results, you input financial data (e.g., income, deposit amount, debts). This data is processed to generate your personal dashboard and playbook.
- Technical & Usage Data: We automatically collect certain information when you visit, use, or navigate the site. This includes IP addresses, browser types, operating systems, referring URLs, and information about how you interact with our app (e.g., button clicks, page views).
2. How We Use Your Information
We use the information we collect in the following ways:
- To provide, operate, and maintain our application.
- To send you requested outputs, such as PDF exports of your financial dashboard.
- To facilitate connections with mortgage brokers if you request an Agreement in Principle (AIP).
- To understand and analyze how you use our website to improve our user experience.
- To comply with our legal obligations.
3. Third-Party Service Providers
We do not sell your personal data. We share your information only with trusted third-party services that strictly assist us in operating our platform:
- Supabase: For secure database hosting and lead capture storage.
- Resend: For sending transactional emails (like your PDF reports).
- PostHog & Google Analytics: For product analytics and tracking website performance.
- Vercel: For secure website hosting and infrastructure.
4. Data Security
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
5. Your Data Protection Rights (UK GDPR)
Under UK data protection law, you have rights including:
- Your right of access: You have the right to ask us for copies of your personal information.
- Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate or complete information you think is incomplete.
- Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
To exercise any of these rights, please contact us at hello@firstrung.app.
6. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this document.