LawNeeds Privacy Policy (Mobile Application)
Effective Date: June 2026 | Next Review: December 2026
1. Who We Are
LawNeeds Ltd (‘LawNeeds’, ‘we’, ‘us’, ‘our’) is a UK legal-technology company registered in England and Wales. We operate a mobile application that provides AI-powered legal guidance and connects users with regulated legal professionals.
We are the data controller responsible for the personal data you provide when using the LawNeeds mobile application. We are registered with the Information Commissioner’s Office (ICO) under registration number ZC027272.
This Privacy Policy explains what personal data we collect through the LawNeeds mobile application, the lawful basis on which we process it, your rights, and how to exercise them. Please read it carefully before using the app.
Note: This policy covers the LawNeeds mobile application only. A separate Cookie Policy and Website Privacy Policy governs data collected via the lawneeds.co.uk website. Please refer to those documents for information about tracking on our website.
Personal Data We Collect
2.1 Data You Provide to Us
- Full name and contact details
- Account login credentials
- Details of your legal query or circumstances
- Voice note recordings and audio data provided when using the voice query feature
- Documents, images and files you upload when using the document analysis or AI document generation features (these may contain personal, financial or legal information)
- Content you provide for AI document generation, including the documents generated
- Professional information, if you register as a legal professional
- Payment and billing information
- Communications you send to us via in-app messaging or email
2.2 Data We Collect Automatically (Subject to Consent as Required by Law)
- Device information
- App usage data
- Crash reports and diagnostic data
- Advertising and analytics identifiers
- IP address and approximate location data
- Language and locale preferences
- In-app conversation history and case records (stored securely within the app for the duration of your account)
2.3 Data from Third Parties (Subject to Consent as Required by Law)
- Attribution data from advertising partners to understand how you discovered the app (collected via AppsFlyer, Google Ads, LinkedIn)
2.4 Data Collected from Legal Professionals Using LawNeeds Pro
If you register as a legal professional and use LawNeeds Pro features, we collect additional data, including:
- SRA, BSB or IAA registration details and professional credentials
- Professional profile information, including biography, specialisms, and client onboarding questions you configure
- Client case information you enter for the purposes of AI-assisted legal research or document drafting
- AI-generated legal documents created using the drafting feature
- Case management records, tasks and deadlines
Important: When you enter client data into LawNeeds or LawNeeds Pro, you act as an independent data controller for that client data. You remain responsible for obtaining your clients’ consent and for complying with your own regulatory obligations, including SRA, BSB or IAA requirements. LawNeeds processes that data on your instruction as a data processor.
3. Special Category Data
The information you share with us may include special category data as defined by Article 9 of the UK GDPR. The types of special category data we may process include:
- Religion
- Health or disability information
- Racial or ethnic origin
We treat all such information with the highest level of care. Where we rely on your explicit consent to process special category data, we will present you with a clear consent request within the app before processing. You may withdraw this consent at any time, though this may limit our ability to provide certain guidance.
Where we process special category data under another ground (for example, where processing is strictly necessary for establishing, exercising or defending legal claims under Article 9(2)(f)), we will document our justification and apply appropriate safeguards.
4. Lawful Basis for Processing
UK GDPR requires us to have a valid lawful basis for every processing activity. The table below sets out each activity, the basis we rely on and what this means for you.
| Data Activity | Lawful Basis | UK GDPR Article | What This Means for You |
|---|---|---|---|
| Creating and managing your user account | Performance of a contract | Art. 6(1)(b) | We need your name, email address and contact details to set up your account and provide you with access to LawNeeds. |
| Providing AI-powered legal guidance and information | Performance of a contract | Art. 6(1)(b) | We process details about your legal query and circumstances to generate relevant legal information and guidance through our AI assistant. |
| AI document generation | Performance of a contract | Art. 6(1)(b) | We process content you provide to generate legal documents using our AI tool. |
| Storing conversation history and case records | Performance of a contract / Legitimate interests | Art. 6(1)(b) & (f) | We retain your in-app chat history, uploaded documents, and case records so you can access your legal information over time. You may request deletion of this data at any time. |
| Processing special category data | Explicit consent | Arts. 6(1)(a) & 9(2)(a)/(f) | Certain information you share may constitute special category data under Article 9, including:
Where we rely on your explicit consent, we will present a clear consent request within the app. You may withdraw consent at any time. Where another lawful ground applies (e.g. establishing or defending legal claims under Art. 9(2)(f)), we will document our justification and apply appropriate safeguards. |
| Connecting you with SRA- or IAA-regulated lawyers and law firms | Performance of a contract / Consent | Art. 6(1)(a) & (b) | When you request a referral, we share your relevant details with the selected regulated legal professional. We only do so at your express request and will confirm your consent before sharing. |
| Facilitating in-app lawyer consultations | Performance of a contract / Legitimate interests | Art. 6(1)(b) & (f) | When you book and attend an in-app consultation, we process scheduling information, consultation content, and outcomes. Consultation fees are charged separately from your subscription. Records may be retained as set out in Section 9. |
| Processing payments and managing your subscription | Performance of a contract | Art. 6(1)(b) | We process your billing and payment information to facilitate transactions under our subscription-based freemium model, including minutes-based usage, day passes, and separate per-session consultation fees. |
| Sending service-related notifications and legal updates | Performance of a contract / Legitimate interests | Art. 6(1)(b) & (f) | We send messages about your account, case updates and important service information. We may also send relevant legal content updates where we have a legitimate interest in keeping you informed. |
| Sending marketing emails and promotional offers | Consent | Art. 6(1)(a) | We will only send you marketing communications if you actively opt in. You may withdraw consent at any time by tapping ‘Unsubscribe’ in any email or through your in-app notification settings. |
| App analytics and performance monitoring | Consent / Legitimate interests | Art. 6(1)(a) & (f) | We use Google Firebase to monitor app performance and improve your experience. Where required by law we request your consent. You may withdraw consent at any time through your device settings. |
| Advertising attribution and marketing measurement | Consent | Art. 6(1)(a) | We use AppsFlyer, Google Ads, and LinkedIn to understand how users discover LawNeeds. These providers collect device identifiers and installation/browsing data only with your consent, which you may withdraw at any time via your device settings. |
| Fraud prevention, security monitoring and app protection | Legitimate interests | Art. 6(1)(f) | We monitor device and usage signals to detect fraudulent activity, prevent abuse of our platform and protect our users and systems. |
| Complying with legal obligations (e.g. data subject requests, law enforcement) | Legal obligation | Art. 6(1)(c) | Where we are required by law or a court order to retain or disclose data, we will do so. We will notify you where we are legally permitted to. |
| LawNeeds Pro: legal research, drafting and case management (legal professionals only) | Performance of a contract / Legitimate interests | Art. 6(1)(b) & (f) | For solicitors and immigration advisers using LawNeeds Pro, we process professional profile data, client case information entered for research or AI drafting, and case management records. Processing is based on the Pro subscription contract. Client data entered into LawNeeds Pro is processed on your instruction as a data controller; you remain responsible for your clients’ consent and your own regulatory obligations. |
5. How We Use Your Data
In addition to the processing activities described above, we use your personal data to:
- Personalise your experience and tailor legal guidance to your specific circumstances
- Facilitate connections with SRA-regulated law firms, IAA-regulated immigration advisers and pro bono legal providers
- Operate our subscription-based freemium model (including minutes-based usage for advanced features, day passes, and separate per-session consultation fees) and process transactions
- Enable AI document generation, document analysis, and in-app consultation booking
- Support LawNeeds Pro features including AI-assisted legal research, drafting, proofreading, and case management for registered legal professionals
- Store your conversation history, uploaded documents and AI-generated documents securely in-app for your reference
- Detect and investigate fraud, security breaches or misuse of the app
- Fulfil our legal and regulatory obligations
6. Analytics, Diagnostics and Advertising
6.1 Analytics and Diagnostics
We use third-party tools to monitor app performance, diagnose crashes and understand usage patterns. These tools may collect device identifiers and usage events. Where required by applicable law, we will request your consent before enabling analytics data collection. You may withdraw consent at any time through your device privacy settings.
6.2 Advertising Attribution
We use AppsFlyer, Google Ads, and LinkedIn to measure the effectiveness of our marketing campaigns and understand which channels bring users to LawNeeds. These providers may collect device identifiers and installation or browsing events solely for attribution and reporting purposes. We do not sell your personal data. These services operate only with your consent, which you may withdraw at any time via your device settings.
7. Data Sharing and Disclosure
We do not sell, rent or trade your personal data. We share your data only in the following circumstances:
7.1 Regulated Legal Professionals
When you request a referral or in-app consultation, we share the relevant details of your query and contact information with the selected SRA-regulated law firm, IAA-regulated immigration adviser or pro bono provider. We do so only at your express request and with your confirmed consent.
7.2 Technology and Service Providers
We share data with trusted third-party processors who support the operation of the app under written data processing agreements. These include:
- Amazon Web Services (AWS) — cloud hosting and data storage
- OpenAI — AI language model processing to power our legal guidance assistant and document generation feature
- Google Firebase — app analytics and performance monitoring
- AppsFlyer — marketing attribution and analytics
- Google Ads — advertising measurement
- LinkedIn— advertising attribution and marketing measurement (consent-based)
- Stripe — to facilitate subscription and consultation fee payments
All processors are contractually required to protect your data, process it only on our instructions and comply with applicable data protection law.
7.3 Legal and Regulatory Disclosures
We may disclose your personal data to law enforcement agencies, regulators or courts where required by law, or where necessary to protect the rights, property or safety of LawNeeds, our users or others.
8. International Data Transfers
Some of our service providers process data outside the United Kingdom. Where data is transferred to a country not recognised as providing an adequate level of data protection, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the ICO or UK Secretary of State
- Adequacy regulations where the destination country has been approved
- Binding Corporate Rules where applicable
You may request details of the specific safeguards in place for any transfer by contacting us at support@lawneeds.co.uk.
9. Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are set out below:
| Data Category | Retention Period |
|---|---|
| Beta test participants | Up to 12 months following the end of the beta programme |
| Active user accounts and account data | For the duration of your account and for 6 months following account deletion, to allow for query resolution |
| In-app conversation history, uploaded documents and AI-generated documents | For the duration of your account. On account deletion, conversation history and uploaded files are deleted within 30 days, unless retention is required by law |
| Financial records and subscription billing data | 6 years in accordance with HMRC requirements |
| In-app lawyer consultation records | Up to 7 years where required by legal professional regulations or our legitimate interests in resolving disputes |
| Legal correspondence and referral records | Up to 7 years where required by legal professional regulations |
| LawNeeds Pro case management records (legal professionals) | Retained for the duration of the Pro subscription and for 7 years thereafter, in accordance with SRA/Law Society record-keeping requirements. Legal professionals should maintain their own records as required by their regulator. |
| Analytics and advertising attribution data | As determined by the relevant third-party processor’s data retention policy (typically 13–25 months). See provider privacy policies for details. |
When your data is no longer required, we securely delete or anonymise it.
10. Security
We take the security of your personal data seriously. Our measures include:
- Encryption of data in transit and at rest
- Strict access controls and role-based permissions for staff
- Regular security monitoring and vulnerability assessments
- Contractual security obligations imposed on all processors
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO in accordance with our obligations under UK GDPR.
11. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request that inaccurate or incomplete data is corrected
- Right to erasure (‘right to be forgotten’): to request deletion of your data where we no longer have a lawful basis to hold it
- Right to restriction: to request that we limit how we use your data in certain circumstances
- Right to data portability: to receive your data in a structured, commonly used format
- Right to object: to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
- Rights relating to automated decision-making: to request human review of any solely automated decision that significantly affects you (see also Section 11a below)
To exercise any of these rights, please contact us at support@lawneeds.co.uk. We will respond within one calendar month. We may ask you to verify your identity before acting on a request.
11.1 Automated Processing and AI-Generated Guidance
LawNeeds uses AI technology to provide automated legal information based on the details you provide. This processing involves automated assessment of your legal circumstances to generate relevant guidance. You should be aware that:
- AI-generated guidance is provided for informational purposes only and does not constitute legal advice.
- The AI assistant is powered by a large language model trained on legal and general data, supplemented by a proprietary LawNeeds legal dataset.
- AI responses are subject to verification systems intended to reduce inaccuracies, but may not always be complete or current. You should always seek professional legal advice for decisions that significantly affect you.
- Where any automated output significantly affects your legal position, you have the right under Article 22 UK GDPR to request human review of that output. To exercise this right, contact us at support@lawneeds.co.uk.
12. Complaints
If you have a concern about how we handle your personal data, we ask that you first contact us directly so that we have the opportunity to address it:
- Email: support@lawneeds.co.uk
- Post: LawNeeds Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ
We aim to acknowledge your complaint within 14 working days and resolve it within 30 days.
If you remain dissatisfied with our response, or if you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:
- ICO Website: www.ico.org.uk/make-a-complaint
- ICO Helpline: 0303 123 1113
- ICO Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
You also have the right to seek a judicial remedy if you consider that your rights have been infringed.
13. Updates to This Policy
We review this Privacy Policy at least every six months and whenever there are material changes to our processing activities. If we make significant changes, we will notify you via an in-app notification or by email before the changes take effect. The updated policy will always show the effective date at the top of this document.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- General Enquiries: info@lawneeds.co.uk
- Data Protection: support@lawneeds.co.uk
- Post: LawNeeds Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ