1. Who We Are
Loyal Sidekick is operated by TK Strategies Limited, a company registered in England and Wales. For data enquiries contact: alan@tkstrat.net.
2. What Data We Collect and Why
- Account data — name and email via Clerk, used to manage your account and enforce usage quotas.
- Usage data — number of analyses run this month, to manage your service quota.
- Analysis content — your problem statement, persona selection, diagnostic responses, and AI-generated output. Retained for up to 30 days then automatically and permanently deleted.
- Service logs — anonymised usage records (action type, token volume) retained for up to 12 months for billing verification.
We do not collect payment information directly. We do not use tracking cookies or behavioural advertising technologies.
3. Legal Basis for Processing (UK GDPR)
- Contract performance (Article 6(1)(b)) — processing your inputs and delivering analysis is necessary to provide the service.
- Legitimate interest (Article 6(1)(f)) — retaining anonymised usage logs for service quality and abuse prevention.
4. How Loyal Sidekick Uses Claude (AI Processing)
Loyal Sidekick is powered by Claude, an AI system developed by Anthropic, PBC (anthropic.com). Your inputs are transmitted to Anthropic’s API to generate responses. Anthropic acts as a data processor on our behalf.
Anthropic does not use data processed through its commercial API to train its AI models. Anthropic may retain API inputs/outputs for up to 30 days for safety monitoring only.
During analysis, the service uses Anthropic’s real-time web search capability. No personally identifiable information beyond your problem statement is transmitted to search infrastructure.
5. Data Retention
| Data | Retention |
|---|
| Analysis content (problem statement, persona, output) | 30 days, then permanently deleted |
| Account profile (name, email, usage quota) | Duration of account |
| Anonymised usage logs | 12 months |
| Anthropic API inputs/outputs (safety monitoring) | Up to 30 days (Anthropic; not used for training) |
6. International Data Transfers
Anthropic processes API data in the United States under Standard Contractual Clauses. Clerk and Supabase may also process data outside the UK; each maintains UK GDPR-compliant transfer safeguards.
7. Sensitive Inputs — Please Read
Do not submit any of the following:
- Personally identifiable information about individuals who have not consented to its use in an AI-powered service
- Legally privileged communications or confidential legal advice
- Commercially sensitive information — trade secrets, unpublished financial data, unreleased product plans
- Information classified under any government, military, or organisational security framework
- Health, financial, or biometric data relating to identifiable individuals
- Information subject to a non-disclosure agreement or regulatory restriction
8. AI-Generated Content — Limitation
Analysis produced by Loyal Sidekick is generated by an AI system and may be incomplete, inaccurate, or biased. Loyal Sidekick does not provide professional legal, financial, or strategic advice. Verify significant conclusions through appropriate professional sources.
9. Your Rights
Under UK GDPR you have the right to access, rectify, erase, restrict, object to, and receive a portable copy of your data. To exercise any right, contact alan@tkstrat.net. You may also lodge a complaint with the ICO at ico.org.uk. California residents have rights under CCPA/CPRA; we do not sell personal information.
10. Changes to This Notice
We may update this notice from time to time. Continued use after an update constitutes acceptance. For significant changes we will notify active users by email where practicable.