How AI reading works and what you agree to

Last updated 25 October 2026 · Agreement version cloud-ai-auto-3 (AI reading: automatic checks and Ask AI to read it), and the earlier cloud-ai-2 (Send to AI)

AI reading is optional, and part of Taxdose Pro. Taxdose works fully without it. One agreement, cloud-ai-auto-3, covers both ways it can be used, with the same hiding of personal details and the same preview:

• Automatic AI checks. When your phone can't read a document well, Taxdose offers to have AI check it: "Check with AI?". You see exactly what would be sent and tap Send or Don't send. If you turn on "Send without previewing" in Settings, hard documents are sent for checking without asking you each time. You can turn checks off in Settings.
• Ask AI to read it. You choose one hard document, see exactly what will be sent, and tap "Send to AI".

Every decision, sent or not, goes on a list on your phone, "What was sent to AI", without the contents. This page explains it all, then shows the exact words you agree to in the app.

Automatic AI checks (Taxdose Pro)

When a document is checked

Taxdose reads every document on your phone first, using fixed rules. Most of the time that's all it needs, and documents your phone reads clearly are never sent. A document is checked by AI only if one of these is true:

• a key figure (an amount, a date, who paid you, or the tax) isn't certain;
• the document's own sums don't add up (for example, gross pay minus deductions doesn't equal net pay);
• Taxdose can't tell what kind of document it is;
• two readings on your phone disagree.

Bank statements and pension documents are never sent. Some documents AI doesn't help with, such as tax coding notices and foreign-language documents, aren't sent either.

How you agree, and how to stop

1. You agree once. Taxdose offers the agreement when you start, when you upgrade to Taxdose Pro, or the first time a document is hard to read. You can say "Not now" and nothing is sent.
2. Then you see each one first. When a document is hard to read, Taxdose prepares what would be sent, with your personal details hidden, and lists it under "Check with AI?". Nothing has left your phone at this point. Tap Review to see exactly what would go, page by page, and what was hidden, then tap Send or Don't send. The list stays on your phone, without the pictures or text, until you decide, even if the app is locked or restarted; the preview is prepared again on your phone when you open it.
3. Or send without previewing. If you turn on "Send without previewing" in Settings (it's off unless you turn it on), hard documents are sent for checking without asking you each time. While a check runs, the document shows "Checking with AI…". Each one is still listed in "What was sent to AI".
4. Turn it off in Settings with "Check hard documents with AI". Nothing more is sent after that, and your agreement stays on record so you can turn it back on.
5. Withdraw in Settings › Your choices. This stops all AI reading, automatic checks and Ask AI to read it alike, empties the "Check with AI?" list and records your withdrawal on our server. A check already under way at that moment may still finish.

What is sent

• The text of up to 4 pages of that document, with your personal details hidden.
• A picture of a page as well, only when the page has no clear text (for example a photo or a scan). The picture has your personal details blacked out, and the text your phone read from it goes with it, hidden the same way.
• Nothing else from your phone: not your other documents, your records, your name or your passphrase.

What is hidden first, on your phone

Your name and other people's names, your home address and postcode, your National Insurance number, your tax reference (UTR), your date of birth, bank and account numbers, sort codes, IBANs and card numbers, staff, payroll and employee numbers, NHS and GMC numbers, email addresses and phone numbers, signatures, sick, maternity and other statutory pay lines, and anything about patients (a person billed on an invoice is treated as a patient and hidden).

Postcodes are hidden, and a name that's hidden in one place is hidden wherever else it's printed.

What is sent as it is

AI needs these to check your figures, so they're not hidden:

• who paid you: the names of employers, NHS trusts, practices, agencies, shops and professional bodies. A payer's business address can be sent too, for example the street and town of a practice or trust printed on a payslip or invoice;
• amounts, dates (other than dates of birth), tax codes and their markers (such as W1 or M1), the NI category letter, pension tier and student loan plan;
• your employer's PAYE reference, and invoice and receipt numbers;
• ordinary words, such as the names of deductions.

Checked twice before it goes

Taxdose hides these details automatically. It can occasionally miss something, so check the preview before you send. Before anything is sent:

• Taxdose reads each outgoing page again, and won't send a page where it can still find one of your details. That document is listed as "Not sent" in "What was sent to AI".
• Our server also refuses any page whose text still shows something shaped like a National Insurance number (including one split across lines or boxes), a sort code with an account number, or a UK IBAN. Nothing is sent to AI and nothing is charged.

In our tests on invented documents, none of 781 outgoing requests contained any of the personal details we had planted in them.

Who reads it

• The text and pictures go from your phone to our server, hosted by Supabase in London.
• Our server passes them to OpenAI, which checks the figures for us. The main reader is OpenAI's gpt-6-luna model. If its reading leaves something unclear (for example a figure nobody could read, or a disagreement), a second OpenAI model, gpt-5.4-mini, reads the same hidden text and pictures. Nothing more is sent for a second reading.
• OpenAI may process them in the United States. We rely on the UK International Data Transfer Addendum to the standard contractual clauses in OpenAI's data processing agreement.
• OpenAI doesn't use them to train its models. We ask it not to store them as part of the request.
• OpenAI may keep them for up to 30 days to check for misuse, then deletes them. If its safety checks flag something, it may keep it longer for review.

What we keep

• Not the text, not the pictures, and not what AI read from them. They exist on our server only while the check runs, and go back to your phone only.
• Your agreement, recorded the same way for both ways of using AI (see "What we keep" below).
• A count of the pages checked, which comes out of your 200-page allowance for the tax year. When a second AI model also reads a document, its pages count too.
• A fingerprint of each page sent (see "What was sent to AI" below).
• On your phone, Taxdose notes which fields AI checked, and how many, never the values.

What you see

• Every value AI reads or checks is marked "Checked by AI". Tap it to see what was sent, what was hidden and what AI filled in, confirmed or read differently.
• When two readings disagree, Taxdose shows both and asks you to check.
• When your phone and AI agree and the sums add up, the document may be marked "Ready", so you can confirm it in one step. Nothing is ever confirmed for you: you still confirm every figure, and nothing counts until you do.

Ask AI to read it, one document at a time

When it's offered

If a document is hard to read (a blurry photo, an unusual layout), Taxdose may offer: "Hard to read? Ask AI to read it." Nothing happens unless you tap it. This works whether or not automatic checks are on.

Step by step

1. You agree, once. The first time, Taxdose shows you the agreement below (cloud-ai-auto-3, the same one as for automatic checks). You can say "Not now" and carry on as before.
2. Your phone hides your details. Taxdose prepares the text of up to 4 pages, and a picture of a page when it has no clear text, with your personal details hidden, exactly as for automatic checks (see "What is hidden first" above).
3. It checks its own work. Taxdose reads each outgoing page again. If it can still find one of your identifiers, that page isn't sent.
4. You see exactly what will go. The preview shows the very pictures and text that will be sent. If you see something you don't want sent, tap Cancel. That's listed too.
5. You tap "Send to AI". Only then does anything leave your phone, for that one document.
6. You check what AI read. Each value is marked "Read by AI · check it" and doesn't count until you've checked it against the page and confirmed it.

Ask AI to read it uses one reader, OpenAI's gpt-6-luna, through our server in London, as described in "Who reads it" above.

If you agreed to Send to AI before 25 October 2026

If you agreed to the earlier Send to AI agreement (cloud-ai-2) and not to cloud-ai-auto-3, Ask AI to read it keeps working under it, as it always did: it sends only blacked-out pictures of up to 4 pages, after you see them. That way blacks out more than automatic checks do: names (yours, other people's, employers' and practices'), addresses and postcodes, your National Insurance number, tax and PAYE references, payroll and other reference numbers, bank account numbers, sort codes, IBANs and card numbers, email addresses, phone numbers, web addresses, NHS and GMC numbers, dates of birth and other dates that could be one, sick, maternity and other statutory pay lines, and signatures and handwriting. Amounts and tax codes stay visible. Its exact wording is quoted at the end of this page.

What we keep

This applies to both automatic checks and Ask AI to read it.

• Not the pictures or text, and not what AI read from them. Those go back to your phone only.
• Your agreement: yes or no, the version, a fingerprint of the exact wording, the app version, iPhone or Android, and the time. Each record is chained to the one before, so it can't be changed quietly, and your phone keeps its own receipt.
• A count of the pages you use, so we can apply your 200-page allowance for the tax year.
• A fingerprint of each page sent (SHA-256), kept with the page count. It can't be turned back into the page, but it shows exactly which pages a request carried, so we can check a question or complaint against your phone's own list.
• All of these are linked to a random ID made on your phone, not to your name. You can see it in Settings › Your choices.

We keep agreement records for 6 years after your last one, and page counts and their fingerprints for the current and previous tax year. A clean-up runs on our server every day and deletes records once their time is up. The privacy notice has the full details.

What was sent to AI

Your phone keeps its own list of every decision about sending a document to AI: in Settings › Your choices › "What was sent to AI".

• Each entry says: when, which document (shown by name on your phone only), the agreement in force, how many pages, how many details of each kind were hidden, how it went (you checked the preview, you sent it without previewing, or you asked AI yourself), what happened (sent, not sent because you chose not to, or not sent because a personal detail could still be read), and our server's reference for the request.
• It never holds the contents: no values, words or pictures. It holds the same page fingerprints our server keeps, so the two can be compared.
• It stays on your phone, inside your encrypted records. You can save or share it as a small file, for example with us if you have a question or a complaint. The file has no document names, values or pictures.

Patient information

Please don't add or send pages that show patient details. Taxdose is for your own tax records. Both kinds of AI reading hide what looks like patient details, but can't recognise everything.

Some of your own documents may show something sensitive by accident, such as a union subscription on a payslip. It's read only to find your figures, and nothing from it is kept on our server. By agreeing to either kind of AI reading, you give your explicit consent to this. Automatic checks hide sick, maternity and other statutory pay lines, but the name of a union or professional body is sent as a payer name, and a membership receipt (from the BMA, for example) can show that you belong to a trade union.

Changing your mind

• Turn automatic checks off in Settings › "Check hard documents with AI". Nothing more is sent automatically.
• Turn "Send without previewing" off in Settings, and you'll see each document before it's sent again.
• Withdraw any time in Settings › Your choices ("Withdraw"; "Delete my AI data on the server" also withdraws). One withdrawal stops both automatic checks and Ask AI to read it, and empties the "Check with AI?" list. Nothing new is sent after that. A reading already under way at that moment may still finish.
• Delete what our server holds with Delete all data in Settings. See Deleting your data.
• Values AI already read stay in your records until you change or delete them.

If we ever change the wording, the app asks you to agree again before anything more is sent. If you agreed to the earlier automatic-check wording (cloud-ai-auto-2), nothing more is sent under it: the app shows "We've updated the AI agreement" and asks you once, in one tap, to agree to cloud-ai-auto-3. Until you do, AI reading stays off. You can also agree or withdraw in Your choices.

What AI doesn't do

AI only suggests or checks figures and dates from the page, for you to confirm. It doesn't make decisions about you, work out your tax or send anything to HMRC. Taxdose's tax sums use fixed rules, not AI. Automatic limits (your page allowance, daily limits and misuse checks) can pause AI reading, including automatic checks; if you think that's wrong, email privacy@praelion.com and a person will look at it.

The exact wording you agree to

AI reading: automatic checks and Ask AI to read it

This is the text shown in the app, word for word. Its version is cloud-ai-auto-3. Our server only accepts an agreement whose fingerprint (SHA-256) matches this exact text:

a759531474a8706b1f830f43b4acb897fafd64b9a28b4726b740b9b8876dca7d

Let AI check hard documents

Optional. Taxdose works fully without it.

When your phone can’t read a document well, Taxdose offers to have AI check it. Documents your phone reads clearly are never sent. You can also ask AI to read a document yourself.

Before it goes: you see exactly what will be sent, page by page, and what was hidden. Nothing leaves your phone until you tap Send. If you turn on “Send without previewing” in Settings, hard documents are sent for checking without asking you each time.

What is sent: the text of up to 4 pages of that document. When a page has no clear text, a picture of the page is sent too, with the text your phone read from it. Text and picture both have your personal details hidden before anything leaves your phone: your name, home address, National Insurance number, date of birth, bank and account numbers and sort codes, staff and payroll numbers, and anything about patients. Amounts, dates, tax codes and who paid you stay, because that’s what AI checks.

Taxdose hides these details automatically. It can occasionally miss something — check the preview before you send. Taxdose won’t send a page where it can still find one of your identifiers.

Some documents can show that you belong to a trade union, for example a BMA membership receipt. By agreeing, you give your explicit consent for that information to be sent for the check.

Who reads it: Taxdose’s server in London passes it to OpenAI, which may process it in the United States. OpenAI doesn’t use it to train its models. It may keep it for up to 30 days to check for misuse, then deletes it.

What we keep: not what was sent, and not what was read from it. We keep this agreement, a count of pages and a fingerprint of each page sent, which can’t be turned back into the page, linked to a random ID made for this phone, not to your name. Your phone keeps its own list of each document sent or not sent, without its contents, in Your choices. You can share it with us if you have a question or a complaint.

Every value AI reads or checks is marked “Checked by AI”. It can be wrong, so you still confirm every figure, and nothing counts until you do.

Turn automatic checks off at any time in Settings. You can withdraw in Settings › Your choices.

Taxdose is made by Praelion Ltd. More at www.taxdose.co.uk/ai.

Send to AI (earlier agreement)

This is the text shown in the app, word for word, to people who agreed before 25 October 2026. New agreements use cloud-ai-auto-3 above. Its version is cloud-ai-2. Our server only accepts an agreement whose fingerprint (SHA-256) matches this exact text:

8f6892fba9fa4b3b9103bf08c0266617e75fee11790a8c0ead90a5adec2211cb

Ask AI to read hard documents

AI reading is optional. Taxdose works fully without it.

When a document is hard to read, you can ask AI to read it. Nothing is sent unless you tap “Send to AI”, one document at a time.

What is sent: pictures of up to 4 pages of that document, and nothing else. Before anything leaves your phone, Taxdose blacks out names (yours, other people’s, employers’ and practices’), addresses and postcodes, your National Insurance number, tax and PAYE references, payroll and other reference numbers, bank account numbers, sort codes, IBANs and card numbers, email addresses, phone numbers, web addresses, NHS and GMC numbers, dates of birth and other dates that could be one, sick, maternity and other statutory pay lines, and signatures and handwriting. Amounts and tax codes stay visible, because that’s what AI needs to read. Blacking out is automatic and can miss something, so Taxdose shows you exactly the pictures that will be sent, and won’t send a page where it can still see one of your identifiers.

Who reads it: Taxdose’s server in London passes the pictures to OpenAI, which reads the figures and dates for us. OpenAI may process them in the United States. It doesn’t use them to train its models. It may keep them for up to 30 days to check for misuse, and longer if its safety checks flag a picture, then deletes them.

What we keep: not the pictures, and not what was read from them. We keep this agreement and a count of the pages you use, linked to a random ID made for this phone, not to your name. You can see the ID in Your choices.

Patient information: don’t send pages that show patient details. If a page shows something sensitive about you, such as a union subscription, you agree to it being read only to find your figures.

The values AI reads are always shown for you to check against the page. Nothing counts until you confirm it.

You can withdraw at any time in Settings › Your choices. Nothing new is sent after that; a reading already under way may still finish.

Taxdose is made by Praelion Ltd. More at www.taxdose.co.uk/ai and in our privacy notice at www.taxdose.co.uk/privacy.

Questions

Email privacy@praelion.com. Please include your random ID from Settings › Your choices if your question is about your records.

Version history