Privacy Policy

Last Updated: 24 July 2026 · NoProblem LLC (operating as The Attaché) · Wyoming, United States

1. Who we are

The Attaché is operated by NoProblem LLC, a limited liability company registered in the State of Wyoming, United States ("we", "our", "us").

This policy explains what we collect, why, where it goes, and what you can do about it. It covers The Attaché mobile application and our website at theattacheja.com (together, the "Service").

If you do not agree with this policy, please do not use the Service.

2. The short version

• The app is free. There are no in-app purchases.
• We store government identity documents for you — this is the most sensitive data we hold and section 3 explains it in detail.
• We do not sell your data. Not to anyone, for any purpose.
• You can delete your account and everything in it from inside the app.

3. Information you give us

Account information

Your first and last name, email address, phone number, country of residence, and a password. Passwords are stored as a cryptographic hash — we cannot read them.

Profile information

Optional details: nationality, country of birth, intended move date to Jamaica, business type and industry, and similar context that lets the app give relevant answers.

Secure ID Vault contents

If you choose to use the ID Vault, you may store identity documents (passport, national ID, driver's licence, birth certificate), government numbers (TRN, NIS, NHT, Voter's ID), business documents, property documents, immigration documents, portal usernames, and uploaded photographs of the above.

We never ask for or store passwords to government or utility portals. Using the vault is entirely optional.

Service and community content

Service requests, crime and safety reports, business listings, property details, and business valuation inputs.

Messages to the AI Concierge

Questions you ask The Attaché AI and the responses. Section 6 explains where those go.

4. Information we collect automatically

Location

With your permission, we collect your device location to show nearby services and parish-level information. You can refuse and the app still works — you select a parish manually instead. You can withdraw permission at any time in device settings.

Usage and device data

Which screens you open, which features you use, device type, operating system version, device identifiers, and IP address. Used to understand what is useful and what is broken.

Face ID

Authentication happens entirely on your device through Apple's system. Your biometric data is never transmitted to us.

5. Why we use it

• To operate the Service and keep your documents available to you
• To personalise answers and recommendations based on your profile
• To process service requests and connect you with providers
• To send service-related messages: confirmations, application status, security notices, receipts
• To send membership and service emails you can unsubscribe from at any time
• To detect and prevent abuse, fraud and unauthorised access
• To comply with law

6. Who we share it with

We do not sell, rent or trade your personal data. We do not share it with data brokers. We do not use it to build advertising profiles.

We share data with these providers only to the extent needed to run the Service:

• Supabase Inc. — database and authentication infrastructure (United States, Oregon)
• Stripe — payment processing. Stripe handles card details directly on their secure pages
• Resend — sending our emails (name and email address only)
• Anthropic — powering AI Concierge responses (the text of your messages, not linked to your identity)
• Apple — crash and performance diagnostics if you opt in

Your ID Vault contents are never shared with any of these providers except Supabase, which stores them. They are not sent to the AI, not used for advertising, and not shared with service providers unless you explicitly ask us to send a specific document.

7. Advertising

The Attaché does not serve advertising. There are no ads in the app at any tier.

8. Payments

The Attaché app is free and contains no in-app purchases. Membership is purchased separately through Stripe, outside the app. We never see or store your full card number.

9. Where your data lives

Your data is stored in the United States (Oregon), operated by Supabase Inc. on SOC 2 Type II certified infrastructure, with encryption in transit and at rest.

If you are in Jamaica, the United Kingdom, Canada, or the European Union, this means your data is transferred to and processed in the United States. By using the Service you consent to that transfer.

Jamaican users: we handle personal data in a manner intended to be consistent with the Jamaica Data Protection Act, 2020.

UK and EU users: transfers rely on standard contractual clauses with our processors.

10. Security

• Passwords stored as cryptographic hashes, never in readable form
• Vault access protected by a separate PIN, distinct from your account password
• Optional Face ID as an additional lock
• Encryption in transit and at rest
• Row-level access controls so one account cannot read another's data

If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

11. How long we keep it

• While your account is open: as long as you keep it
• After you delete your account: personal data and vault contents deleted within 30 days
• Transaction records: retained up to 7 years where tax or accounting law requires
• Backups: deleted data may persist in encrypted backups for up to 90 days before being overwritten

12. Your rights

Wherever you live, you can:

• Access — request a copy of what we hold about you
• Correct — fix anything inaccurate
• Delete — remove your account and personal data (open the app: Profile → Account Settings → Delete Account)
• Export — receive your data in a machine-readable format
• Object — tell us to stop using your data for marketing (unsubscribe link in every email)
• Withdraw consent — where processing relies on consent

For anything else, contact info@theattacheja.com. We aim to respond within 30 days.

UK users may also complain to the Information Commissioner's Office (ico.org.uk). Jamaican users may contact the Office of the Information Commissioner of Jamaica (oic.org.jm).

13. Children

The Service is intended for people 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact info@theattacheja.com and we will delete it promptly.

14. Links to other services

The app links to third-party websites including Jamaican government sites (PICA, TAJ, NHT, Companies Office). We are not responsible for their privacy practices.

15. Changes to this policy

We may update this policy. We will change the "Last Updated" date, and for material changes we will notify you in the app. Continuing to use the Service after a change means you accept it.

16. Contact