Privacy Policy

Effective Date: 28 / 11 / 2025
Company Name: Alzenware Limited
Contact:

1. Introduction

Alzenware Limited (“we”, “us”, or “our”) is committed to building software that respects your privacy. This policy describes how we handle your data when you use our mobile applications and websites (the “Services”).

We are a developer-led company focused on productivity, education, and accessibility. We believe in data minimization, we only collect what is strictly necessary to make our apps work.

2. Information We Collect

a. Information You Provide

• Account Information: If you create an account, we collect your email address to manage your login and identity.
• User Content: Data you explicitly generate within the app (such as notes, configurations, or inputs) is stored to provide the service across your devices.
• Support Inquiries: If you email us for support, we keep a record of that communication to help resolve your issue.

b. Automatically Collected Technical Data

We do not track your precise location (GPS) or use invasive advertising trackers. However, our infrastructure providers may process standard technical data, including:

• Device Information: App version, operating system, and device type (for debugging).
• IP Address: Used strictly for security (preventing abuse) and coarse regional settings (e.g., determining language or currency).
• Crash Logs: Anonymous reports sent to us if the app crashes, helping us fix bugs.

3. Payment Data

We do not store or process your credit card details.

Our apps use third-party "Merchants of Record" (such as Apple App Store, Google Play Store, or Stripe) to handle payments. When you make a purchase, we receive a receipt or token confirming the status of your subscription, but we never have access to your financial information.

4. How We Use Your Information

We use your data solely for the following purposes:

• To operate the Service and sync your data across devices.
• To authenticate your identity (login).
• To verify subscription status (via RevenueCat or Stripe).
• To send transactional emails (e.g., login links or policy updates).
• To comply with legal obligations (e.g., tax and accounting requirements).

5. Third-Party Processors

We rely on trusted third-party infrastructure to operate. We ensure these providers have strict data protection standards. You can view their privacy policies below:

• Supabase (Database & Auth): Privacy Policy
• RevenueCat (Subscriptions): Privacy Policy
• Resend (Email Delivery): Privacy Policy
• Cloudflare (Web Hosting & Security): Privacy Policy
• Sentry (Crash Reporting): Privacy Policy

6. Data Storage and International Transfers

Our commitment is to store application data in regions that best serve the primary user base of each respective application, ensuring fast and reliable service.

Our primary databases are hosted by Supabase in geographically appropriate regions, which currently include data centers in the United States (US), European Union (EU), and Asia-Pacific (APAC).

If your data is collected from the UK or EU but stored on a server outside those regions (e.g., US or APAC), we ensure the transfer is lawful. We do this by relying on legally recognized agreements with our service providers (like Supabase's Data Processing Addendum) to maintain EU data protection standards.

By using our Services, you acknowledge that your data will be hosted in the regional server that is optimized for that particular application's user base. If you need confirmation of the specific server region for the app you are using, please contact us.

7. Data Retention and Deletion

We retain your personal data only as long as your account is active.

• Account Deletion: You may delete your account at any time via the settings menu in our apps or on our website
• Hard Delete: Once an account is deleted, all associated personal data is permanently removed from our servers within 30 days.

8. Security

We take security seriously. We use HTTPS/TLS encryption when transmitting data between your device and our servers. Your data is also encrypted at rest within our database infrastructure.

9. Children’s Privacy

Some of our applications (such as those for AAC/accessibility) may be used by children. However, accounts must be created and managed by a parent or legal guardian.

We do not knowingly collect personal data directly from children under 13 without parental consent. If you believe we have inadvertently collected data from a child without guardian oversight, please contact us immediately, and we will delete it.

10. Your Rights (GDPR & CCPA)

Regardless of where you live, we support your rights to privacy. You have the right to:

• Access the personal data we hold about you.
• Correct inaccuracies in your data.
• Request deletion of your data.

You can exercise these rights simply by emailing us. We will respond to all valid requests within 30 days.

11. Contact

If you have questions about this policy or need to exercise your privacy rights, please contact:

Alzenware Limited