Introduction
Slantforge (“we,” “our,” or “us”) builds mobile applications for iOS and Android. This policy explains, in general terms, what data our apps handle, why we handle it, and what control you have over it. It applies to every Slantforge app that does not publish its own privacy policy. Where an app does publish its own policy, that policy takes precedence for that app.
The Short Version
- We collect as little as possible. Only what an app needs to work, and nothing gathered “just in case.”
- We never sell your data. We do not sell, rent, or trade personal data, and we do not share it for advertising.
- Sensitive data stays local where it can. Health, photo, and on-device content is processed on your device unless a feature you use explicitly requires otherwise.
- You stay in control. Permissions are optional, revocable in your device settings, and you can ask us to delete your data at any time.
What We Collect
The exact data an app handles depends on its features. Across our apps, the categories are:
- Content you create: entries, notes, settings, and preferences you enter into the app.
- Account details: where an app offers accounts, an email address and authentication credentials. Apps that work without an account do not ask for these.
- Device and diagnostic data: device model, operating system version, app version, crash reports, and anonymous usage events such as which screens are opened.
- Purchase status: whether a subscription or in-app purchase is active. Payments are handled by Apple or Google — we never see your card details.
- Permission-gated data: health records, photos, camera, notifications, or location, only where a feature needs it and only after you grant permission.
What We Don't Collect
- Advertising identifiers for third-party ad targeting
- Your contacts, messages, or browsing history
- Payment card numbers or bank details
- Background location tracking
How We Use It
- To provide the features you are using, and to sync your data if you ask us to
- To keep your account secure and prevent abuse
- To diagnose crashes and fix bugs
- To understand, in aggregate, which features are worth improving
- To respond to you when you contact support
We do not use your data for automated decision-making that has legal effects, and we do not build advertising profiles.
Legal Bases (UK / EU)
Where UK GDPR or EU GDPR applies, we rely on:
- Contract: to deliver the app features and any subscription you have bought.
- Legitimate interests: to keep the apps secure, stable, and free of abuse.
- Consent: for optional permissions such as health data, photos, notifications, or location. You can withdraw consent at any time in your device settings.
- Legal obligation: where we are required to retain records, for example for tax purposes.
Storage and Security
Data that stays on your device is held in the operating system's own app-private storage. Where an app does sync or back up data, it travels over encrypted connections (TLS) and is stored on access-controlled servers hosted in the UK, the EU, or by our processors listed below.
No system is perfectly secure, but we limit who can access production data, keep credentials out of our apps, and patch our dependencies regularly.
Data Retention
- On-device data: kept until you delete it or uninstall the app.
- Account and synced data: kept while your account is active, and deleted within 30 days of you asking us to close it.
- Diagnostics and analytics: retained in aggregated or anonymous form according to our providers' standard retention periods.
- Support correspondence: kept for up to two years so we can follow up on recurring issues.
Third-Party Services
Depending on the app, we may use the following categories of processor. Each has its own privacy policy, and each only receives what it needs to do its job:
- Apple and Google: app distribution, in-app purchases, and push notifications.
- Crash and analytics providers: anonymous diagnostics and usage statistics.
- Hosting and database providers: storing account and synced data for apps that offer it.
- Subscription management providers: validating purchase and entitlement status.
- Email providers: sending account and support email.
Where data is transferred outside the UK or EEA, we rely on the UK Addendum and Standard Contractual Clauses, or an equivalent safeguard.
Your Rights
You can exercise any of these by emailing us. We will respond within one month.
- Access: ask for a copy of the data we hold about you.
- Correction: ask us to fix inaccurate data.
- Deletion: ask us to delete your account and its data.
- Portability: ask for your data in a machine-readable format.
- Objection and restriction: ask us to stop or limit a particular use.
- Withdraw permissions: revoke health, photo, camera, notification, or location access in your device settings at any time.
If you are in the UK and unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Children's Privacy
Our apps are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to This Policy
We may update this policy as our apps change. Significant changes will be reflected in the “Last updated” date above, and where the change is material we will highlight it in the app. Continued use after an update constitutes acceptance of the revised policy.
Contact Us
For any privacy question, or to exercise the rights above, contact us at: