PRIVACY POLICY

Solstice Software Ltd is a company registered in England and Wales (Company Number: 17030027). We design and build mobile applications, web applications, and software.

Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Contact: hello@solsticesoftware.dev
Website: solsticesoftware.dev

This Privacy Policy applies to all Services we provide, including but not limited to our websites, mobile applications, web applications, APIs, and any other software or services we offer now or in the future. When we release new Services, they are automatically covered by this policy unless we publish a separate policy for them.

3.1 INFORMATION YOU PROVIDE DIRECTLY

• ▸ Account information (such as email address, name, or username) when you create an account or contact us
• ▸ Content and data you submit through our Services
• ▸ Communications you send to us (support enquiries, feedback)
• ▸ Payment information when you make a purchase (processed by our third-party payment providers)

3.2 INFORMATION COLLECTED AUTOMATICALLY

• ▸ Usage data (features used, pages visited, actions taken within our Services)
• ▸ Device information (device type, operating system, app version, browser type)
• ▸ Log data (IP address, referring URLs, timestamps)
• ▸ Crash reports, performance diagnostics, and error logs
• ▸ Approximate location data derived from IP address (not precise GPS location)

3.3 INFORMATION FROM THIRD PARTIES

We may receive information about you from third-party services you connect to our Services, from publicly available sources, or from our business partners. We only collect such information where we have a lawful basis to do so.

We process personal data under the following lawful bases as defined by UK GDPR (Article 6):

• ▸ Contract performance — to provide and maintain our Services
• ▸ Legitimate interests — to improve our Services, ensure security, and prevent fraud
• ▸ Consent — where you have explicitly provided it
• ▸ Legal obligation — to comply with applicable UK and EU law

We use the information we collect to:

• ▸ Provide, operate, maintain, and improve our Services
• ▸ Process transactions and send related information
• ▸ Respond to your enquiries, comments, and support requests
• ▸ Monitor and analyse usage patterns and trends
• ▸ Detect and prevent fraud, abuse, security incidents, or technical issues
• ▸ Comply with applicable legal obligations
• ▸ Send you technical notices, updates, and service-related communications

We do not sell, trade, or rent your personal information to third parties.

We share information only in the following circumstances:

5.1 SERVICE PROVIDERS

We use third-party service providers to help deliver our Services. These providers are contractually obligated to protect your information and may only use it for the purposes we specify. We share information with providers in categories including, but not limited to:

• ▸ Cloud infrastructure, hosting, and storage providers
• ▸ Database and backend service providers
• ▸ Analytics, monitoring, and performance providers
• ▸ Payment processing and financial service providers
• ▸ Customer support and communication platforms
• ▸ Authentication and security providers
• ▸ Email delivery and notification services
• ▸ Error tracking and crash reporting services

From time to time, we may engage additional service providers or modify our existing partnerships. All service providers are bound by data processing agreements and are required to comply with applicable data protection legislation.

5.2 LEGAL REQUIREMENTS

We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Solstice Software Ltd, our users, or the public.

5.3 BUSINESS TRANSFERS

In the event of a merger, acquisition, or sale of assets, user information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Retention periods vary depending on the type of data and the context in which it was collected:

• ▸ Account data: retained for the duration of your account, plus up to 2 years after deletion
• ▸ Usage and analytics data: retained in identifiable form for up to 13 months, then aggregated
• ▸ Log files: retained for up to 90 days for security and debugging purposes
• ▸ Communications data: retained for up to 2 years from last contact

You may request deletion of your data at any time (see Section 9, Your Rights).

7.1 TYPES OF COOKIES

• ▸ Essential cookies: necessary for basic functionality of our Services
• ▸ Analytics cookies: help us understand how our Services are used. We obtain your consent before placing non-essential analytics cookies where required by law.
• ▸ Functional cookies: remember your preferences and settings

7.2 MANAGING COOKIES

You can control and manage cookies through your browser or device settings. Please note that disabling certain cookies may affect the functionality of our Services.

Some of our mobile applications display banner advertisements served by Google AdMob, a third-party advertising service operated by Google LLC. AdMob may collect and process certain information automatically when you use our apps, including:

• ▸ Device identifiers (such as advertising ID, Android ID, or IDFA)
• ▸ IP address
• ▸ App interaction data (such as which screens you view and how you interact with ads)
• ▸ Device information (device model, operating system version, screen size)

This information is used by Google to serve relevant advertisements and to measure ad performance. Google's use of this data is governed by its own privacy policies. For more information about how Google uses data from apps that use its services, please visit: policies.google.com/technologies/partner-sites

8.1 OPTING OUT OF PERSONALISED ADS

You can limit personalised advertising on your device using the following settings:

• ▸ Android: Settings → Google → Ads → "Delete advertising ID" or "Opt out of Ads Personalisation"
• ▸ iOS: Settings → Privacy & Security → Tracking → disable tracking for our app, or Settings → Privacy & Security → Apple Advertising → disable "Personalised Ads"

8.2 APP TRACKING TRANSPARENCY (iOS)

On iOS 14.5 and later, our apps will request your permission via Apple's App Tracking Transparency (ATT) framework before collecting your device's advertising identifier (IDFA). If you decline, we will not track your activity across other companies' apps and websites for advertising purposes. You can change your choice at any time in Settings → Privacy & Security → Tracking.

As a data subject under UK GDPR, you have the following rights:

• ▸ Right of access: request a copy of the personal data we hold about you
• ▸ Right to rectification: request correction of inaccurate or incomplete data
• ▸ Right to erasure: request deletion of your personal data ("right to be forgotten")
• ▸ Right to restrict processing: request that we limit how we use your data
• ▸ Right to data portability: receive your data in a structured, machine-readable format
• ▸ Right to object: object to processing based on our legitimate interests
• ▸ Right not to be subject to automated decision-making without human review

To exercise any of these rights, contact us at: hello@solsticesoftware.dev

We will respond within one calendar month as required by UK GDPR.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• ▸ Website: ico.org.uk
• ▸ Telephone: 0303 123 1113

Our Services are not directed to children under 13 years of age (or under 16 where a higher age threshold applies under UK GDPR). We do not knowingly collect personal information from children under 13.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at hello@solsticesoftware.dev and we will take prompt steps to delete such information.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• ▸ Encrypted data transmission (HTTPS/TLS)
• ▸ Encryption of data at rest where appropriate
• ▸ Access controls limiting who can access personal data
• ▸ Regular security review of our systems and third-party providers

No method of internet transmission or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Our Services may use infrastructure and service providers located outside the United Kingdom and European Economic Area. Where personal data is transferred to countries that do not provide an adequate level of data protection, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses or equivalent mechanisms.

Our Services may contain links to third-party websites, applications, and services (including app stores operated by Apple Inc. and Google LLC). We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you use.

We may update this Privacy Policy from time to time to reflect changes in our practices, our Services, or for legal, operational, or regulatory reasons. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by providing notice through our Services.

Continued use of our Services after changes take effect constitutes your acceptance of the revised policy.

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: