GDPR Status

For purposes of the EU/UK General Data Protection Regulation (“GDPR”) and similar laws, REEDLAB is the “controller” of personal data processed through the Services.

Data Protection Officer

We are not required to appoint, and currently have not appointed, a Data Protection Officer. If that changes, we will update this Policy with the relevant contact details.

Third-Party Sites

This Policy does not apply to third-party websites, apps, or services that may link to or integrate with the Services. Those third parties have their own privacy policies.

What We Collect

We collect personal data in three ways: (1) information you provide, (2) information collected automatically, and (3) information from third parties.

Provided By You

Depending on how you use the Services, you may provide identifiers and contact details (such as name, email address, phone number, or mailing address), account credentials and profile information, preferences and settings, communications you send to us (including customer support messages), and any content you submit through the Services (“User Content”).

Collected Automatically

When you use the Services, we may collect usage and device data such as IP address, device identifiers, device type, operating system and app version, browser type, language, referring/exit pages, timestamps, crash logs, performance diagnostics, and how you interact with the Services. We may infer approximate location from IP address. If you enable device permissions and the Services support location-based features, we may collect precise location data as permitted by your device settings.

From Third Parties

We may receive information from third parties such as app stores (e.g., confirmation that you have an active subscription or purchase), payment processors (e.g., transaction status and fraud signals), analytics providers, and maps/location providers, depending on the features you use. We do not receive your full payment card number when a third-party processor handles payments.

Sign in with Apple

If you sign in using Apple ID, Apple shares your name and either your real email address or a private relay address (if you choose “Hide My Email”). We use this solely to create and manage your account.

Purposes

We use personal data to:

• provide, operate, and maintain the Services (including authentication and account management);
• process transactions and manage subscriptions;
• communicate with you about the Services (service messages, support, updates);
• personalize and improve features, performance, and user experience;
• monitor, prevent, and address fraud, abuse, security incidents, and technical issues;
• comply with legal obligations and enforce our Terms.

Marketing

Where permitted by law, we may send marketing communications. You can opt out of marketing emails using the unsubscribe link in those messages. You may still receive non-marketing, service-related communications.

Legal Bases (GDPR)

If GDPR applies, we process personal data only when we have a lawful basis, including:

• Contract (to provide the Services you request);
• Legitimate Interests (to secure, improve, and operate the Services, prevent fraud/abuse, and understand usage—balanced against your rights);
• Consent (for certain optional features and, where required, certain cookies/analytics or location permissions);
• Legal Obligation (to comply with applicable laws). 

Change Of Purpose

If we intend to process personal data for a purpose materially different than the purpose for which it was collected, we will provide notice and, where required, obtain consent before doing so. 

Automated Decisions

We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on you. If that changes, we will update this Policy and provide required information and choices.

Service Providers

We share personal data with vendors and service providers that help us operate the Services (such as hosting, analytics, customer support tools, payment processing, fraud prevention, and security). These providers process data on our behalf and are contractually restricted to using it only to provide services to us. 

Integrations

If you use features that rely on third-party integrations (for example, maps/location features), we may share the relevant information with the provider to deliver that functionality.

Business Transfers

If we’re involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate protections.

Legal And Safety

We may disclose information if we believe it is necessary to comply with law or legal process, respond to lawful requests, enforce our agreements, protect rights and safety, or detect/prevent fraud, abuse, or security incidents. 

No Sale Of Personal Data

We do not sell personal data. We also do not share personal data with third parties for their own direct marketing purposes.

What They Are Used For

We use cookies and similar technologies (such as SDKs and device identifiers) to keep the Services functioning, remember preferences, understand usage, and improve performance.

Choices

You can manage cookies through your browser settings and, where available, consent tools we provide. Some parts of the Services may not function properly if cookies are disabled.

Consent (EEA/UK)

Where required by law (such as in the EEA/UK), we use a cookie consent mechanism for non-essential cookies and similar technologies.

We retain personal data for as long as reasonably necessary to provide the Services and for the purposes described in this Policy. Retention periods vary depending on the type of data, how it’s used, and legal requirements. We may retain certain data longer where necessary for security, fraud prevention, legal compliance, dispute resolution, or enforcement of agreements. 

We use administrative, technical, and organizational safeguards designed to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

Controls

You may be able to access, update, or correct certain account information through the Services. You can opt out of marketing emails by using the unsubscribe link included in those messages, though you may still receive transactional or service-related communications.

Requests

Depending on your location, you may have additional privacy rights, such as the right to request access to, correction of, deletion of, or a copy of your personal information, and the right to opt out of certain processing. If you submit a request, we may take steps to verify your identity before responding. Where required, we provide an appeals process for certain decisions.

Signals

Where applicable, we honor Global Privacy Control (GPC) signals as a request to opt out of certain processing, consistent with applicable law.

Account Controls

You may be able to access, update, or correct certain account information through the Services.

Privacy Rights

Depending on where you live, you may have rights to request:

• access to your personal data;
• correction of inaccurate data;
• deletion of your personal data;
• restriction of processing;
• objection to processing (including objection to processing based on legitimate interests);
• data portability (receiving certain data in a structured, commonly used format);
• withdrawal of consent (where processing is based on consent). 

How To Exercise Rights

Contact us at [email protected]. We may ask you to verify your identity and request. If you use an authorized agent (where allowed), we may request proof of authorization.

Complaints (EEA/UK)

If GDPR applies, you also have the right to lodge a complaint with your local supervisory authority. 

Global Privacy Control

Where applicable, we honor Global Privacy Control (GPC) signals as a request to opt out of certain processing, consistent with applicable law.

REEDLAB is based in the United States, and personal data may be processed in the United States and other countries where we or our service providers operate. If GDPR applies and personal data is transferred outside the EEA/UK to a country that is not recognized as providing an adequate level of protection, we rely on appropriate safeguards (such as Standard Contractual Clauses) or another lawful transfer mechanism. 

The Services are not directed to children under 13 (or a higher age where required by applicable law), and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. We will update the “Last Updated” date when changes are made. If changes are material, we will provide additional notice where required by law.

If you have any questions or comments about this policy or your privacy rights, please contact us:

REEDLAB, Inc.
8 The Green #7826
Dover, DE 19901
United States
[email protected]