Privacy Policy

1. Who we are

This Privacy Policy explains how Knoodlepot Studio (sole trader) collects, uses, and protects your personal data when you use Plain English, Please.

Data controller: Knoodlepot Studio (sole trader)
Email: knoodlepot@knoodlepotstudio.com
ICO registration: ZC143302 — verify here

2. Your rights under UK GDPR

You have the following rights regarding your personal data. Email us at knoodlepot@knoodlepotstudio.com to exercise any of them. We will respond within one calendar month.

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to stop processing your data in certain circumstances.
• Portability — ask for your data in a portable format.
• Objection — object to processing based on legitimate interests.
• Complaint to the ICO — if you are not satisfied with our response: ico.org.uk/make-a-complaint or 0303 123 1113.

3. The plain-English summary

To use this app you create an account, which stores your email with Firebase. When you submit text for translation, it is sent directly from your device to the Anthropic Claude API — this means Anthropic receives your IP address as well as the text you submit. Translations you save are stored in Firebase Firestore. Subscriptions are managed by RevenueCat.

4. What information we collect directly

We collect:

• Email address — used to create and manage your account via Firebase Authentication.
• Text you submit for translation— sent to Anthropic's Claude API to generate the plain-English response. Submitted text is not stored by us after processing, unless you choose to save the result to your history.
• Saved translation history — if you save a result, the original text, category, and full AI response are stored in Firebase Firestore under your account.
• Support correspondence — if you email us, we keep the message so we can respond and follow up.

We do not collect your real name, phone number, postal address, contacts, location, or any other personal information beyond the above.

5. Hosting — Vercel

This privacy policy page is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit it, Vercel records your IP address, browser type, page requested, and a timestamp in standard server logs (retained approximately 30 days). Legal basis: legitimate interests (Article 6(1)(f) UK GDPR). Vercel Privacy Policy

6. Account and data storage — Firebase (Google)

We use Firebase, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), as our data processor for:

• Firebase Authentication — manages sign-in. Firebase receives your email address, a hashed password (we never see the plain-text version), and your IP address and sign-in timestamp for security purposes.
• Firebase Firestore — stores your saved translation history. Data is encrypted in transit and at rest.

Legal basis: performance of a contract (Article 6(1)(b) UK GDPR). International transfers are covered by Standard Contractual Clauses and the UK International Data Transfer Addendum. Firebase Privacy & Security

7. AI features — Anthropic (Claude)

When you submit text for translation, your device sends it directly to Anthropic, PBC (548 Market Street, PMB 90375, San Francisco, CA 94104, USA) for processing by the Claude AI model. Anthropic acts as our data processor.

Because the call is made from your device rather than our server, Anthropic receives:

• The text you submitted, exactly as you typed it
• The category you selected (e.g. "The Workplace")
• Your device's IP address
• Standard HTTP metadata (our API key, SDK version)

Anthropic does not receive your name, email address, or account identifier from us.

Under Anthropic's Commercial Terms, API inputs and outputs are retained for a maximum of 7 days for trust and safety purposes, then automatically deleted. Anthropic does not use API content to train their models.

Legal basis: performance of a contract (Article 6(1)(b)). Anthropic Privacy Policy

8. Subscriptions and payments — RevenueCat

We use RevenueCat, Inc. (1032 E Brandon Blvd #3003, Brandon, FL 33511, USA) to manage subscriptions and verify purchases. RevenueCat receives an anonymous App User ID (not linked to your email or name), your subscription and purchase history, your locale and currency code, and standard HTTP metadata. Legal basis: performance of a contract (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)) for fraud prevention. RevenueCat Privacy Policy

9. Distribution — Google Play

This app is distributed through Google Play (Google LLC). When you download, install, or purchase the app, Google processes information about that transaction under its own privacy policy. Google Privacy Policy

10. Data we never collect or use

We do not sell, rent, or trade your personal data. We do not use your data for behavioural advertising. We do not use any advertising SDKs. We do not track you across other apps or websites.

11. International transfers

Several services above process data in the United States. For each transfer we rely on Standard Contractual Clauses and/or the UK-US Data Privacy Framework where applicable. You can request details by emailing knoodlepot@knoodlepotstudio.com.

12. How long we keep your data

• Account data (Firebase) — until you delete your account; backups purged within 30 days.
• Saved translation history — until you delete individual items or your account.
• Purchase records (RevenueCat) — lifetime of account plus 6 years for legal and tax purposes.
• AI processing (Anthropic) — up to 7 days.
• Server logs (Vercel) — approximately 30 days.
• Support correspondence — 2 years from last contact.

To delete your account and all associated data, use the delete-account option in the app's settings, or email knoodlepot@knoodlepotstudio.com. We will action it within 30 days.

13. Security

We use industry-standard measures including encryption in transit (TLS) and at rest, access controls, and regular review of our processors' security certifications. In the unlikely event of a personal data breach affecting your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.

14. Children

This app is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has created an account, please email knoodlepot@knoodlepotstudio.com and we will delete it.

15. Changes to this policy

We may update this policy from time to time. If a change materially expands what data leaves your device or who it is shared with, we will notify you in the app before it takes effect. The "Last updated" date at the top shows when it last changed.

16. Contact and complaints

For any privacy question or request:

Knoodlepot Studio
knoodlepot@knoodlepotstudio.com

If you are not satisfied with our response, you may complain to the ICO:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
ico.org.uk/make-a-complaint · 0303 123 1113

ICO registration: ZC143302