Privacy Notice

Gaphed operates the Gaphed web application. For the personal data described here, Gaphed acts as the data controller and decides how and why that data is processed.

• Service providers who host our application, database, file storage and email delivery.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities, where we are required to disclose by law.

We never sell your personal data.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We keep account and content data for as long as your account is active. After you delete your account, or after a prolonged period of inactivity, we delete or anonymise the data unless we must keep it for legal, tax or accounting reasons.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. If you are in the UK or EEA, you can also complain to your supervisory authority. We respond to requests within one month. Contact us through the support address shown in the app to exercise these rights.

We apply appropriate technical and organisational measures, including encryption in transit, access controls and row-level database rules so that only you can read your own records.

We use essential cookies and local storage to keep you signed in and to remember preferences such as light or dark theme. These are required for the app to work. If we add analytics or marketing cookies in future, we will ask for your consent first and give you a way to manage your preferences.