Privacy Policy

1. Introduction

This Privacy Policy explains how Darren Galvin ("we", "us", "our", or "the Developer") collects, uses, stores, and protects information when you use our applications, websites, and services, including but not limited to:

• Business Cheetah (web & mobile application)
• Planaroo (web & mobile application)
• Any other applications developed and published by Darren Galvin

We are committed to protecting your privacy and handling your data in an open and transparent manner. By using our applications and services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration details (name, email address, password)
• Profile information you choose to provide
• Content you create, upload, or share within our applications
• Communications with us (support requests, feedback, enquiries)
• Payment and billing information (processed securely via third-party payment processors)
• Business information you input for business planning or strategy tools

2.2 Information Collected Automatically

• Device information (device type, operating system, unique device identifiers)
• Usage data (features used, actions taken, time spent, crash reports)
• Log data (IP address, browser type, access times, pages viewed)
• Location data (only if you grant explicit permission; can be disabled at any time)
• Analytics data via privacy-respecting analytics tools

2.3 Information from Third Parties

• Authentication providers (e.g., Apple Sign In, Google Sign In) if you choose to use them
• Payment processors (Stripe) — we do not store full payment card details

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our applications and services
• Create and manage your account
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyse trends, usage, and activities
• Detect, investigate, and prevent fraudulent or unauthorised activity
• Personalise and improve your experience
• Comply with legal obligations

4. AI Features and Data Processing

Some of our applications use artificial intelligence (AI) features powered by third-party AI providers (such as OpenAI). When you use AI-powered features:

• Your input may be sent to the AI provider for processing
• We do not use your data to train AI models
• AI-generated content is provided for informational purposes and should not be considered professional advice
• You can choose not to use AI features and still access core functionality

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers — third parties that perform services on our behalf (hosting, analytics, payment processing, email delivery)
• Legal requirements — if required by law, regulation, legal process, or governmental request
• Safety — to protect the rights, property, or safety of our users and the public
• Business transfers — in connection with a merger, acquisition, or sale of assets (you will be notified)

6. Data Storage and Security

• Data is stored securely using industry-standard cloud infrastructure providers
• We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS/SSL) and at rest
• Access to personal data is restricted to authorised personnel only
• We conduct regular security reviews and updates
• While we strive to protect your information, no method of transmission over the internet is 100% secure

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. We will retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements

You may request deletion of your account and associated data at any time by contacting us.

8. Your Rights

Under applicable data protection laws (including UK GDPR and the Data Protection Act 2018), you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request restriction of processing of your data
• Portability — request transfer of your data in a structured, machine-readable format
• Objection — object to processing of your personal data
• Withdraw consent — where processing is based on consent, you may withdraw at any time

To exercise any of these rights, please contact us at the email address below. We will respond within 30 days.

9. Cookies and Tracking

Our applications and websites may use:

• Essential cookies — required for the application to function (authentication, preferences)
• Analytics cookies — to understand how users interact with our services (anonymised)

We do not use advertising cookies or trackers. You can manage cookie preferences through your browser settings.

10. Third-Party Services

Our applications may integrate with or link to third-party services including:

• Payment processors (Stripe)
• Authentication providers (Apple, Google, Firebase)
• Cloud hosting (Vercel, Firebase, Supabase)
• Email services (SendGrid, Resend)
• AI providers (OpenAI)
• Analytics services

These third-party services have their own privacy policies, and we encourage you to review them. We are not responsible for the practices of third-party services.

11. In-App Purchases and Subscriptions

• Purchases made through the Apple App Store or Google Play Store are processed by Apple/Google respectively
• We do not have access to your full payment card information for in-app purchases
• Subscription management and cancellation can be done through your device's app store settings
• For web-based payments processed via Stripe, card details are handled directly by Stripe and are never stored on our servers

12. Children's Privacy

Our applications are not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us immediately.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your country. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection law, including standard contractual clauses where required.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within our applications and updating the "Last Updated" date. Your continued use of our applications after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Supervisory Authority

If you are based in the United Kingdom and are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):