Privacy policy
In short: we collect as little personal data as we can, we only use it to run our apps and services, we never sell it, and you can ask us to see or delete it at any time by emailing hello@bluecupstudios.co.uk.
1. Who we are
This policy explains how Blue Cup Studios Ltd (“Blue Cup Studios”, “we”, “us”) uses personal data when you use our website, our apps and games, and our consultancy services. We are the data controller for that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- Company: Blue Cup Studios Ltd, registered in England and Wales, company number [COMPANY NUMBER]
- Registered office: [REGISTERED OFFICE ADDRESS]
- ICO registration number: [ICO REGISTRATION NUMBER]
- Contact: hello@bluecupstudios.co.uk
2. Which apps this covers
This policy applies to every app and game we publish, on the Apple App Store, Google Play or the web, unless an app shows you its own privacy policy. The table below lists what each app collects. If an app is not listed, it collects no personal data beyond what is described in section 3.
| App | Data the app collects | Why |
|---|---|---|
| [APP NAME] | [e.g. email address, account name, app content you create] | [e.g. to provide your account and sync your content] |
| [APP NAME] | [e.g. none; all data stays on your device] | [n/a] |
3. The data we collect
Information you give us
- Contact details such as your name and email address when you email us, ask for support or create an account in one of our apps.
- Content you create in an app, where the app stores it on our servers so it can sync between your devices.
- Business information when you or your organisation work with us as a consultancy client.
Information collected automatically
- Crash reports and diagnostics, such as device model, operating system version and the app version, so we can find and fix bugs.
- Usage analytics, such as which screens are opened, collected in a form that does not directly identify you. [Remove if no analytics are used.]
- Purchase information. In-app purchases and subscriptions are handled by Apple or Google. We receive confirmation that a purchase was made, but never your card details.
Our website does not use advertising or tracking cookies. [Update this if you add analytics cookies to the website.]
4. How we use it, and our lawful basis
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Providing an app or service you have asked for, including your account and synced content | Contract |
| Answering your emails and support requests | Legitimate interests |
| Fixing crashes and improving our apps | Legitimate interests |
| Optional analytics or marketing emails, where we ask first | Consent, which you can withdraw at any time |
| Keeping business and tax records | Legal obligation |
We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
5. Who we share it with
We only share personal data with service providers who help us run our apps and business, under contracts that require them to keep it secure and use it only on our instructions. These are:
- Cloudflare, to host our website and route our email
- [BACKEND PROVIDER, if an app stores data online, e.g. Firebase, Supabase] to store app data
- [CRASH REPORTING / ANALYTICS PROVIDER, e.g. Sentry, Firebase Crashlytics] for crash reports and diagnostics
- [Proton] for email
- Apple and Google, who process app downloads, purchases and subscriptions under their own privacy policies
We may also disclose data where the law requires it, or to protect our rights or the safety of others.
6. International transfers
Some of our providers store or process data outside the UK. Where that happens, we make sure the transfer is protected, for example through the UK's adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
- Account data and app content: for as long as your account is active. When you delete your account, we delete this data within [30] days, apart from backups, which are overwritten within [90] days.
- Support emails: up to two years after the conversation ends.
- Crash reports and diagnostics: up to [90] days.
- Business and financial records: six years, as required by UK tax law.
8. Deleting your account
If an app lets you create an account, you can delete it from within the app under [Settings > Account > Delete account], or by emailing hello@bluecupstudios.co.uk from the address linked to your account. Deleting an app from your device does not delete your account.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- ask us to restrict or stop using your data, or object to how we use it
- ask for your data in a portable format
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email hello@bluecupstudios.co.uk. We will reply within one month. There is no charge in most cases.
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Children
Our apps are not aimed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it. [If an app is designed for children, it needs its own section that meets the ICO Children's Code.]
11. Security
We protect personal data with encryption in transit, access controls and providers that meet recognised security standards. No system is perfectly secure, but we will tell you and the ICO where the law requires us to if a breach affects your data.
12. Changes to this policy
We will update this page if our practices change and change the date at the top. If a change is significant, we will also tell you in the app or by email.