Privacy Policy

1. Controller

2. Data we process

• Account and contact data: your name, email address, account identifier and linked sign-in providers.
• Device and installation data: installation identifier, device model, operating system and app version, locale, time zone, notification permission state, and, where push delivery is supported and enabled, its push token. The initial Android version does not register a push token or support push delivery.
• App activity and preferences: interactions with the service, selected settings, alert subscriptions and alert delivery status.
• Technical and security data needed to authenticate requests, prevent abuse, diagnose failures and keep the service available.

We do not use the mobile app to collect payment-card data, precise location, advertising identifiers or data for cross-app tracking. We do not sell personal data or use it for third-party advertising.

3. Why we use data

We process these data to create and manage your account, authenticate you, provide analytics and alerts, register devices and deliver push notifications, remember your preferences, secure and maintain the service, respond to support requests, and meet legal obligations. The applicable legal bases include performance of our contract, our legitimate interests in operating and securing MaxData, compliance with law, and consent where law requires it.

4. Service providers and transfers

We disclose only the data needed to providers that support authentication, push delivery, cloud hosting, security, diagnostics, communications and market-data functionality. On iOS, Sign in with Apple and Apple Push Notification service are provided by Apple; Expo services may process installation and push-delivery information when those features are enabled. Android push is unavailable in the initial Android version. Providers act under contractual and security obligations. Where data leave the United Kingdom or your country, we use an adequacy decision or appropriate contractual safeguards where required.

5. Retention and deletion

Account data are retained while your account is active. When you submit deletion in the app, active sessions, registered devices, push tokens and linked social identities are revoked or removed, sign-in is blocked, and account data are deleted or irreversibly anonymised. Data required for tax, accounting, fraud prevention, legal claims or another legal obligation are isolated, access-restricted and kept only for the applicable period; UK accounting records may generally be retained for up to six years. Deletion request records are retained only as needed to prove and administer the request.

6. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing, and may withdraw consent. Contact [email protected]. You may also complain to the UK Information Commissioner's Office or your local supervisory authority.

7. Children, security and changes

MaxData is not directed to children under 16 and we do not knowingly collect their data. We use administrative, technical and organisational safeguards, but no system is completely secure. Material changes to this policy will be published at this stable address with a revised effective date.