Privacy notice
Patient Thread Ltd ("we") makes the Repton app and this web site. This draft describes what we intend to collect and why; it must be reviewed by a solicitor before publication and must match the App Store privacy labels.
1. Who we are
Patient Thread Ltd, [registered address], [company number]. Data protection contact: [email protected]. We are the controller of the personal data described here.
2. What we collect and why
- Your garden. The address or location you enter, the boundary you draw, photographs you take for a scan, your plan, plant choices and calendar. Stored on your device and, when you use the Repton service, sent to our servers to produce designs, renders, advice and 3D scans. Lawful basis: performance of the contract with you.
- Account. If you sign in: your e-mail address, an identifier from Sign in with Apple if you use it, the anonymous device identifier the app or site uses, and your subscription status. Lawful basis: contract.
- Payments. Web subscriptions are taken by Stripe. We receive your e-mail, the subscription and customer identifiers and the renewal date, never your card details. App Store purchases are handled by Apple; we receive a signed receipt of the entitlement.
- Anonymous usage. Which plants gardens use, aggregated, so the designer can suggest something the neighbours do not have. Not linked to you.
- Service logs. Request identifiers, timestamps and error messages for up to 30 days, to keep the service working. Lawful basis: legitimate interests.
3. Processors we use
Cloudflare (hosting, storage), Anthropic (the designer's language model), Runway (renders), Modal (3D scans), Brave (supplier search), Stripe (payments), Resend (sign-in e-mails), Apple (App Store, Sign in with Apple). Each processes data under a contract with us. Some are outside the UK; transfers rely on the UK International Data Transfer Agreement or adequacy regulations. [Solicitor: confirm the list and transfer mechanisms.]
4. How long we keep it
Scans and their photographs: 30 days after the scan completes, unless you delete them sooner. Renders: 30 days. Account and subscription records: while the account exists and for six years afterwards for tax records. Sign-in codes: 15 minutes.
5. Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to processing, or complain to the Information Commissioner's Office (ico.org.uk). Write to [email protected]. You can delete scans and renders in the app at any time.
6. Children
Repton is not directed at children under 13 and we do not knowingly collect their data.
7. Cookies and local storage
This site sets no advertising cookies. It stores an anonymous device identifier and, when you sign in, a session token in your browser's local storage so the account page works. Stripe's checkout pages set their own cookies under Stripe's privacy policy.
8. Changes
We will post changes here and, for material changes, in the app. Last updated: [date].