Privacy Policy

R8IT is operated by Bradley Botha, referred to in this policy as "R8IT", "we", "us" or "our".

Website: https://r8itapp.com

Privacy enquiries: botha.bradley@outlook.com

Contact address: 17 Manor Bridge Court, Tidworth, SP9 7NH

For applicable data protection legislation, the operator identified above is responsible for determining how and why personal information is processed through R8IT.

Account information

When you create or use an account, we may process:

• Your email address.
• Your display name and username.
• Your profile picture and profile description.
• Your account identifier.
• Your chosen authentication method.
• Information necessary to maintain your account and sign-in session.

R8IT supports Sign in with Apple and email-based authentication.

When you use Sign in with Apple, Apple may provide an email address or private relay address, depending on your settings.

We do not receive your Apple ID password.

Content you create

We process information you choose to add to R8IT, including:

• Lists and collections.
• List titles, descriptions and categories.
• Entries and recommendations.
• Overall ratings and individual rating criteria.
• Written reviews.
• Photos and associated content information.
• Places and coordinates you choose to associate with entries.
• Visibility and sharing settings.

Social and collaboration information

Where you use social or collaborative features, we may process:

• Public profile information.
• Accounts you follow.
• Lists you like or save.
• Invitations and collaboration memberships.
• Contributions to shared lists.
• Information needed to manage access and permissions.

Technical and operational information

We may process limited technical information needed to authenticate users, deliver requests, protect the service and troubleshoot errors, including:

• Device and application information associated with service requests.
• Authentication and session information.
• Network and server request information.
• Error and security records generated by our service providers.

Our hosting and authentication providers may keep limited technical records, such as request times, device and app information, and error or security events, to operate and protect the service.

Website and support information

If you contact support, we process the information you provide, including your email address, the subject of your enquiry and any details or attachments you submit.

Website cookies, analytics and similar technologies, if used, must be described in the website's applicable cookie information and consent controls.

We use personal information to:

• Create, authenticate and manage accounts.
• Provide lists, ratings, reviews and recommendations.
• Save and synchronise information between devices.
• Enable public sharing and collaboration.
• Display content according to your privacy and visibility choices.
• Provide search, discovery and map-related features.
• Respond to support requests.
• Investigate technical issues.
• Protect users, enforce our Terms and prevent misuse.
• Meet applicable legal obligations.

We do not currently offer paid subscriptions in R8IT V1.

We do not describe R8IT as an advertising or tracking service. Any future introduction of advertising, analytics or new data uses will require a corresponding review and update of this policy and any applicable consent mechanisms.

Where UK GDPR or similar data protection legislation applies, we rely on the following legal bases as appropriate:

Performance of a contract: To create accounts and deliver the features users request, including lists, ratings, authentication and collaboration.

Legitimate interests: To operate and secure the service, prevent abuse, investigate faults and improve reliability, where those interests are not overridden by individuals' rights.

Legal obligations: Where we must retain, disclose or otherwise process information to comply with applicable law.

Consent: Where a particular optional activity requires consent. Where processing relies on consent, you may withdraw it at any time without affecting processing already carried out lawfully.

We do not require users to provide optional profile content, photos or location-linked recommendations simply to create an account.

R8IT allows you to choose how certain information is shared.

Depending on your settings and the functionality available:

• Public profiles and public lists may be visible to other people.
• Public content may be accessible through shared links.
• Private lists are intended to be restricted to authorised users.
• Shared lists may be accessible to invited collaborators.
• Your ratings and contributions may be visible to other users who have access to the relevant list.

Please avoid including sensitive personal information in public reviews, descriptions or photographs.

Changing a list's visibility may not remove copies, screenshots or information previously saved by other people outside R8IT.

When you select photos to upload, we process those images to provide the relevant app features.

R8IT uses storage services and access controls to manage uploaded content.

Location-related information may include a place name or coordinates that you choose to associate with an entry.

The currently reviewed native app does not establish continuous background location tracking. We do not claim to collect continuous GPS location history.

If location permissions or location-processing features change in a future release, this policy will be reviewed accordingly.

R8IT supports offline access to certain account-owned content.

The app may store lists, entries, ratings, criteria and pending changes locally on your device.

When connectivity returns, supported changes can be synchronised with our backend.

Local data is associated with the relevant account and protected using the security mechanisms available to the app and operating system.

Some features, including photo uploads and online discovery, require an internet connection.

Removing the app from your device may remove locally stored information that has not yet synchronised. You should allow pending changes to finish syncing before uninstalling or changing devices.

We use third-party technology providers to operate R8IT.

These include:

Supabase: Backend infrastructure, authentication, database and file storage.

Apple: Sign in with Apple and the iOS platform services used by the app.

Website hosting and support providers: Providers used to host r8itapp.com and deliver support enquiries, as confirmed in our operational configuration.

We may share information with service providers only as needed to operate the service, with appropriate contractual and security protections.

We may also disclose information where required by law, to protect users or to investigate serious misuse.

Information you deliberately publish or share may be accessible to other users according to your chosen settings.

We do not sell personal information to data brokers.

R8IT is hosted in the United Kingdom. Our service providers may also process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will use an appropriate legal transfer mechanism or safeguard where required by applicable law.

R8IT is hosted in the United Kingdom. If any of our service providers process personal information outside the UK, we will make sure appropriate safeguards required by UK data protection law are in place. Contact us for more details.

We generally retain account information and user content while an account remains active and the information is needed to provide the service.

If content is deleted, or an account deletion request is completed, we remove or de-identify applicable information according to our deletion procedures, subject to legitimate legal, security and technical retention requirements.

Limited records may be retained where necessary for legal compliance, security investigations or dispute resolution.

Backups and operational logs may follow separate retention schedules.

We keep personal information only for as long as we need it to provide R8IT, meet legal obligations, resolve disputes and keep the service secure. When you delete your account or content, we remove it from live systems within a reasonable period, and from backups as they expire.

You may request deletion of your R8IT account and associated personal information by contacting botha.bradley@outlook.com.

Please use the email address associated with your account where possible. We may need to verify that the request is authorised.

We aim to remove account-related personal content, subject to applicable legal requirements and the rights of other users.

Where content belongs to a collaborative list, we may need to preserve other users' independent contributions while removing or de-identifying information associated with the deleted account.

In-app account deletion is being developed and will be described here once available.

You may also contact us to request access to, correction of, or deletion of personal information.

Depending on your location and applicable law, you may have rights to:

• Access your personal information.
• Correct inaccurate information.
• Request deletion.
• Restrict certain processing.
• Object to processing based on legitimate interests.
• Receive certain information in a portable format.
• Withdraw consent where consent is the legal basis.

To exercise these rights, contact botha.bradley@outlook.com.

You also have the right to complain to the relevant data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office: https://ico.org.uk.

We use technical and organisational measures intended to protect personal information, including authenticated access, database access controls and protected storage.

No internet service can guarantee absolute security.

You should protect your login credentials and contact us if you believe your account has been compromised.

R8IT is not designed specifically for children.

You must be at least 18 years old to create an account or use R8IT. R8IT accounts are intended for adults, not children. An app-store content rating is separate from this account eligibility requirement.

If you believe a child has provided personal information in breach of our eligibility rules, contact botha.bradley@outlook.com.

We may update this Privacy Policy when our services, technology or legal obligations change.

The latest version will be published at:

https://r8itapp.com/privacy-policy

Where legally required, we will provide additional notice or request consent before making relevant changes.

For privacy questions, data requests or account deletion enquiries:

botha.bradley@outlook.com

You can also visit:

https://r8itapp.com/support