Privacy notice
The short version
- If you join the beta, we keep your email address so we can send you an invite and beta updates.
- We don't sell your data, and we don't use advertising or tracking cookies.
- You can unsubscribe or ask us to delete your data at any time by emailing privacy@dilutioniq.com.
- Who we are
- What we collect
- Why we use it
- Who we share it with
- International transfers
- How long we keep it
- Cookies and local storage
- Your rights
- Children
- Security
- Changes
- Contact and complaints
1. Who we are
DilutionIQ (dilutioniq.com) is run by [COMPANY NAME] Ltd, a company registered in England and Wales with company number [COMPANY NUMBER], whose registered office is [REGISTERED OFFICE ADDRESS].
We are the "controller" of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. That means we decide how and why it's used, and we're responsible for looking after it.
Our registration number with the Information Commissioner's Office (ICO) is [ICO REGISTRATION NUMBER].
2. What we collect
Information you give us
- Your email address, when you sign up for the beta with your email.
- If you sign up with Google: your name, email address and Google account ID, which Google shares with us when you choose that option. We don't receive your Google password or any other data from your account.
- Anything you write to us, if you email us, along with your name and email address.
- Voice notes, if you record them on the Desk (a Premium feature): the recording, its length, when you made it, the ticker and the Desk label at that moment, and the transcript if you turn transcription on. For now these stay in your own browser and aren't sent to us.
Information collected automatically
- Server logs. Like any website, our hosting provider records technical details when you visit, such as your IP address, browser type, the pages requested and the time. These are used to keep the site running and secure.
- Font requests. The site loads its fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads.
We don't collect payment details, identity documents, or information about your trading or investments. Anything you say in a voice note stays in your browser unless you choose transcription, as explained below.
3. Why we use it, and our lawful basis
Data protection law says we need a lawful basis for each use of your data. Here are ours:
| What we do | Data used | Lawful basis |
|---|---|---|
| Create your beta account and send your invite and beta updates | Email address; with Google sign-up also your name and account ID | Your consent. You can withdraw it at any time by unsubscribing or emailing us. |
| Reply to your messages | Name, email, your message | Our legitimate interest in answering people who contact us. |
| Keep the site running and secure | Server logs | Our legitimate interest in running a secure website. |
| Display the site's fonts | IP address (sent to Google) | Our legitimate interest in presenting the site properly. |
| Meet legal obligations | Any of the above, where needed | Legal obligation. |
We won't send you marketing about other companies' products, and we don't use your data to make automated decisions about you.
4. Who we share it with
We only share your data with service providers who help us run DilutionIQ, and only as much as they need. They act on our instructions and must keep your data safe. They are:
- Website hosting: [HOSTING PROVIDER].
- Email: [EMAIL PROVIDER, e.g. Google Workspace], which holds our inbox.
- Mailing list (if used): [MAILING SERVICE].
- Sign-up and account storage: Firebase Authentication and Cloud Firestore (Google LLC), which store your sign-up details and handle Google sign-in.
- Fonts: Google Fonts (Google LLC).
- Voice note transcripts: only if you turn on "Transcribe as I speak". Your browser does the transcribing: Chrome and Edge send the audio to Google's speech service to do it, under Google's own terms. We don't receive that audio. Leave the option off and nothing is sent.
We'll also share data if the law requires us to, for example with a regulator or the police. We never sell your personal data.
5. International transfers
Some of our providers are based in, or store data in, the United States or other countries outside the UK. When that happens, we make sure the transfer is protected by one of the safeguards UK law allows, such as the UK–US "data bridge" for certified companies or the ICO's International Data Transfer Agreement or Addendum.
6. How long we keep it
- Beta email list: until you unsubscribe or ask us to delete it, or until the beta ends and you haven't become a user. We then delete it within 30 days.
- Emails you send us: up to 2 years after our last contact, unless we need them longer for a legal reason.
- Server logs: as set by our hosting provider, normally no more than 90 days.
- Voice notes: in your browser until you delete them, which you can do one at a time on the Desk, or all at once by clearing this site's data in your browser. When sign-in accounts arrive and voice notes move to our cloud storage (Firebase Storage, Google LLC), we'll keep them until you delete them or close your account, and update this notice first.
7. Cookies and local storage
We don't use advertising, analytics or tracking cookies.
If you use the light and dark switch, the site saves your choice in your browser's local storage under the name diq-theme, so it remembers it next time. This stays on your device, isn't sent to us, and you can clear it at any time from your browser settings. Because it only does something you asked for, it doesn't need a cookie banner.
If you sign up with Google, Firebase keeps a small record in your browser's storage so you stay signed in. This is needed for the sign-in you asked for, so it doesn't need a cookie banner either.
The Desk saves your typed notes in your browser's local storage (names starting dilution-desk-note-), voice notes in its database storage (diq-voice-v1), and whether you've turned transcription on (diq-voice-transcribe). These stay on your device and do only what you asked for.
If we add analytics or any other cookies in future, we'll update this notice and ask for your consent first where the law requires it.
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you and get a copy.
- Correct data that's wrong or incomplete.
- Delete your data.
- Restrict how we use it.
- Object to us using it on the basis of legitimate interests.
- Take it with you (data portability), where it's based on consent.
- Withdraw consent at any time. This doesn't affect anything we did before you withdrew it.
To use any of these rights, email privacy@dilutioniq.com. It's free, and we'll reply within one month. We may need to check who you are before we act on a request.
9. Children
DilutionIQ is for adults. It isn't meant for anyone under 18, and we don't knowingly collect data from children. If you think a child has given us their details, please contact us and we'll delete them.
10. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and two-factor authentication on the accounts that hold it. No system is completely secure, but if a data breach affects you and puts you at high risk, we'll tell you without undue delay.
11. Changes to this notice
We'll update this notice when our services or the law change, for example when paid plans launch. The date at the top shows when it was last updated. If a change is significant, we'll email beta members before it takes effect.
12. Contact and complaints
For any privacy question, email privacy@dilutioniq.com or write to [COMPANY NAME] Ltd, [REGISTERED OFFICE ADDRESS].
If you're unhappy with how we've handled your data, please contact us first so we can try to fix it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.