Privacy
Draft. This notice is completed with counsel before the app goes live.
Who is responsible
The business that runs this app is responsible for your data. Its legal name and contact details are added here before launch.
What we hold
Accounts for the people who use this app (name, email, sign-in history) and the records the business keeps in it. The full list is added before launch.
Cookies
Only cookies needed to sign you in: the session, and a short one while a passkey sign-in is in progress. There are no analytics, advertising or tracking cookies.
How long data is kept
| Data | Kept |
|---|---|
| Ended sessions (IP address and browser) | 30 days |
| IP addresses in the security log | 365 days |
| Security log (no names or emails) | 730 days |
| Used or expired invitations | 30 days |
| Unfinished sign-in steps | 1 days |
| Used recovery codes | 90 days |
| Removed passkeys | 90 days |
| Expired failed-sign-in locks | 30 days |
| Sent notifications | 90 days |
| Deactivated accounts (anonymised) | 730 days |
| Notices already delivered to Jarvis | 180 days |
Your rights
You can ask to see, correct, export or erase your data. Contact details for requests are added here before launch.