Privacy notice

This notice covers this website, mobixify.com, including the Store at mobixify.com/store/, the addresses that redirect to it, and the e-mail you send to info@mobixify.com.

It does not cover our products. Each has its own privacy policy, on its page in the Store. Apple and Google run the app stores and have their own policies.

1. Who we are

The controller is Mobixify LTD (“we”, “us”), company number 16138122. Contact: info@mobixify.com. Company information: mobixify.com/company/

We decide why and how your personal data is used. Use info@mobixify.com for anything about privacy.

• We are registered with the Information Commission (ICO) as a data controller, reference ZB930433.

This notice follows the UK GDPR and the Data Protection Act 2018 (the UK’s main data protection laws), as amended by the Data (Use and Access) Act 2025.

2. What we collect, why, and our legal basis

What a request record holds, for example:

• your IP address;
• the date and time;
• the page address, including any text after a “?”;
• the response status (whether the page was found);
• the page that sent you, if your browser says;
• your browser and device type;
• connection details, such as the encryption version (TLS); and
• the AWS location that answered.

AWS also records other technical details of each request, such as the request method, the amount of data sent, how long the request took and the cookie header of the request.

Server records. When a page asks our own server, api.mobixify.com, for something (today, the timeline on a product page in the Store), our web server writes a record of the request: your full IP address, the date and time, the website name and address requested, the request method and protocol version, the response status, the amount of data received and sent, how long it took and which of our server processes answered, the page that sent the request if your browser says, and your browser and device type. We use these records to keep the service secure, stop abuse and fix faults (legitimate interests, Article 6(1)(f)). They are kept on the server and in Amazon CloudWatch Logs, run by AWS (our processor), in Frankfurt, Germany, for 7 days and then deleted automatically; AWS usually takes up to 3 more days to remove the CloudWatch copy. If a request fails, or is refused because it goes over a limit, the web server also writes an error record with your IP address and the request; it stays on the server only and is deleted within 7 days. Only the people who run the service can read them. We do not use them to count or profile visitors. To limit how often one network can ask, the server also counts requests by IP address in its working memory; that count is never written to a file or a database.

Things we do not collect:

• Accounts, names or sign-ins. This website has none.
• Analytics or measurement. We do not count or follow visitors.
• Advertising or social tools. No ad networks, no share buttons, no embedded video or maps.
• Cookies. We set none. See Cookies and local storage.
• Third-party fonts or scripts. Fonts come from our own domain. A page asks only our own servers for anything: a product page in the Store asks api.mobixify.com for its timeline.

Search and filters in the Store run in your browser, and what you type is not sent to us. Your browser may add it to the page address (for example ?q=notes) so that you can share or reload the page. If you reload or share that address, the words are sent with the request and appear in the logs described above.

If you choose a Light or Dark theme, your browser stores that choice on your device. We never receive it.

You do not have to give us any personal data to read this website. Your browser sends your IP address and request details so that the page can reach you. If you write to us, we use your e-mail address to reply.

We make no decisions about you by automated means, and we do not profile you. We do not ask for special category data (such as health or beliefs). Please do not send it.

3. Who receives your data

• Amazon Web Services (AWS). Hosts this website and delivers it through CloudFront, its network of servers around the world, which sends each page from a location near you. It receives every request and keeps the access logs. It also runs the server behind api.mobixify.com and keeps that server’s records in Amazon CloudWatch Logs. AWS is our processor and acts only on our instructions.
• Google (Google Workspace). Hosts our e-mail. It receives the messages you send us. Google is our processor.
• Cloudflare. Runs the DNS for our domain names: it answers the question “where is mobixify.com?”. The question comes from your internet provider or DNS service, not from our pages, and it does not say which page you open. Cloudflare is our processor.
• Advisers and authorities. We may share data with our professional advisers, who must keep it confidential. We may also share it with courts, regulators or the police when the law requires it, or to defend a legal claim.
• A buyer. If we sell or reorganise the business, data may pass to the new owner under this notice.

We do not sell your data. We do not share it with advertisers or data brokers.

4. Transfers outside the UK

This website is published from AWS’s data centres in Frankfurt, Germany. Our server api.mobixify.com and its records are there too. CloudFront answers each request from a location near you. That can be anywhere in the world, so your request and its log entry can be handled outside the UK, including in the United States. Google and Cloudflare also run networks in many countries.

These are legal tools that make a company protect your data to UK or EU standards when it moves outside the UK. Standard contractual clauses, with a UK Addendum, are approved contract terms. The Data Privacy Framework and its UK Extension (the UK-US data bridge) are certification schemes that a company joins.

The safeguards we rely on:

• Germany and the other countries of the European Economic Area. UK law treats them as providing adequate protection.
• AWS. The AWS Service Terms, which include the EU standard contractual clauses and the UK Addendum to them. Amazon.com, Inc., AWS’s US parent, is also certified under the EU-US Data Privacy Framework and its UK Extension.
• Google. Google’s data processing terms, which provide standard contractual clauses where a transfer needs them, and Google LLC’s certification under the Data Privacy Framework and its UK Extension.
• Cloudflare. Cloudflare’s customer data processing addendum, which includes the EU standard contractual clauses and the UK Addendum, and Cloudflare’s certification under the Data Privacy Framework and its UK Extension.

You can ask us for a copy of these safeguards at info@mobixify.com.

5. How long we keep it

• Access logs. AWS keeps the access logs of our hosting app for as long as the app exists. The website runs in that one app, so its records are kept together, and they go when we delete the app. Only the people who run the website can open the logs. We open them to investigate security problems, abuse or faults, or to check that a site works, and for no other purpose.
• Server records. 7 days, then deleted automatically (AWS usually takes up to 3 more days to remove its copy). Error records: deleted within 7 days. The same people may read them, for the same purposes only.
• E-mail. 24 months after the last message in the conversation, then deleted. We keep it longer only if we need it for a legal claim or a legal duty.
• Data requests and complaints. 3 years after we close the request or complaint. We delete the proof of identity once we have checked it.

6. Your rights

You can ask us to:

• tell you whether we hold personal data about you and give you a copy (access);
• correct data that is wrong or incomplete;
• delete your data;
• restrict how we use it while a question is settled;
• stop using it where we rely on legitimate interests (objection). We will stop unless we have a compelling reason or need the data for a legal claim;
• give you the data you gave us in a common electronic format (portability). This applies only where we use your data under a contract or with your consent.

We do not rely on your consent for anything on this website, so there is none to withdraw. You also have the right not to be subject to a decision made only by automated means, and we make none.

To use a right, e-mail info@mobixify.com or follow Account and data requests. It is free. We reply within one month. If the request is complex or you have made several, we can take up to two more months, and we will tell you why within the first month. The month starts when we have your request and enough information to find your data. If we need to ask you something first, the clock waits for your answer.

To find your entries in an access log, tell us the IP address you used and the dates you visited. We search the log for those details and do not collect more data about you to answer a request.

7. Complaints

If you are not happy with how we have handled your personal data, tell us first. E-mail info@mobixify.com with the subject “Complaint”. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.

You can also complain to the Information Commission (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint. The ICO may ask whether you have raised the problem with us first. You can also complain to the data protection authority in the country where you live or work.

8. Children

This website is not aimed at children, and we do not knowingly collect personal data from children under 13. The only data it collects is the technical record described above, which is the same for every visitor. If you are a parent or guardian and have a concern, e-mail us.

9. Links to other sites and to our products

Store badges and links lead to Apple’s App Store, Google Play and other sites. Once you leave this website, the privacy policy of the site you visit applies.

Each product has its own privacy policy, on its page in the Store or, where a product runs its own website, on that website. For a product, its policy applies, not this notice.

10. Do Not Track

This website uses no cookies or other tools to track you across other websites or over time. Because there is nothing to switch off, it behaves the same whether or not your browser sends a “Do Not Track” signal. No other company collects personal information about your online activities across other sites through ours.

11. Keeping data secure

This website is served over HTTPS, and plain HTTP requests are redirected to HTTPS. It is made of static files: no code of ours runs on a server to handle your data when you visit. AWS, Google and Cloudflare protect their services under their own security terms. If a personal data breach puts your rights at risk, we will tell you and the ICO as the law requires. To report a security problem, see Report a security problem.

12. Changes to this notice

We may update this notice. The date at the top of the page shows the latest change, and the history below lists the changes.

History