Privacy Notice

1. Who we are

APPGEN LTD is the operator of PushBites and the controller responsible for the processing described in this notice.

APPGEN LTD, company 14330097
71–75 Shelton Street, Covent Garden
London WC2H 9JQ, United Kingdom
support@pushbites.com

2. Scope

This notice covers the PushBites iOS app, the public pushbites.com website, early-access communications, and direct support. It does not describe unrelated APPGEN LTD products or third-party services you visit under their own terms.

3. Information we use

App and account information

Depending on how you use the app, this can include an anonymous profile and device identifier, sign-in identity, email address used for sign-in, language and learning preferences, saved items and collections, review and interaction history, reminder settings, notification delivery records, app-entitlement facts, and product events needed to operate and improve PushBites.

Website and early access

The static website does not set analytics cookies or create a persistent browser identifier. Early-access signup processes your email address, explicit consent and consent-text version, limited allowlisted campaign context, and a single-use Cloudflare Turnstile token. The token, raw IP address, user agent, and provider response are not kept in the waitlist record.

Support and technical information

If you contact us, we use the message, address, and context you provide to respond. Servers may temporarily process request metadata such as IP address, route, timestamp, and a server-generated request ID for security, rate limiting, and operations. Do not send passwords or sign-in codes.

4. Purposes and legal bases

Our legal bases depend on the activity:

• Contract or steps at your request: providing app functions, account access, saved learning data, exports, and support you request.
• Consent: sending occasional development updates, beta invitations, and the release announcement after double opt-in. You can withdraw at any time.
• Legitimate interests: securing the service, limiting abuse, diagnosing failures, maintaining non-identifying daily website aggregates, and improving reliability without overriding your rights.
• Legal obligations: keeping or disclosing limited records where law requires it.

PushBites does not use the public website data described here for targeted advertising, fingerprinting, or automated decisions with legal or similarly significant effects.

5. Recipients and service providers

We use service providers only for defined operational purposes. Cloudflare serves the website and provides Cloudflare Turnstile human verification. Resend delivers confirmation and early-access email and synchronizes confirmed contacts to the dedicated early-access audience. Infrastructure and database providers may process technical and app data on our behalf. We may disclose information to professional advisers, authorities, or another organization where law requires it or a properly structured business transfer makes it necessary.

Resend is a delivery processor, not our consent system of record. The PushBites backend decides whether consent exists and blocks sending after withdrawal.

6. International transfers

Some recipients may process information outside the United Kingdom. Before production processing, APPGEN LTD must verify each provider location and contract, including the executed Resend data processing agreement, and use an adequacy decision or approved contractual safeguard where required. You may ask us for information about the safeguard that applies.

7. Retention

• Unconfirmed early-access records are physically deleted after seven days.
• Confirmed records remain through early access and launch, then are physically deleted 90 days after the configured launch date unless you separately choose ongoing updates.
• After unsubscribe or deletion, we remove the readable address and retain only a one-way suppression value needed to prevent accidental re-import or sending.
• Daily website metrics contain only route and allowlisted aggregate dimensions, not a visitor identity.
• App records follow the operational periods needed for the relevant feature and account lifecycle. Some existing app categories do not yet have a final production deletion schedule; we will not publish a more specific promise until that schedule and deletion path are verified.
• Support and operational logs are kept only as long as needed for the request, security, and legal obligations under the production retention schedule.

8. Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent without affecting earlier lawful processing. Email support@pushbites.com with “Privacy request” in the subject. We may verify enough information to protect the person concerned.

You can also complain to the UK Information Commissioner’s Office. We would appreciate the opportunity to address the concern first.

9. Children

PushBites is not directed to children under 13, and the early-access list is not intended to collect their information. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

10. Changes to this notice and contact

We may update this notice when the product, providers, or law changes. We will publish the revised effective date and highlight a material change when appropriate.

Questions or requests: support@pushbites.com. You can also Print or save this page or read our Terms of Use.