BMVP AI Ltd ("we", "us", "our") is the data controller for all services described in this policy. Company No. 17126191. Registered in England and Wales.
This policy applies to all BMVP AI Ltd services:
localStorage only. Never sent to our servers.localStorage to avoid repeating on return visits. Not transmitted.localStorage. Not transmitted.localStorage as well as server-side to support redemption.We do not currently serve third-party advertising on any of our products, and we do not set advertising or tracking cookies.
If we introduce advertising in the future, we will update this policy first, and any advertising cookies will only be set after you give explicit consent via a consent banner. Declining will still let you use the product, with any ads shown on a non-personalised basis.
Cantle and QR Studio do not display advertising.
Under the General Data Protection Regulation, EU/EEA residents have the right to: access their data, rectify inaccurate data, erasure ("right to be forgotten"), restriction of processing, data portability, object to processing, and withdraw consent at any time without affecting prior processing.
You may also lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.
Legal basis: Account/subscription data — contract performance (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)). Any future advertising cookies would rely on explicit consent (Art. 6(1)(a)).
To exercise any right, email legal@bmvp.ai. We respond within 30 days.
California residents have the right to: know what data is collected; delete personal information; correct inaccurate data; opt out of sale or sharing; and non-discrimination for exercising these rights.
We do not sell or share personal information. We do not currently serve third-party advertising.
To submit a CCPA request, email legal@bmvp.ai with "CCPA Request" in the subject. We respond within 45 days.
Our services are not directed at children under 13. bmvp.io displays an age gate on every first visit. Users who indicate they are under 13 are blocked — no cookies are set, no data collected.
Cantle and QR Studio are professional/productivity tools intended for adults. If you are under 18, you must have parental or guardian consent to use them.
If you believe a child under 13 has provided us with personal data, contact legal@bmvp.ai immediately.
We use encrypted data transmission (TLS/HTTPS), hashed passwords, restricted database access, and regular security reviews. To report a security concern, email legal@bmvp.ai.
We use the following third-party data processors. Under GDPR, these are sub-processors operating under our instruction:
We do not share your personal data with advertisers, data brokers, or third parties for commercial purposes.
Treasynx, formerly Hourloom, is our Android day planner. It works differently from our websites: your tasks, notes and schedules are stored locally on your device, not on our servers. There are no user accounts and no server holding your day.
Three things can leave the device, each because you asked for it: an AI prompt goes to the provider you configured using your key; the microphone sends audio to your phone's speech service if you choose to use it; and an entirely optional feature can donate twelve anonymous numbers describing the shape of a plan. Treasynx can also run a small AI model on the phone itself, in which case nothing leaves at all.
We may update this policy. Material changes will be notified by updating the date above. Continued use constitutes acceptance.