Privacy Notice

Iterune is currently operated in the United Kingdom by the individual responsible for developing and operating the Iterune service.

A complete controller identity and dedicated privacy contact will be published here before general public launch.

When you browse Iterune without an account, Iterune does not use the app catalogue to save your app selections or personal content.

If you create an account, authentication information such as your email address, account identifiers, authentication/session data and security-related information is processed to create and secure your account.

As Iterune apps are developed, the service may also process information you deliberately add to those apps, such as career records, applications, notes, documents, reminders or other records. This notice will be updated as those features are introduced.

Account information is used to create and operate your Iterune account, authenticate you, keep the service secure, provide requested features and maintain the service.

Information you later add to Iterune apps will be used to provide the functions you request from those apps.

Where processing is necessary to create and provide an Iterune account or requested Iterune functionality, Iterune intends to rely primarily on performance of a contract or steps taken at your request before entering into a contract.

Other processing may require a different lawful basis. If Iterune later introduces optional processing that relies on consent, that consent will be requested separately where required.

Iterune currently uses Supabase for authentication and database infrastructure, Vercel for application hosting and deployment, and GitHub for source-code hosting and development workflows.

These providers may process technical or account-related information where necessary to provide their services to Iterune. This section will be reviewed before public launch and as providers change.

Some service providers may process information in, or make it accessible from, countries outside the United Kingdom. Before public launch, Iterune will document the applicable locations and transfer safeguards for relevant personal-data processing.

During development, account information is kept while a test account remains active and may be deleted when no longer needed for testing.

Before public launch, Iterune will publish defined retention periods or the criteria used to determine them for each relevant category of personal information.

Depending on the circumstances and lawful basis, UK data-protection law may give you rights including access, correction, erasure, restriction, objection and data portability.

These rights are not all absolute and can depend on why information is being processed. Account deletion and data export controls are planned as part of Iterune's account infrastructure before public launch.

Iterune does not currently intend to use advertising or optional analytics cookies. Authentication may require strictly necessary cookies or similar technologies to keep you signed in and secure the service.

Guest app selections are not retained in browser local storage. If non-essential analytics, advertising or similar technologies are introduced, Iterune will update this notice and introduce an appropriate consent mechanism where required.

Iterune is being designed around authenticated access, server-side session handling and database Row Level Security. Highly sensitive personal-document features will not be treated as production-ready until the relevant access controls, deletion, recovery and storage protections have been implemented and tested.

A dedicated privacy contact will be published before general public launch. Individuals in the UK may also have the right to complain to the Information Commissioner's Office about the handling of their personal information.

This notice will change as Iterune develops. Material changes to how personal information is used will be reflected in an updated notice.