Privacy Policy
This policy explains how Scotly Apps Ltd ("Scotly", "we", "us") handles personal data on this website (scotly.com) and across the apps we publish. Each app also has its own privacy policy with the full detail of what that app collects: for Minvo, see minvo.ai/privacy. If anything is unclear, email privacy@scotly.com.
- We collect only what we need to run our website and apps.
- We never sell your personal data or share it for advertising.
- We never use your chats, files, images or videos to train AI models.
- You can delete your data, including your whole account, at any time.
Who we are
Scotly Apps Ltd is a company registered in England and Wales, based in London. We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, for people in the European Economic Area, the EU GDPR. Contact: privacy@scotly.com.
This website
scotly.com is a simple information site. It has no accounts, no forms, no advertising and no analytics or tracking cookies. Our hosting provider (Vercel) processes your IP address and basic browser details to deliver the pages and keep them secure. If you email us, we use your email address and message only to reply.
Our apps
Depending on the app and only where needed for it to work, our apps may process:
- Account data: an anonymous user ID, and your email address and name if you sign in with Apple, Google or email.
- Your content: the messages, files, photos and other content you put into the app, so the app can do what you ask and sync it across your devices.
- Purchase data: subscription status and store transaction IDs from Apple or Google. We never see your card details.
- Usage and technical data: features used, device type, operating system, app version and crash reports, used to run, secure and improve the app.
We do not collect precise location, contacts or advertising identifiers, and our apps do not track you across other companies' apps or websites.
AI features
Minvo uses AI models from providers including OpenAI, Anthropic, Google, xAI and others to answer questions and create images, videos and speech. When you use these features, the content you send is passed to the provider that runs the model, only to produce your result. Before your first message, the app asks for your consent to this. We never use your content to train AI models, and our providers are contractually bound not to train on data sent through their APIs. They may keep data for a limited time (typically up to 30 days) to detect abuse. Replies and media are generated by AI and can be wrong, so check anything important.
Why we use data, and our legal bases
- To provide the service you asked for (contract).
- To keep our services secure, prevent fraud and abuse, and enforce fair use (legitimate interests and legal obligation).
- To measure costs and improve reliability using aggregated data (legitimate interests).
- To answer support and privacy requests (contract and legitimate interests).
- To send product news, only if you agree (consent, which you can withdraw at any time).
Who we share data with
We use trusted service providers who act on our instructions and are bound to protect your data: Google Cloud and Firebase (hosting, database, storage and sign-in), Vercel (website hosting), the AI providers named in each app's policy, and Apple and Google for purchases. We may also disclose data where the law requires it, or to protect our users and services. We do not sell personal data.
International transfers
Some providers are in the United States. We rely on the UK-US Data Bridge where a provider is certified, or on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, with safeguards such as encryption in transit and at rest.
How long we keep data
We keep your data while your account is active or as long as needed for the purposes above. When you delete content or your account, it is removed from our systems straight away and from backups within 30 days. Purchase records are kept as long as tax law requires, and security logs for up to 90 days.
Your rights
You can access, correct, delete, export or restrict the use of your personal data, object to its use, and withdraw consent. In our apps you can delete individual items or your whole account in Settings; for Minvo you can also delete your account at minvo.ai/delete-account. For anything else, email privacy@scotly.com and we will reply within one month.
UK and EEA: you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority, though we would like the chance to help first.
United States: residents of California and other states with privacy laws have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you.
Children
Our apps are for adults. You must be 18 or older to use Minvo. We do not knowingly collect personal data from children; if we learn we have, we delete it.
Security
Data is encrypted in transit and at rest. Service keys stay on our servers, never in our apps, and staff access to user data is limited to what support and security require.
Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app before the change takes effect.
Contact
Scotly Apps Ltd, London, United Kingdom. privacy@scotly.com