GDPR Compliance

Our commitment

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 set standards for the responsible use of personal information in the United Kingdom. The EU General Data Protection Regulation may also apply when we offer services to, or monitor the behaviour of, people in the European Economic Area.

iByte Apps Limited is committed to handling personal information lawfully, fairly and transparently. Compliance is an ongoing responsibility, so we review our practices as our services, technology and legal obligations change.

How we apply data protection principles

Our approach is guided by the core data protection principles. We aim to collect only the information reasonably needed to provide and improve Sober Today, use it for clear and legitimate purposes, keep it only for as long as necessary, and protect it with appropriate safeguards.

• identify an appropriate lawful basis before processing personal information;
• explain what we collect and why in our Privacy Policy;
• limit collection and use to relevant, specified purposes;
• take reasonable steps to keep information accurate and secure;
• apply retention periods and delete or anonymise information when it is no longer needed; and
• review our privacy and security measures as the Services develop.

Privacy by design

We consider privacy when designing or changing features, selecting service providers and deciding how information is stored or used. Where a proposed use of personal information is likely to create a high risk to people, we assess that risk before proceeding and introduce measures intended to reduce it.

Service providers and international transfers

We assess service providers that process personal information on our behalf and use appropriate contractual and organisational safeguards. Providers are expected to protect information, use it only for agreed purposes and support us in meeting applicable data protection obligations.

If personal information is transferred internationally, we use a lawful transfer mechanism where one is required, such as an adequacy regulation or appropriate contractual safeguards. More specific information about recipients and transfers is provided in our Privacy Policy.

Security and accountability

We use technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure or loss. No online service can guarantee absolute security, but we review risks and improve safeguards where appropriate.

• maintain appropriate privacy policies and internal procedures;
• limit access to personal information according to operational need;
• review relevant third-party processors and contractual protections;
• maintain processes for identifying, investigating and responding to personal data incidents; and
• keep appropriate records of our processing and compliance decisions.

Your data protection rights

Depending on the circumstances and the law that applies, you may have rights to be informed, access your personal information, correct inaccurate information, request deletion, restrict or object to processing, and receive certain information in a portable format. You may also withdraw consent where processing relies on consent.

Some rights are subject to legal conditions or exceptions. Our Privacy Policy explains these rights and how to make a request. You may also have the right to complain to the Information Commissioner’s Office or another competent supervisory authority.

More information

Our Privacy Policy contains detailed information about the personal information we collect, why we use it, our lawful bases, retention, sharing, international transfers and the choices available to you.

This page summarises our approach to data protection. It does not replace our Privacy Policy or create rights beyond those provided by applicable law.