Privacy Policy

Application: Pozy · Developer: MASHINGA LTD · Last updated: 29 June 2025

This Privacy Policy explains how MASHINGA LTD ("we", "us", or "our") collects, uses, stores, and shares your personal data when you use the Pozy mobile application ("App"). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

MASHINGA LTD is the data controller responsible for your personal data. If you have any questions or requests regarding your data, please contact us at pozy@mashinga.uk.

2. Data We Collect

We collect the following categories of personal data when you use Pozy:

Account information: Your name and email address provided via Apple ID (Sign in with Apple).
Photos: Images you choose to upload or interact with within the App.
Purchase history: Records of in-app purchases and subscription status.
Device information: Device model, operating system version, and unique device identifiers.
Usage data: App interactions, feature usage patterns, and session information collected for analytics and crash reporting purposes.

3. How We Use Your Data

We use the data we collect for the following purposes:

To provide, operate, and maintain the App and its features.
To manage your account and authenticate your identity.
To process in-app purchases and manage your subscription.
To diagnose and fix technical errors and crashes.
To analyse usage patterns and improve the App experience.
To communicate with you regarding your account or support requests.

4. Legal Basis for Processing

We process your personal data under the following legal bases as defined by UK GDPR:

Contract performance: Processing necessary to provide the App services you have requested.
Legitimate interests: Analytics and crash reporting to improve App performance and stability.
Legal obligation: Where we are required to retain certain data by law.

5. Data Storage and Security

Your personal data is stored securely on Supabase servers located in the EU West region (Ireland). Supabase is compliant with GDPR standards. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

As MASHINGA LTD is a UK-based company, transfers of personal data between the UK and the European Economic Area (EEA) are governed by the UK's adequacy regulations, which recognise EEA countries as providing an adequate level of data protection.

6. Third-Party Services

We share data with the following third-party service providers solely to the extent necessary for them to perform their services:

RevenueCat: Processes in-app purchase and subscription management. RevenueCat may collect purchase history and device identifiers. Please refer to RevenueCat's Privacy Policy.
Apple Inc.: Processes App Store payments and provides Sign in with Apple authentication. Please refer to Apple's Privacy Policy.
Google Firebase Crashlytics: Collects crash reports and device information to help us identify and fix technical issues. Please refer to Google's Privacy Policy.

We do not sell your personal data to any third party.

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the App services. If you request deletion of your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain certain data to comply with legal obligations.

8. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights:

Right of access (Article 15): You may request a copy of the personal data we hold about you.
Right to rectification (Article 16): You may request correction of inaccurate or incomplete data.
Right to erasure (Article 17): You may request deletion of your personal data where there is no legitimate reason for us to continue processing it.
Right to restriction of processing (Article 18): You may request that we restrict the processing of your data in certain circumstances.
Right to data portability (Article 20): You may request a copy of your data in a structured, machine-readable format.
Right to object (Article 21): You may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at pozy@mashinga.uk. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been processed unlawfully.

9. Account Deletion

You may request deletion of your account and all associated personal data at any time, either through the Settings section within the App or by contacting us at pozy@mashinga.uk. Upon receiving your request, we will permanently delete your data within 30 days, subject to any legal retention obligations. Please note that account deletion does not automatically cancel your Pro Pass subscription — this must be done separately via your Apple ID account settings.

10. Children's Privacy

Pozy is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately at pozy@mashinga.uk and we will take prompt steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the App after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

MASHINGA LTD
Email: pozy@mashinga.uk