Legal
Privacy Policy
This policy explains what personal data the Nullset iOS app and the website at mynullset.com (together, “Nullset”) collect, why, and the choices you have. Nullset is operated by Ai Miyuki, an individual based in the United Kingdom, who is the data controller for the personal data described here. You can contact us at any time at support@mynullset.com.
Summary
- You can browse the catalogue without an account.
- If you create an account, we store only what is needed to run it: your sign-in details, your profile, and your wishlist and collection.
- We do not show ads, sell your data, or track you across other apps and websites. Nullset contains no advertising or analytics SDKs.
- You can delete your account and its data at any time from within the app.
Data we collect
Account information
You sign in with Google or with Sign in with Apple. We receive and store a unique account identifier from that provider, your email address and your name. If you use Sign in with Apple and choose “Hide My Email”, we receive an Apple relay address instead of your real email address. For Sign in with Apple we also store an encrypted token that lets us revoke Nullset’s access with Apple when you delete your account. We never see your Google or Apple password.
Profile information you choose to add
You can edit your display name, add a location in your own words (for example a city), and upload a profile photo. Photos are taken with your camera or chosen from your photo library only when you start that action, and only the photo you pick is uploaded. Location is optional free text; Nullset does not access your device’s location services.
Your wishlist and collection
We store the catalogue pieces you add to your wishlist and to your collection so that they are available whenever you sign in.
Brand requests
If you suggest a brand to add, we store the brand name you type and send it to us by email. Brand requests are not linked to your account.
Technical and device data
When the app or website contacts our servers, our hosting provider processes technical information such as your IP address, the time of the request, the address requested and your device or browser type. This is used to deliver the service, keep it secure and diagnose errors, and is kept only for a short period. On your device, the app stores your sign-in session in the iOS Keychain and remembers your preferred currency; this data stays on your device.
How we use your data
- To create and secure your account and keep you signed in.
- To show your profile, wishlist and collection back to you.
- To review brand requests and improve the catalogue.
- To answer messages you send us.
- To keep Nullset secure, prevent abuse and fix problems.
We do not use your data for advertising, profiling or automated decisions that affect you.
Legal bases (UK GDPR)
- Contract: account, profile, wishlist and collection data are needed to provide the service you sign up for.
- Legitimate interests: security, troubleshooting, brand requests and responding to messages.
- Consent: access to your camera and photo library, which you can withdraw at any time in iOS Settings.
Who we share data with
We do not sell or rent personal data. We share it only with service providers that process it on our behalf, under contracts that require them to protect it:
- Cloudflare, Inc. hosts our servers, database, file storage and email delivery.
- Google and Apple verify your identity when you choose to sign in with them, under their own privacy policies.
To show prices in your currency, the app downloads public exchange rates from Frankfurter (api.frankfurter.dev). No account information is sent with that request. The website loads its typeface from Google Fonts, which receives your IP address to deliver the font files.
Catalogue pages link to brands’ own websites. If you follow those links, the brand’s privacy policy applies to what happens there.
We may disclose information if required by law, or to protect the rights, safety or property of our users or others.
International transfers
Our providers may process data outside the United Kingdom, including in the United States and the European Economic Area. Where they do, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep data
We keep your account data for as long as your account exists. When you delete your account, your profile, profile photo, wishlist, collection and sign-in links are deleted from our database immediately, and any Sign in with Apple authorisation is revoked. Copies may remain in encrypted backups for up to 30 days before they are overwritten. Brand requests, which are not linked to accounts, are kept for as long as they are useful for maintaining the catalogue. Server logs are kept for a short period for security and troubleshooting.
Deleting your account
In the app, open Settings, then Delete Account. Deletion is immediate and cannot be undone. If you cannot access the app, email support@mynullset.com from the address on your account and we will delete it for you.
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to correct it, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. To exercise any of these rights, email support@mynullset.com. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk), or to your local data protection authority if you live outside the UK.
Children
Nullset is intended for people aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child has created an account, contact us and we will delete it.
Security
Data is encrypted in transit using HTTPS. Sign-in sessions are stored in the iOS Keychain, Sign in with Apple tokens are stored encrypted, and access to our systems is restricted. No system is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires it.
Changes to this policy
If we change this policy we will update the effective date above, and for significant changes we will let you know in the app before they take effect.
Contact
Ai Miyuki, operator of Nullset
support@mynullset.com