Privacy Policy

1. Who we are

App Man is a trading name of Rockul AI Ltd, a company registered in England and Wales (company number 17329373), registered office 66 Paul Street, London EC2A 4NA ("App Man", "we", "us", "our"). We design and build mobile apps, websites, games, bespoke software, AI systems and graphic design for clients worldwide.

Rockul AI Ltd is the data controller (and, under some laws, the "business" or "organisation") responsible for personal data collected through app-man.co.uk. For any privacy enquiry, email privacy@rockul.com.

2. What we collect

We only collect what you choose to send us, plus the basic technical data any website receives.

• Enquiry details — when you use the quote form: your name, email address, phone number (optional), the type of project you select, and whatever you write in the message box.
• Technical data — your IP address, browser type, device type, referring page and the time of your visit, handled by our hosting provider as part of serving and protecting the site.
• Your display preference — whether you chose light or dark mode, stored in your own browser.

We do not run advertising trackers, analytics profiling or social media pixels on this site. We do not collect special category data, and you should not send it to us through the form.

3. How we use it

• To read your enquiry, reply to you, and prepare a quote.
• To carry out work you engage us for, and to communicate with you about it.
• To keep the site available, fast and secure, and to prevent spam and abuse.
• To meet our legal, tax and accounting obligations.

We do not sell or share your personal data for advertising, we do not use it for automated decision-making or profiling, and we do not use it to train AI models.

4. Legal bases (UK and EU GDPR)

• Legitimate interests — responding to an enquiry you sent us, running and securing our website, and keeping records of our work.
• Performance of a contract — where you engage us for a project, to deliver that project.
• Legal obligation — where we must keep records, for example for tax and accounting.

5. Who we share it with

We use a small number of service providers who process data on our behalf:

• FormSubmit — delivers quote form submissions to our inbox. Your form contents pass through their service.
• Cloudflare — hosts and serves this website and provides security and content delivery. Cloudflare processes request data including IP addresses.
• Google Fonts — the site loads its typefaces from Google's font servers, which receive your IP address as part of that request.
• Apple iCloud Mail — our email provider, where your enquiry is received and stored.

We may also share data with our accountants or professional advisers where necessary, or with authorities where the law requires it. We do not share your data with anyone else, and we have never sold personal data.

6. International data transfers

We are based in the United Kingdom and we work with clients around the world. If you contact us from outside the UK, your personal data will be transferred to and stored in the UK, and some of the providers above operate servers elsewhere, including in the United States and the European Union.

Where personal data leaves the UK or the EEA, it is protected by appropriate safeguards — an adequacy decision, the UK International Data Transfer Addendum, or EU Standard Contractual Clauses, as applicable. You can request details of the safeguards used by emailing us.

7. How long we keep it

• Enquiries that do not become projects — up to 24 months, then deleted.
• Client project records — for the duration of the engagement and then up to 7 years, to meet UK accounting and tax requirements.
• Server and security logs — retained by our hosting provider for a short period, typically under 30 days.

8. Cookies and local storage

This site sets no advertising or analytics cookies, so there is no consent banner. Your light or dark mode choice is saved in your browser's local storage so the site remembers it next time. That value stays on your device, is never sent to us, and you can clear it by clearing your browser's site data.

Cloudflare may set a strictly necessary cookie to protect the site from malicious traffic.

9. Your rights — UK and EU (GDPR)

If you are in the UK, the EU or the EEA you have the right to:

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased, where we have no continuing obligation to keep it.
• Restrict how we use your data, or object to our use of it.
• Receive your data in a portable format, or have it transferred to another provider.
• Withdraw consent at any time, where we rely on consent.

Email privacy@rockul.com to exercise any of these. We respond within one month and there is no charge.

10. California residents (CCPA / CPRA)

If you are a California resident you have the right to know what personal information we collect and why, to request a copy of it, to have it corrected, to have it deleted, and to limit the use of sensitive personal information. You also have the right not to be discriminated against for exercising these rights.

In the past 12 months we have collected identifiers (name, email, phone, IP address) and your own commercial enquiry content, for the business purposes described in section 3. We have not sold or shared personal information as those terms are defined under the CCPA/CPRA, and we do not sell the personal information of minors. To make a request, email privacy@rockul.com — we will verify your identity by replying to the email address we hold. You may use an authorised agent.

11. Other US states

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana or another US state with a comprehensive privacy law, you have broadly similar rights to access, correct, delete and port your personal data, and to opt out of targeted advertising, sale, and profiling. We do not carry out any of those three activities. Requests and appeals go to privacy@rockul.com.

12. Canada, Australia, New Zealand, Brazil and elsewhere

Wherever you are, we apply the same standard: we collect only what we need, tell you what we do with it, keep it secure, and give you access to it and deletion on request.

• Canada (PIPEDA) — you may access your personal information and challenge its accuracy, and complain to the Office of the Privacy Commissioner of Canada.
• Australia (Privacy Act / APPs) — you may access and correct your personal information and complain to the Office of the Australian Information Commissioner.
• New Zealand (Privacy Act 2020) — you may access and correct your information and complain to the Office of the Privacy Commissioner.
• Brazil (LGPD) — you have rights of confirmation, access, correction, anonymisation, portability and deletion, and may complain to the ANPD.
• Anywhere else — if your local law gives you rights we have not listed, contact us and we will honour them so far as that law applies to us.

13. Security

The site is served over HTTPS with a valid TLS certificate. Access to enquiry data is limited to the people who need it to respond to you. No system is completely secure, but we take reasonable technical and organisational measures to protect your information, and we will notify you and the relevant regulator where a breach requires it.

14. Children

This site and our services are aimed at businesses and adults. We do not knowingly collect personal data from anyone under 16 (or under 13 in the United States). If you believe a child has sent us personal data, contact us and we will delete it.

15. Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will be made clear on the site.

16. Contact and complaints

For any question about this policy or your personal data, email privacy@rockul.com or use the contact form.

If you are not satisfied with our response you can complain to your local data protection authority. In the UK that is the Information Commissioner's Office at ico.org.uk or 0303 123 1113. In the EU it is the supervisory authority for your country. Elsewhere, it is the regulator named in section 12.