Terms of Service
1. Who we are and what these terms cover
Nyblit is provided by App Goblin Ltd, a company registered in England and Wales with company number 16029603. Our registered office is 7, 211-213 St Margarets Road, Twickenham, Middlesex, TW1 1LU, England. In these terms, “Nyblit”, “we”, “us” and “our” mean App Goblin Ltd.
You can contact us at david@appgoblin.co.uk or write to our registered office.
These terms cover Nyblit's apps for Apple devices (the “Native Apps”), our Nyblit Cloud account and synchronisation service (“Nyblit Cloud”), and the browser application at web.nyblit.app (the “Web App”). Together, these are the “Services”. Nyblit helps you organise tasks, projects and workflows for personal or business use. Provisions about a particular feature apply where that feature is available and you use it.
Apple's app licence. The Native Apps are licensed under Apple's Standard End User Licence Agreement, with App Goblin Ltd as the application provider and licensor. That licence and applicable App Store purchase terms continue to apply. These terms supplement the native app licence with Nyblit's account, service and feature terms; they do not replace it. In a conflict concerning the licence to install and use the Native Apps, Apple's Standard EULA governs to the extent permitted by law. Our express purchase, service and support commitments in these terms remain binding, and your statutory rights are unaffected. These terms do not retrospectively remove an existing purchase entitlement.
The Services are offered worldwide where lawful. Features and language availability may differ between platforms. The Web App is currently in English and has no task sharing, chat or AI features at launch. The native AI and reMarkable provisions below describe those native features; they do not promise their availability on the web. Announcements about possible future features are not a commitment to deliver them by a particular date.
2. Accepting these terms and eligibility
These terms apply when you accept them through the Native Apps or the Web App. We present them before you start using the Services or features to which they apply. If you do not agree, do not start using a feature that requires their acceptance. Changes affecting existing users are subject to section 12 and do not retrospectively remove purchase rights. You can save or print a copy for your records.
You must be at least 12 to use the Native Apps, and at least 16 to create or use a Nyblit Cloud account or use the Web App. The Cloud minimum applies whether the account is created through a Native App or the web. Users aged 12–15 may use Local Only or iCloud mode in the Native Apps, but may not create a Nyblit Cloud account or access the Web App.
Nyblit Cloud signup asks for your age band, whether you register through the Web App or a Native App. You must provide it accurately. The Privacy Policy explains how we use it to apply age requirements and restrict optional Web advertising measurement to adults.
If you are under 18, a parent or legal guardian must review the applicable terms and authorise your use. If you select 16–17 when creating a Nyblit Cloud account, you must confirm that they have done so before completing signup. Where local law requires an adult to enter into the agreement, authorise a purchase or provide additional consent, they must do so. You must meet any higher minimum age required by applicable law.
If you accept on behalf of an organisation, you must have authority to bind it, and references to “you” include that organisation.
If you use Nyblit wholly or mainly outside your trade, business, craft or profession, you are a consumer. Clauses expressly limited to business users do not apply to consumers.
Our Privacy Policy explains our handling of personal information. Accepting these terms does not give consent to optional analytics, advertising measurement or marketing; we ask for any necessary consent separately.
3. Access, sign-in and security
You need a Nyblit account to use Nyblit Cloud, and the Web App requires Nyblit Cloud for task storage. Native Apps can instead use Local Only or iCloud mode without a Nyblit Cloud account. Available Cloud sign-in methods are shown on the sign-in screen. Signing in with Apple does not mean that your web task data is stored in iCloud.
If your existing Nyblit data is in iCloud, you must migrate it to Nyblit Cloud before using it on the web. Migration transfers your existing Nyblit data, including archived tasks, shared tasks and their chat history, into Nyblit Cloud. Migration does not automatically delete the source data from iCloud. After migration, changes sync through Nyblit Cloud only; the copy left in iCloud is not kept up to date by that sync. The Privacy Policy explains who processes your data in each storage mode.
You can switch back to iCloud later and transfer your updated Nyblit Cloud data with you. This leaves the source data in Nyblit Cloud and your Nyblit Cloud account open. Subsequent changes sync through iCloud rather than keeping both services in step. Deleting the previous copy is a separate action you control. Use the cloud settings in the Native Apps to manage stored cloud data; Nyblit Cloud data can also be deleted through the Web App. You can separately delete your entire Nyblit Cloud account. Check that the transfer is complete and that you have the information you need before deleting either copy. The Privacy Policy explains applicable retention and deletion rules.
Before migrating in either direction, we encourage you to use Nyblit's manual backup feature to export a .nyb backup file. The underlying backup data uses JSON. You can optionally encrypt that file with a password for added protection. You control where your exported backup is stored and how long it is kept. Keep your backup and any password secure.
Where your plan includes API Access, you can also export supported data through Nyblit's API and compatible integration tools. Moving exported data into another app depends on that app's import requirements; conversion may be needed.
Connections requiring separate permission, such as Gmail, must be authorised again before you use them on the web. Migrating your task data does not automatically authorise the Web App to access a connected account.
You must use an account you are authorised to use and keep your sign-in details and devices secure. Keep authentication tokens private, except API tokens you deliberately provide to authorised tools as described in section 8. Do not use someone else's account without permission. Tell us promptly if you believe someone has obtained unauthorised access to Nyblit through your account.
You are responsible for activity you authorise. You are not automatically responsible for unauthorised activity caused by our failure to take reasonable care.
Sign out when using a shared computer. Browser storage can retain information between visits; the Privacy Policy explains the storage and sign-out behaviour that applies.
Nyblit Web supports Safari, Chrome, Firefox and Edge. Use an up-to-date version of your browser. An internet connection is needed for sign-in and cloud synchronisation. Any other important technical limitations will be described before you purchase access or migrate your data. Some features may differ from the native Nyblit apps. You are responsible for your internet connection and any third-party account or storage charges disclosed by that provider.
4. Permission to use Nyblit
While you comply with these terms and have a valid entitlement, we give you a limited, non-exclusive permission to use Nyblit Cloud and the Web App for your own personal or internal business purposes. The licence to install and use the Native Apps is provided under Apple's Standard EULA, as explained in section 1. You may not resell access or operate a competing hosted service using our software without our written permission.
We and our licensors retain ownership of the software, website design, branding and other materials we supply. You keep ownership of your content, as explained below. Nothing restricts rights you have under applicable law or an applicable open-source licence.
5. Your content and sharing
“Your Content” means the tasks, notes, project information, AI conversations and other material you enter into, migrate to or connect to the Services. We do not acquire ownership of Your Content. The permissions below apply only to information involved in the features you choose; they do not give us access to a private iCloud database or local-only information that is not sent to us.
You give us only the permission necessary to process Your Content to deliver the features you request, maintain and secure those features, and provide support you authorise, in accordance with the Privacy Policy. This includes using service providers where the Privacy Policy describes their involvement. It does not permit us to publish Your Content, sell it, use it in advertising or use it to train general-purpose AI models.
That permission lasts only while we need to handle Your Content to provide the service or complete the deletion and limited retention described in the Privacy Policy. This permission does not give us unrestricted access to your Apple, social or email accounts.
You are responsible for having the rights and permissions needed to enter or migrate Your Content, including information about other people. Where sharing is available in the Native Apps, the recipients you select receive access according to the permissions granted and may retain their own copies. Review those permissions before sharing. Task sharing and chat are not available in the Web App at launch; we will explain permissions and any relevant changes before introducing them there.
Section 14 sets out our data processing agreement for personal information we process in Your Content on your behalf, for personal or business use.
6. Acceptable use
You must not:
- use the Services for unlawful, fraudulent or abusive activity, or infringe another person's privacy or intellectual property rights;
- gain unauthorised access to accounts, systems or data, bypass access restrictions or subscription limits, or distribute malware;
- deliberately disrupt the service or impose an unreasonable load through automated requests;
- use an email integration for unsolicited bulk messages, impersonation or other unlawful communications; or
- copy, decompile or reverse-engineer our software except where applicable law permits it.
You may report suspected security vulnerabilities to our contact address. Nothing here prevents lawful security research or the exercise of statutory rights.
7. Plans, Apple purchases, subscriptions and refunds
All plans include Nyblit Cloud and Web access, subject to the age requirements and applicable plan limits. The free plan allows five non-archived tasks in total. Completed tasks count unless archived.
From the launch of Nyblit Web, new Lifetime sales are replaced by “Purchase Nyblit 2”:
| Entitlement | Access to later major versions |
|---|---|
| Purchase Nyblit 2 | A perpetual Nyblit 2 software licence. Nyblit 3 requires a separate upgrade purchase unless you have another entitlement that includes it. |
| Active subscription | Can transfer to Nyblit 3 without a separate major-version upgrade purchase while subscribed, subject to the subscription's terms. |
| Existing Lifetime or Founder entitlement | Full paid-feature, Cloud and Web access across Nyblit 3 and all future major versions, without further payment. The free-plan task limit does not apply. |
Founder rights apply even where the entitlement was originally awarded without payment. Existing Lifetime and Founder users can move to a supported version without an upgrade charge; their entitlement does not require us to maintain every old version indefinitely.
Nyblit 2 support and retirement. We will support Nyblit 2's Cloud synchronisation and existing web features for three years after Nyblit 3's public release, including security fixes, essential bug fixes and email assistance. This does not promise new features, compatibility with every future operating system or browser, or a particular support response or resolution time. The software licence remains perpetual. The general change provisions do not shorten this support commitment.
Before support ends, users relying solely on Purchase Nyblit 2 must upgrade to Nyblit 3 or export their information and move to another app. We will announce the exact deadline when Nyblit 3 launches, email affected users at least 90 days before deletion, send 30-day and 7-day reminders, and display a prominent in-app warning explaining their options and the consequences.
At the deadline, remaining Nyblit 2 task content in Nyblit Cloud that has not transferred to Nyblit 3 will be deleted from the live service. Recent use does not extend the deadline. The Cloud login account remains open, subject to user-requested deletion and the separate inactivity policy in section 10. The Privacy Policy explains limited record and backup retention.
Purchases and subscriptions. Paid plans are purchased through Nyblit's Apple app. The Web App has no checkout or additional web charge. Apple processes payment under its applicable terms; prices, billing periods, renewals and trial conditions appear before purchase. These terms do not retrospectively remove an existing purchase entitlement. Any future web purchase would require your agreement before charging you.
Manage or cancel subscriptions in your Apple Account; see Apple's cancellation instructions. Cancellation ordinarily stops future renewal, with access continuing through the paid period, subject to the purchase terms and any refund. Deleting your Nyblit account or signing out does not cancel an Apple subscription.
When a subscription expires and you have no other paid entitlement, you return to the free plan. Existing tasks remain available to view, edit and export, even above the five-task limit. Creating tasks is blocked until you have fewer than five non-archived tasks or obtain an appropriate paid entitlement.
Refunds and remedies. Use Apple's refund process or contact us for help. If Apple does not provide a remedy we owe, contact david@appgoblin.co.uk and we will arrange it. If paid features fail to work as described, the applicable remedy may include correction, repeat performance, a price reduction, refund or compensation. Your statutory cancellation, cooling-off and other consumer rights remain unaffected. Section 10 covers refunds where we end access or withdraw promised features or support.
8. Connected services, API access and native AI
Our Privacy Policy explains how service providers help us operate Nyblit and process personal information. Services you separately use, such as Apple or an email provider, have their own terms. Only connect accounts you are authorised to use. Connecting a service does not transfer ownership of that account to us. Review information before sending or uploading it, and verify that important transfers have completed. Deleting information from Nyblit may not reverse a message or transfer already made to another service.
Gmail
When you connect Gmail, you authorise Nyblit to link and display conversations and prepare or send replies using the permissions you grant. We send messages only when you instruct us. Review recipients and message content before sending.
Linked tasks retain thread information, including subjects, participants and short message previews, as explained in the Privacy Policy. Disconnecting an integration stops future authorised access as described there; it does not recall messages already sent or automatically erase saved thread information or your exported backups.
API access
If your plan includes API Access, you can authorise tools using a personal access token with permissions and an expiry you choose. Depending on those permissions, a tool can read, create, edit or delete tasks, projects and workflows; changes sync across your connected Nyblit devices. Give tokens only to tools you trust and grant only the permissions needed. You can revoke a token at any time in My account → API Access. Revocation stops further access using that token; it does not undo changes or remove copies already obtained by a tool. API use is subject to the usage limits in our developer documentation.
A third-party change may affect an integration. We will take reasonable steps to explain and address a material loss of functionality. Our use of third-party providers does not exclude responsibility that the law places on us.
reMarkable Daily Page in the Native Apps
reMarkable Daily Page is a beta integration using an unofficial API that reMarkable does not officially support. It depends on access to reMarkable Cloud, which reMarkable may change, restrict or withdraw. It may stop working temporarily or permanently, and we cannot guarantee continued compatibility or a date for restoring access. Direct questions about Nyblit's integration to us.
The connection grants full access to your reMarkable Cloud account, including the technical ability to read or delete documents. Nyblit uses it to upload your Daily Page PDF and read that page back to find your ticks. It looks through document names to locate the page but does not open other documents.
If you enable Keep recent pages, you authorise deletion of older Nyblit Daily Pages beyond the limit you choose. Otherwise, Nyblit leaves existing documents unchanged. Keep a separate copy of any Daily Page you want to retain before enabling or reducing that limit.
Disconnecting removes the connection from that device. To revoke it completely, remove Nyblit from your device list at my.remarkable.com. Disconnecting does not itself erase PDFs already uploaded or reverse earlier changes. These limitations do not exclude responsibility that the law places on us.
Nyby and AI suggestions in the Native Apps
Nyby is the Native Apps' AI chat assistant. Nyblit also uses Apple's Foundation Models and Apple Intelligence to suggest task statuses, workflows and other organisational information. Availability depends on the feature, supported device, operating system, language and settings. Processing may take place on the device or through Apple's Private Cloud Compute, as explained in the Privacy Policy.
Nyby can take actions in the app, not just produce text. Its tools can carry out app operations, including creating, changing or deleting task information and using supported integrations. When you ask Nyby to perform an action, you authorise it to act on that request within your account permissions and the feature's available controls. This is not permission for unrelated actions or use of another person's account without authority.
AI can misunderstand instructions, produce inaccurate or incomplete information, or make an unintended change. Check important suggestions, dates, statuses, workflows, recipients and message content before relying on them or approving an action. Review the result of actions you request. Do not assume every action will receive a separate confirmation or can be undone. Keep an independent backup before asking Nyby to make substantial changes; dismissing a reply or closing the conversation does not reverse an action already taken.
An AI action can affect live app data and synchronise through your selected iCloud or Nyblit Cloud service. An action involving a connected account can also have effects outside Nyblit. On-device AI processing does not mean that the resulting changes stay on one device. Nyby's saved conversation history remains on the device, as explained in the Privacy Policy.
Use AI features only for lawful purposes and within Apple's Foundation Models acceptable-use requirements. Do not bypass safeguards, use the features to harm others or infringe their rights, or rely on them to make unsupervised decisions with a material effect on someone's health, legal rights, employment or finances. These responsibilities do not make you responsible for our failure to meet our own legal duties.
9. Availability, updates and your data
We will provide the Services with reasonable care and skill and in accordance with their agreed descriptions. We do not promise uninterrupted access or that every browser, device or third-party integration will always be compatible.
We may perform maintenance and make updates for security, legal compliance or service improvements. Where reasonably possible, we will give advance notice of maintenance that is likely to cause a significant interruption.
You use Nyblit at your own risk in relation to the information you supply, the instructions you give and the decisions you make using its results. You are responsible for checking task details and deadlines and keeping an appropriate independent copy of information you cannot afford to lose, using the manual .nyb backup feature where appropriate. Allow synchronisation to finish before closing a session. Password encryption of a backup file is optional. These responsibilities do not exclude our responsibility for failing to provide the agreed service with reasonable care and skill, or limit your statutory rights. Section 11 explains our responsibility to you.
Productivity and health. Nyblit, including Nyby and AI suggestions, is a general productivity and organisational tool. References to ADHD or other differences in attention and organisation describe the design and possible everyday uses of the app; they do not promise a clinical benefit. Nyblit is not intended to diagnose, treat, cure or prevent ADHD or any other medical condition, and does not replace advice or treatment from a qualified healthcare professional. Do not use Nyblit or its AI responses to make medical decisions or delay seeking professional advice. Nyby is an AI assistant, not a healthcare professional or emergency service.
Nyblit is not an emergency notification system. Reminders can be affected by browser permissions, connectivity and device settings. Do not rely on a reminder as your only safeguard for a critical deadline or safety-related action.
Beta features. Features labelled beta, preview or experimental, including Gmail integration, reMarkable Daily Page and Nyby where offered on that basis, are still being tested. They may contain errors, produce incomplete results, interrupt synchronisation or cause unintended changes or loss of data. Using them is optional. Keep an independent backup and check important results, communications and changes; do not rely on a beta feature as your only record of important information.
We may change, suspend or end a beta feature as testing progresses, and do not promise that it will become a permanent feature or retain the same design. We will explain material limitations before use and give reasonable notice of withdrawal where practicable. Sections 7, 10–12 continue to apply to promised paid features, support, notices and remedies. A beta label does not remove our duty to use reasonable care and skill or your statutory rights, and we will not use it to withdraw an existing contractual commitment without the applicable remedy. The Privacy Policy continues to apply to beta features; testing does not grant unrestricted access to your information.
10. Suspension, account closure and ending access
We may restrict or suspend access to affected accounts or features where reasonably necessary to investigate a serious breach of these terms, prevent fraud or security harm, or comply with law. Subscription expiry is handled as described in section 7 and does not, by itself, end your free-plan access.
Decisions to suspend or close an account for suspected misuse receive human review. We will act proportionately, explain the reason where lawful and safe, and normally give you a reasonable opportunity to remedy a breach. Immediate action may be needed for a serious security risk, unlawful activity or legal requirement. You can contact us to request a further review.
We may end your access for a serious or repeated breach that cannot reasonably be remedied or remains unresolved after a reasonable opportunity to put it right.
If we discontinue an affected Service or end a paid agreement for reasons other than your breach, we will give at least 30 days' advance notice and a reasonable opportunity to export Your Content before access ends. We may shorten this notice or restrict export only to the extent an urgent legal or security requirement makes it necessary. We will explain the position as soon as reasonably possible and provide any assistance or remedy required by law. This provision does not give us a general right to shorten the Nyblit 2 support period or replace the longer end-of-support notice commitments in section 7.
If we end an affected paid subscription agreement for reasons other than your breach, we will refund the unused part of its prepaid subscription period. For one-time purchases, if we withdraw promised paid features or support early, we will provide an appropriate refund or price reduction, taking account of what remains usable and preserving any greater remedy required by law. Section 7 explains the process for Apple purchases and our responsibility to arrange any remedy we owe. These remedies do not give us a general right to withdraw our contractual commitments.
You can delete Nyblit Cloud data through the cloud settings in the Native Apps or the deletion controls in the Web App, or choose to delete your entire Nyblit Cloud account. Deleting your account immediately removes the account and its task content from the live service. Contact us if you need help. The Privacy Policy explains any limited retention of other records and backup copies. Nyblit Cloud is shared across connected Nyblit devices: deleting cloud data may therefore affect the native apps as well as the web. It does not automatically delete a separate copy left in iCloud after migration.
Nyblit Cloud account closure does not itself delete Local Only or iCloud data, cancel a perpetual native app licence or cancel an Apple subscription. Before closing your account, export any information you need using the manual .nyb backup feature and manage your Apple subscription separately.
We do not delete your Nyblit Cloud account or task content solely for inactivity while you have an active paid subscription, an existing Lifetime purchase or a Founder entitlement.
The following inactivity policy applies to free-plan accounts and holders of the new “Purchase Nyblit 2” option, unless they also have an active paid subscription, an existing Lifetime purchase or a Founder entitlement. After 12 consecutive months of inactivity, we will email the address linked to your Nyblit account with a warning that the account and its Cloud task content may be deleted. You will have at least one further calendar month from that warning to return or export your information before deletion. Signing in to your Nyblit Cloud account or using Nyblit Cloud through any Native App or the Web App counts as activity, cancels any pending inactivity deletion and starts a new inactivity period. The warning will explain how to keep your account active and export a manual .nyb backup.
If you purchased Nyblit 2, inactivity closure of your Cloud account does not cancel your perpetual Nyblit 2 licence. You remain entitled to restore that purchase without buying Nyblit 2 again. Restoring the purchase does not recover task content deleted under this policy.
11. Our responsibility to you
Nothing in these terms limits liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any liability or rights that cannot lawfully be limited.
For consumers: we are responsible for foreseeable loss or damage caused by our breach of these terms or failure to use reasonable care and skill. Loss is foreseeable if it was obvious or reasonably contemplated when we made the agreement. This includes synchronisation, data loss or third-party failures for which we are legally responsible.
We are not responsible for losses not caused by our breach of contract or another legal duty, unforeseeable losses, or business losses arising from consumer use. Your statutory rights remain unaffected.
For business users only: subject to the first paragraph of this section and any liability that cannot lawfully be limited, we will not be liable for indirect or consequential loss, or loss of profits, revenue, business opportunity or anticipated savings.
Our total liability to each business customer for events in a contract year is limited to the higher of £1,000 and the total fees that customer paid for Nyblit in that contract year. Each contract year runs for 12 months from acceptance of these terms or its anniversary. Connected events count towards the year in which the first event occurred. This cap does not limit refunds promised in these terms, individuals' statutory data-protection rights, or liabilities that cannot lawfully be limited. It does not apply to consumers.
12. Changes to the Services or these terms
We may make reasonable changes to address legal or security requirements, changes to third-party services, or improvements to Nyblit. A change must not be used to remove your statutory rights or retrospectively alter an accrued claim.
For a change to these terms or the Services that materially disadvantages you, we will give at least 30 days' advance notice, explain what is changing, and provide a reasonable opportunity to export Your Content before the change takes effect. You may end the affected paid agreement before the change takes effect. If you end a subscription agreement for this reason, we will refund the unused part of its prepaid subscription period. For one-time purchases, an early withdrawal of promised paid features or support is subject to the refund or price-reduction policy in section 10. Your statutory rights remain unaffected. We will obtain fresh agreement where required by law. These general notice provisions do not shorten the Nyblit 2 support period or replace the longer end-of-support notices in section 7.
An urgent legal or security requirement may make a shorter notice period or a restriction on export necessary. Any such exception will be limited to what is necessary, and we will explain it as soon as reasonably possible and preserve any cancellation or refund rights required by law. Minor clarifications that do not reduce your rights may take effect when published.
13. Complaints, governing law and other terms
Please contact us at david@appgoblin.co.uk if you have a complaint. We will consider it fairly and try to resolve it with you. You are not required to complete an internal complaints process before exercising a legal right.
These terms are governed by the law of England and Wales. If you are a consumer, you retain the mandatory protections of the law of your country of habitual residence where applicable. You may bring proceedings in any court available to you under applicable consumer law, including the courts of your home jurisdiction where that law permits. For business users, the courts of England and Wales have exclusive jurisdiction.
If a provision is unenforceable, the remaining provisions continue to apply so far as legally possible. A delay in enforcing a term is not a waiver. We may transfer this agreement to a successor to the service only where that does not reduce your rights or protections; we will notify you. You may not transfer a paid entitlement except as your plan or applicable law permits.
14. Processing your task content
This section forms our data processing agreement for personal information in Your Content that we process solely on your instructions through Nyblit Cloud and its connected features, whether accessed from the Native Apps or the Web App. It applies to personal and business use. It does not give us access to information held only on your device or in your private iCloud database. App Goblin Ltd acts as processor or, where you act for another controller, as sub-processor. Each party must meet its applicable data protection obligations. This section governs that processing if another provision conflicts with it. Information we use for our own account administration, billing or other independent purposes is covered separately by the Privacy Policy.
Processing covered. We receive, store, organise, synchronise, retrieve, export and delete Your Content in Nyblit Cloud to provide the features you request, including authorised integrations and support. Processing continues while we provide those services and until return or deletion is completed. Content may contain names, contact details, correspondence, task information and other information you choose to submit about yourself, family, contacts, staff, customers, suppliers or other people, including sensitive information such as health details where lawfully supplied.
Your responsibilities. You determine what information to submit and the purposes for using it. Where data protection law applies to your use, you act as controller or as a processor authorised by a controller, and must have a lawful basis, provide required privacy information and establish any additional legal conditions for sensitive information. If acting for another controller, you must have authority to appoint us and give instructions. Purely personal or household use may be exempt from your GDPR obligations; this section does not require you to act as a business or waive that exemption. Our commitments below and our own legal duties continue to apply.
We agree to the following:
- Instructions. We process this information only on your documented instructions, including these terms, your use of the service and further written instructions consistent with it. This applies to international transfers, which must also meet applicable transfer requirements. If applicable UK or EU law requires otherwise, we will inform you before processing unless legally prohibited. We will tell you immediately if we believe an instruction infringes applicable data protection law.
- Confidentiality and security. Anyone authorised to process the information must be bound by confidentiality. We will maintain the measures required by Article 32 of the applicable GDPR, including encryption in transit and at rest, restricted access, and appropriate measures for service resilience, recovery and regular security assessment. The Privacy Policy's limits on human access continue to apply.
- Service providers. You give general written authorisation for us to use sub-processors for the service-provider functions described in the Privacy Policy. We will provide their identities, locations and functions on request, notify you of intended additions or replacements before they take effect, and allow a reasonable opportunity to object on data protection grounds. We will impose equivalent data protection obligations by written contract and remain responsible for their performance. If a reasonable objection cannot be resolved, you may end the affected service; the applicable refund provisions in section 10 apply.
- Assistance and incidents. Taking account of the processing and information available to us, we will use appropriate measures to help you answer individuals' rights requests and meet your obligations concerning security, breach notification, impact assessments and regulatory consultation. We will notify you without undue delay after becoming aware of a personal data breach affecting this information and provide available information and assistance as our investigation progresses. Contact david@appgoblin.co.uk for assistance.
- Return and deletion. When the processing service ends, we will, at your choice, return or securely delete the information and delete remaining copies, unless applicable UK or EU law requires retention. Export and account-deletion controls support these instructions; contact us if assistance is needed. Any copies awaiting expiry in recovery backups will be kept beyond ordinary use and deleted through the backup cycle. If a backup is restored, we will reapply the deletion before the affected information returns to ordinary use.
- Demonstrating compliance. We will provide the information necessary to demonstrate compliance with these obligations and allow and assist audits and inspections by you or your appointed auditor. We may agree reasonable notice, confidentiality and security arrangements to protect other customers without preventing legally required access or oversight.