Legal
Privacy Policy
This Privacy Policy explains how SUBABYTE LTD (“we”, “us”) handles information in connection with our mobile applications and this website. Contact: contact@subabyte.co.uk. Related: Terms of Use · Support.
Jump to: Play with Krypto · NightOwl Responders · Website
A. Play with Krypto
1. Summary
- We do not require you to create an account to use the app.
- Learning labs run on your device. We do not operate a backend that receives your lab text, keys, or codes.
- Some preferences and saved recipes are stored on your device only.
- An optional “nearby friends” feature uses your local network to talk to nearby devices you choose to join — not our servers.
- We do not sell personal data.
2. Information we process
| Category | Examples | Where it stays |
|---|---|---|
| App preferences | Whether you have completed the intro | On your device |
| Saved learning content | Custom encodings; saved encryption recipes | On your device |
| Demo crypto material | Keys, secrets, challenges, OTP codes you generate in labs | On your device (not uploaded by us) |
| Nearby session data (optional) | Display name, public keys, demo ledger messages with peers | Local network / peer devices only |
| Support email | Whatever you write when you email us | Our email inbox, to respond to you |
The current shipping app does not use advertising identifiers, analytics SDKs, crash reporters that phone home, accounts, or cloud sync operated by us.
3. Local Network / nearby friends
If you use the cryptocurrency lab’s nearby-friends mode, iOS may ask for Local Network permission. The app uses Bonjour / Multipeer Connectivity so nearby devices can join a temporary educational session. If you never use that feature, the rest of the app does not need it.
4. Sharing you initiate
If you share a custom encryption recipe via the system Share Sheet, content leaves your device only because you chose a destination (Messages, Mail, Files, etc.). Shared recipes are designed to include prompts for secrets, not the secret values themselves.
B. NightOwl Responders
1. Summary
- Sign in with Apple identifies your NightOwl account on the device.
- iCloud on the device is required so peers can discover that you are online (CloudKit “doorbell”).
- Chat topics and message bodies are stored on members’ devices and travel over encrypted peer-to-peer links — not into a SubaByte message database.
- Optional group metadata backup (groups, membership, join codes, on-call shifts) may use your iCloud private database — never topics, messages, or images.
- Optional tips or support subscriptions are processed by Apple; we do not receive your full payment card details.
- We do not sell personal data.
2. Information involved
| Category | Examples | Where it stays |
|---|---|---|
| Apple account | Sign in with Apple user identifier; optional relay email | On device / Apple; used to identify your NightOwl session |
| Profile | Display name you choose | On your devices and shared with group peers over P2P |
| Group membership | Group IDs, roles, join codes, invite records | On member devices; optional iCloud private backup of metadata only |
| Chat content | Topics, text, images, reactions | On member devices; encrypted P2P transfer — not stored by SubaByte |
| Presence / handshake | Ephemeral signalling so peers can connect (SDP/ICE style data) | Apple CloudKit (handshake/presence); not message bodies |
| Connectivity aids | STUN lookups to help establish WebRTC (e.g. public STUN such as Google’s) | Processed by the STUN operator under their terms; used to assist connection, not to host chat |
| Device permissions | Camera (QR), Local Network (nearby add), Notifications (on-call alerts) | On device; alerts are designed not to include message content |
| Purchases | Optional tip or subscription product identifiers / entitlement state | Apple App Store / on device via StoreKit |
| Support email | Whatever you write when you email us | Our email inbox, to respond to you |
3. What we do not do
- We do not host a NightOwl chat archive you can restore from our servers.
- We do not put message bodies into iCloud as chat backup.
- We do not use advertising SDKs or sell your data.
- On-call notifications are designed never to include message content.
4. Your responsibilities
You are responsible for what you send in a group. The optional on-device sensitivity aid can miss confidential content or false-alarm. Do not use NightOwl as a substitute for systems your employer or regulator requires.
5. Account & deletion
You can sign out in the app and delete the app to remove on-device data under your control. Peers may retain copies of messages already delivered to their devices until topics expire or they delete the app. To revoke Sign in with Apple access, use Apple ID settings. For support emails you sent us, contact contact@subabyte.co.uk to request deletion. We are improving in-app account deletion ahead of App Store release where required.
C. This website
This site is a static brochure. We do not run a user account system on the website. If you email us, we process your message to reply. Hosting (e.g. GitHub Pages) and DNS providers may process standard technical logs under their policies.
D. Shared legal terms
1. Legal bases (UK GDPR)
Where UK GDPR applies, we rely on:
- Legitimate interests — operating and supporting our apps and website.
- Contract / steps at your request — providing the app you chose to use; responding to support emails.
- Consent — where required for optional device permissions.
2. Retention
- On-device app data remains until you delete it in-app (where available) or delete the app.
- NightOwl topics are designed to expire (24 / 48 / 72 hours).
- Support emails are kept only as long as needed to handle your request and meet basic record-keeping needs.
3. Your rights (UK)
Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing, and to complain to the Information Commissioner’s Office (ICO). To exercise rights related to information you sent us by email, contact contact@subabyte.co.uk.
4. Children
Our apps are general tools, not directed at children. We do not knowingly collect personal data from children via the apps. If you believe a child has sent us personal information by email, contact us and we will delete it.
5. Third parties
Apple may process data related to App Store distribution, Sign in with Apple, iCloud / CloudKit, push delivery, device services, and In-App Purchase under Apple’s policies. NightOwl may contact public STUN servers to help establish peer connections. We do not control Apple’s or STUN operators’ processing.
6. International transfers
On-device app data stays on your device (and peer devices for NightOwl chat). CloudKit and Apple services may process handshake or account data according to Apple. If you email us, your message is processed by our email provider.
7. Changes
We may update this policy from time to time. The “Last updated” date at the top will change. Continued use of an app after changes means you should review the updated policy.
8. Contact
SUBABYTE LTD
Registered in England and Wales (registered office available on Companies House)
Email: contact@subabyte.co.uk
Website: https://subabyte.co.uk
Apps: Play with Krypto · NightOwl Responders