Privacy policy
Signal Guard · DIY Apps Studio
Last updated: October 24, 2026
This “Privacy Policy” forms an integral part of our End User License Agreement (“EULA”). It covers the processing and transfer of personal data collected or processed when you access or use the Signal Guard mobile application (“we”, “us” or “our”) or our services, as described in the applicable EULA (respectively, the “App” and “Service”).
This Privacy Policy describes the data we may collect, its use and disclosure, the measures we take to protect it, and how you can exercise rights concerning your Personal Data, defined below. Where applicable, it addresses the requirements of the EU General Data Protection Regulation (“GDPR”), the Brazilian General Data Protection Law as amended by Law No. 13,853/2019 (“LGPD”), the California Consumer Privacy Act (“CCPA”), and the other US state laws discussed below.
The data collection practices described here apply to all users of our App and Services (“you” or “your”).
Capitalised terms that are not defined in this Privacy Policy have the meanings given to them in the EULA.
For questions about this Privacy Policy or our handling of data, contact support.signalguard@diyappsstudio.com.
Contents
C. Data sets we collect and for what purpose:
D. How we collect your information:
E. SDK & tracking technologies:
F. Data sharing – categories of recipients we share personal data with:
I. International data transfer:
K. Notice of right to opt out of sale/sharing
L. Eligibility and children privacy:
II. Jurisdiction-specific notices:
B. Additional notice to colorado residents
2. How to submit A request under CPA?
C. Additional notice to virginia residents
1. How to submit A request under VCDPA?
D. Additional notice to connecticut residents
1. How to submit A request under CDPA?
E. Additional notice to utah residents (effective January 2024)
I.Privacy notice
A.Policy amendments:
We may amend this Policy from time to time at our sole discretion. The latest version will remain available on the website, with its update date shown under the “Last Modified” heading. We will notify you of material changes and obtain consent when applicable law requires it. Amendments take effect within 30 days after the modified Policy is displayed. Review the Policy periodically to stay informed about our current privacy practices.
B. Contact information:
C. Data sets we collect and for what purpose:
This section explains the purposes and lawful bases for processing your personal data, what we mean by “personal” and “non-personal” data, and the technical processing involved.
Non-Personal Data
When you interact with our website or Services, we may obtain aggregated information that is non-personal and does not identify you (“Non-Personal Data”). It may become available through your access to and use of the Services. We do not know the identity of the user from whom it comes. Examples include aggregated usage information and technical details sent by your device, such as browser or device type, preferred language, date and time stamps, and country location.
Personal Data
Through your access to or interaction with the website or Services, we may also collect identifiable information, either directly or indirectly. Information that identifies a person, or that could reasonably be used to identify a person, is “Personal Data”. The following table sets out the types collected, the processing purposes and the lawful bases.
Some information described in this Policy, including health information, may qualify as “Special Categories of Personal Data” or sensitive personal information under applicable law. Such information is processed only where a feature you choose requires it, for the purposes described in the table below, and subject to the applicable permission and consent requirements. Health information is processed only on your device and is not transmitted to our servers.
The table describes the Personal Data, processing purposes and operations, and lawful bases.
Data set | Purpose and operations | Lawful basis |
|---|---|---|
Registration information: If an App requires registration and an account, we collect the Personal Data requested during registration, such as your full name and email address. You will also receive a username and password for the account. You represent and warrant that you will keep those details and your password confidential and will not give us inaccurate, misleading or false information. | We use registration information to perform our contract with you, establish your account and enable access to the Services. We may also use your Personal Data for our legitimate interests, including marketing messages, promotions and offers about the Services. To unsubscribe, contact support.signalguard@diyappsstudio.com. Even if you unsubscribe from direct marketing, we may retain your contact details and send service information, including invoices and subscription rates. | Account registration information is processed to perform our contract with you. Direct marketing is based on our legitimate interest. |
Contact information: When you contact us voluntarily, you may need to supply your name, job title, company name, email address (“Contact Information”), and any other information you choose to share. | We use this information to answer your enquiry. If you join our Members Club, we also use your Contact Information to send Offers and marketing material. | Our legitimate interest is the basis for processing Contact Information. We may retain correspondence when legally required. |
GPS location information: Some features require permission to access GPS location. Certain features also use “Access Fine Location” permission in the background while the App is in use, to locate Wi-Fi networks and connections needed for the Services. | We process this information to provide the Services and use fine location access to offer Wi-Fi networks appropriate to your location. Processing can run in the background of your mobile device to display a relevant network list. You can block background location access in device settings. GPS location information is not stored on our servers; all processing takes place on your device. | We process this information only after your active, explicit consent through in-app notifications. |
Push notifications: We may retain a Firebase Cloud Messages token. To stop receiving notifications, disable them in your device settings or uninstall the App. | The token lets our server send push notifications to users. | Because the token is Non-Personal Data, a lawful basis is not required. |
In-app payment information: Payments for the App and Services are in-app payments governed by the relevant App Store terms and privacy policy. See the linked Google Terms of Service, Google Privacy Policy, App Store Terms of Use and App Store Privacy Policy. | We use in-app payment processors. Only the applicable app store provider processes registration and payment information. We do not store or process Personal Data when you make a payment. We receive an order number associated with a non-identifiable user ID generated when the App is installed. | Payment Information is processed to perform our contract with you and supply the Services. |
Log data and unique identifiers: If an App error occurs, third-party providers collect information for us as “Log Data” or “Crash Data”. This may include your device's “IP” address, name, operating-system version, App configuration during use, the date and time of use, and other statistics. | Although this information usually does not include Personal Data, we treat it as Personal Data because it may allow us to identify you with reasonable effort. | We rely on our legitimate interest in protecting and optimising the App and Services to process this data. |
Installed applications: On installation of our App, we may collect device information that includes a list of installed apps. Because this can contain identifying information, we treat it as Personal Data. | We use this information to maintain, support, improve, protect and manage the App and Services. | Processing relies on your consent through the native in-app permissions. |
Profiling data: We may show advertisements in the App. Advertising partners may place an SDK, described below, and collect data about you to display advertising. To prevent interest-based advertising through advertising identifiers, you can reset advertising settings or opt out through your device settings, usually under “Privacy” or “Ads”. Resetting or opting out does not necessarily remove advertisements: you may still see ads in the App, but they will not be targeted to you. These choices may make the experience less enjoyable. | Partners use this information to manage and deliver advertising more effectively and personally. This includes contextual, behavioural and interest-based advertising, and retargeting, based on your activity, preferences or other information available to us, our business partners or advertisers. | Where your jurisdiction requires consent, we process this information on the basis of consent supplied through our cookie manager or similar technologies. |
Photos and videos: When you use a designated feature in the relevant App, we ask you to provide photos, images or videos of yourself (“Content”) for editing and animation. Although we cannot prevent you from providing Personal Data in photos, we use that data only to supply the Service. | We process Content to supply the Services and the editing or animation you request. For example, an Emoji animation uses the original photograph you provide. We retain the original and the animation for as long as you use the Services. Photos and videos are not stored on our servers; all processing is on your device. | We rely on consent through native in-app permissions to process this information, perform our contract with you and provide the Services. |
Microphone and audio: The dialler feature available in some of our Apps requires microphone permission. | We use this permission to provide the dialler. You must actively enable it through in-app permissions or mobile settings, and can disable it at any time. Depending on the permission disabled, some or all features may stop working properly. We process audio and use the microphone only for the dialler, and do not store audio. No audio files or information accessible through these permissions are stored on our servers; processing is confined to your device. | Processing relies on your consent through native in-app permissions to perform our contract and provide the Services. |
Call log and contacts: Some Apps include a dialler that requires permission to access your call log and contacts. | These permissions support the dialler and identify callers using your contact list. You must actively enable them through in-app permissions or mobile settings. You may disable them at any time, but doing so can affect some or all features. Contacts and call logs are not stored on our servers; all processing takes place on your device. | We process this information with consent through native in-app permissions to perform our contract and provide the Services. |
Bluetooth and network: Through Bluetooth and network permissions, we may collect the devices and networks “visible” to your device and its connection history. | These permissions enable the Services. You must actively enable them in the App or mobile settings. They can be disabled at any time, although some or all features may then fail to work properly. | Your consent through native in-app permissions provides the basis for this processing to perform our contract and supply the Services. |
Calendar: Some Apps provide new designs for your device. Applying those designs requires calendar access. | Calendar permission lets us apply the design to your device and calendar. It must be actively enabled through in-app permissions or mobile settings. You can disable it at any time, but this may affect some or all features. We do not store on our servers any data processed or accessed through calendar permissions; processing takes place only on your device. | We process the information on the basis of consent through native in-app permissions to perform our contract and provide the Services. |
Health data: Our Apps may access and process health-related information. It is processed only on your device. We do not send it to our servers or take action that would cause it to leave the device. | We use this data to provide certain features and support App performance. Processing relies on your consent through native in-app permissions to perform our contract and supply the Services. We do not store your contacts or call log on our servers, and all processing takes place on your device. | This processing is based on consent through native in-app permissions to perform our contract and provide the Services. |
The operations carried out for each purpose and lawful basis in the table may vary. They generally comprise automated activities such as collection, storage, use, disclosure by transmission, erasure or destruction. Transfers to third countries, discussed in the Data Transfer section, rely on the same lawful bases stated in the table.
We may also use Personal Data to prevent potentially prohibited or illegal activity, fraud, misappropriation, infringement, identity theft and other misuse; enforce the Terms; protect the security or integrity of our databases and Services; and take precautions against legal liability. Our legitimate interests provide the basis for this processing.
The categories of Personal Data and Non-Personal Data collected depend on how you interact with the Services offered through the website and Platform, as explained above. If the two are combined, the combined information is treated as Personal Data for as long as it remains combined.
D. How we collect your information:
How we collect the information described above depends on your interaction with us:
- Automatically: processing relies on your consent through native in-app permissions to perform our contract and provide the Services.
- From information you choose to provide, including when you contact us, as described in this Policy.
- From third parties.
E. SDK & tracking technologies:
We and some Service Providers use “cookies”, “software development kits” (“SDKs”), anonymous identifiers and other tracking tools (“Tracking Technologies”). These help deliver and improve the Services, personalise your experience, and monitor our activities, campaigns and overall use of the Apps and Services.
The table lists the SDKs currently used, their purposes, privacy policies and opt-out controls.
Name | Purpose | Privacy and opt out |
|---|---|---|
Google Play | Billing for in-app purchases | Google Play Privacy Policy: https://play.google.com/about/privacy-security-deception |
Firebase | • Remote Config Firebase Performance Monitoring helps us identify and resolve performance issues. It may collect app-start and foreground/background timings, screen-rendering metrics, network request URLs (without query parameters or payload contents), response times, response codes and payload sizes. Associated diagnostics may include installation and session identifiers, device and operating-system details, app version, network information, resource usage and country derived from IP address. Performance collection is enabled by default unless you explicitly turn diagnostics off in the App’s privacy-choice controls. Your explicit choice to turn diagnostics off is preserved. We do not add sensor readings or user-entered content to Performance reports. | Firebase Privacy Policy: https://firebase.google.com/support/privacy |
Advertisers: | Advertisers provide advertising services. Their targeted-advertising SDKs collect browsing activity across multiple websites and online services to show relevant ads in the App and in third-party services. The information collected through these SDKs does not disclose your identity and helps us assess advertising effectiveness. | AdMob: https://policies.google.com/privacy |
F. Data sharing – categories of recipients we share personal data with:
We disclose data to third parties, including partners and providers that support delivery of the Services. The categories of recipients are described here.
Category of recipient | Data that will be shared | Purpose of sharing |
|---|---|---|
Advertisers | Online Identifiers | Showing advertisements or content suited to the application as part of the Services. |
Service Providers | All data | We may disclose Personal Data to providers, contractors and other third parties, including cloud and hosting providers, analytics and marketing providers, in-app payment processors, fraud-prevention and analytic tools, and tracking tools. Contracts restrict their use of the data and require security measures. They process it only to deliver the services we request and may not use your Personal Data for other purposes. |
Any acquirer of our business | All data | A corporate transaction, such as a sale of a substantial portion of the business, merger, consolidation or asset sale, may involve disclosure of Personal Data. Our affiliates or the acquiring company will assume the rights and obligations described in this Policy. |
Governmental agencies, or authorized third parties. | Subject to law enforcement authority request. | We may disclose certain information to law enforcement, government agencies or authorised third parties following a verified request concerning terrorism, a criminal investigation, alleged unlawful conduct or another activity that could expose us, you or another user to legal liability. Disclosure is limited to what is necessary for that purpose. |
Providers and partners receive access only to information strictly necessary for us to provide the Services. They must secure the information, use it only for agreed purposes and comply with applicable data-protection rules. Such providers may use other non-personal information for their own benefit.
G. Data retention:
Generally, we keep collected Personal Data while it is necessary for the purposes described above, under applicable regulation, or until you express an applicable preference to opt out.
Longer retention may be needed for legal, regulatory, tax or accounting requirements; an accurate record of dealings with you if a complaint or challenge arises; or reasonably anticipated litigation concerning your Personal Data. Unless applicable law requires otherwise, we have no obligation to keep data for a particular period and may delete it at any time, for any reason, without advance notice.
H. Security measures:
We take care to implement physical, technical and administrative safeguards that we believe meet applicable regulation and industry standards. These measures seek to prevent unauthorised access, improper use or disclosure, unlawful destruction and accidental loss of your information.
Contact us by email if you believe your privacy has been handled improperly or contrary to this Policy, or if you learn of an attempt by a third party to access your Personal Data without authorisation. If we discover a security incident involving your Personal Data, we will make reasonable efforts to notify you and, when law requires, the relevant authorities.
I. International data transfer:
We operate from the United Kingdom. We use Google Cloud locations in the EU, US and Asia, and our service providers may process data in other countries. When data moves outside your jurisdiction, we take appropriate measures to provide the level of protection required by applicable law. Personal Data collected in the EU and transferred outside it to a recipient without an applicable European Commission adequacy decision is transferred under EU-approved standard contractual clauses. Email us for more information about these arrangements and your related rights.
J. User rights
Depending on your jurisdiction, data-protection and privacy laws may give you some or all of these rights: request amendments to stored Personal Data; review and access the Personal Data we hold; request its deletion where we lack a legitimate retention reason; restrict or object to processing; exercise data portability; complain to a supervisory authority in your jurisdiction; and withdraw consent where applicable. To exercise your rights, email support.signalguard@diyappsstudio.com and describe your request. You do not need to complete a particular form.
A rights request requires information to verify your identity and locate your data. Locating and deleting data may involve reasonable time and effort as permitted or required by law. Your jurisdiction may provide different or additional rights relating to the information we collect.
If you are dissatisfied with our handling of a complaint, you may complain to the supervisory authority in an EU Member State.
Further rights for particular jurisdictions appear in Section II, “Jurisdiction-specific notices”, below.
K. Notice of right to opt out of sale/sharing
California residents have the right to direct us to stop selling or sharing their Personal Information. We do not exchange Personal Information for money or other payment. However, disclosing online identifiers, internet or network activity, and approximate location to advertising partners, advertising technology companies, and marketing or analytics providers for personalised advertising may constitute a “sale” or “sharing” under the CCPA. “Sharing” includes “cross-context behavioural advertising”, even when no money changes hands. This notice covers those disclosures.
An opt-out applies to future sales or sharing. You may still see advertisements, including contextual or other non-personalised ads. We may continue processing information for purposes that do not constitute a sale or sharing, including permitted first-party advertising, attribution and analytics. Opting out with us does not automatically apply to other businesses.
The industry tools below provide additional advertising choices. They supplement the direct opt-out method described below:
- Digital Advertising Alliance (US) https://www.aboutads.info/choices/
- Digital Advertising Alliance (Canada) https://youradchoices.ca/en/tools
- Digital Advertising Alliance (EU) https://www.youronlinechoices.com/
- Network Advertising Initiative https://optout.networkadvertising.org/?c=1
To opt out of sale or sharing, email support.signalguard@diyappsstudio.com. You can also use the privacy or advertising controls available in the App. You do not need to create an account or submit a verified consumer request to opt out. An authorised agent may act for you; we may request proof of the agent's authority.
For mobile advertising choices, you can also use the DAA AppChoices tool. Additional controls are available from Google, Google Analytics, Google Ads and Facebook. To stop marketing emails, use their unsubscribe link. These controls supplement the direct sale/sharing opt-out methods above. Section II.A explains your other California privacy rights.California privacy notice (Section II.A)
L. Eligibility and children privacy:
The Services are not intended for children. Here, “child” means someone below the age defined by applicable law: under 16 in the EEA and under 13 in the US. We do not knowingly process children's information. If we discover that a user considered a “child” has supplied information, we immediately discard it. If you believe a child has shared information with us, contact support.signalguard@diyappsstudio.com.
II. Jurisdiction-specific notices:
A. California privacy notice
This section applies to California residents, including users, visitors, employees, job applicants and independent contractors, where the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), applies. “Personal Information” and “Sensitive Personal Information” have the meanings given by that law. Personal Information can relate to an individual, household or device; it excludes qualifying publicly available, de-identified or aggregate information and information exempt under the CCPA.
Information practices. Depending on the features you use, the categories of information processed may include identifiers, such as online IDs, IP addresses and applicable email addresses; California Customer Records information, including photos, images and videos used in the App; commercial information, including in-app payments and purchases; internet or network activity; approximate geolocation; sensory information, including audio and call records; and, where needed for a feature you choose, Sensitive Personal Information such as precise geolocation or health information. Health and precise GPS location information are processed only on your device as described in Section I.C; they are not stored on our servers. We do not collect protected-classification characteristics, biometric identifiers, professional or employment information, non-public education information, or inferences within the corresponding CCPA categories. Section I.C describes the data, features, purposes and on-device processing in detail.
Sources, use and disclosure. Information comes from you, App activity and third parties such as service providers, advertising networks and analytics providers. We use it to supply, support, secure, analyse and improve the Services, market them, and meet legal obligations. Sections I.D–F describe sources, providers and disclosures. Identifiers, Customer Records information, commercial information, network activity, approximate location and sensory information may be disclosed to contracted providers for service delivery, security, debugging, research and quality improvement. Their contracts require confidentiality, restrict use to the agreed services and prohibit selling or sharing that information. Identifiers, network activity and approximate location may be sold or shared with marketing and analytics providers for targeted advertising, as explained in Section I.K. We will give notice before collecting additional categories or using information for materially different, unrelated or incompatible purposes.
Your rights. Subject to applicable exceptions, you may know and access the categories and specific pieces of Personal Information held about you, their sources, purposes and recipients; request deletion or correction; obtain a portable copy; and opt out of sale or sharing. Where applicable, you may limit the use or disclosure of Sensitive Personal Information and opt out of covered automated decision-making. We will not discriminate or retaliate against you for exercising these rights. Legally permitted price or service differences reasonably related to the value of Personal Information may apply. We do not offer financial incentives for providing Personal Information.
Requests. Email support.signalguard@diyappsstudio.com and describe the right you wish to exercise. No particular request form is required. Requests are free except where law permits otherwise. We may need to verify your identity for access, deletion or correction. An authorised agent may submit a request; we may require signed permission or a power of attorney and, where permitted, direct verification or confirmation from you. Section I.K provides the separate sale/sharing opt-out methods. Ending your use of the Services does not automatically delete your information; you can request deletion. You may also request information about disclosures for third parties' direct marketing under California Civil Code section 1798.83.
Retention and other disclosures. Section I.G explains retention. We keep information while needed for its purpose, legal obligations or disputes and applicable limitation periods. Contact details may remain until an enquiry is resolved; transaction records may remain for up to seven years or longer where required. Except where law requires retention, we may delete data without advance notice. For California residents, we do not knowingly collect Personal Information from children under 16. We do not respond to legacy browser “Do Not Track” signals. We review and update this California notice at least every 12 months, with the revision date shown at the top of the Policy.
B. Additional notice to colorado residents
The Colorado Privacy Act (“CPA”) gives the rights below to Colorado residents acting as individuals or households. It excludes those acting commercially or in employment, as job applicants, or as beneficiaries of a person acting in an employment context.
Under the CPA, “Personal Data” is information linked or reasonably linkable to an identified or identifiable individual. It excludes publicly available information, de-identified or aggregated consumer information, and information outside the CPA's scope. Examples of exclusions are health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPPA) or 42 CFR Part 2 on confidentiality of substance-use-disorder patient records; information covered by the Fair Credit Reporting Act (FRCA), Gramm-Leach-Bliley Act (GLBA), Driver's Privacy Protection Act of 1994, Children's Online Policy Protection Act of 1998 (COPPA), Family Educational Rights and Privacy Act of 1974 or national Security Exchange Act of 1934; and higher-education and employment data.
“Sensitive Data” includes racial or ethnic origin, religious beliefs, mental or physical health conditions or diagnoses, sex life or sexual orientation; genetic or biometric information usable to identify a person uniquely; and child data. Where an App feature involves sensitive data, the applicable data, purpose and processing limits are described in Section I.C. Processing is subject to the applicable permission and consent requirements; the description of sensitive-data categories does not mean every App processes each category.
Section I.C describes our collection and processing of personal data, the categories involved and their purposes. Section I.F identifies the categories of third parties with whom the controller shares information for business purposes.
1. Your rights under CPA:
The following table explains how consumers can exercise rights and appeal decisions, and addresses sales, advertising-related sales and opt-out methods.
Right | What it means | How to exercise it |
|---|---|---|
Access and knowledge | You may confirm whether we collected Personal Data about you and find out what we collected. | Review this Privacy Policy to exercise this right. To obtain a copy of your Personal Data, email support.signalguard@diyappsstudio.com. |
Correction | You may correct inaccurate Personal Data, taking into account the nature of the data and the purposes for which it is processed. | Make corrections through your account or email your correction request to support.signalguard@diyappsstudio.com. |
Deletion | You may request deletion of Personal Data, but the right is not absolute. We may refuse all or part of a request if we or our providers need the information to: (1) complete the transaction for which it was collected, supply requested goods or services, take reasonably anticipated actions within the ongoing business relationship, fulfil a written warranty or federally compliant product recall, or otherwise perform our contract; (2) detect security incidents, protect against malicious, deceptive, fraudulent or illegal conduct, or prosecute those responsible; (3) identify and repair product errors affecting intended functionality; (4) exercise free speech, protect another consumer's free-speech rights, or exercise another legal right; (5) meet a law or legal obligation; (6) conduct public or peer-reviewed scientific, historical or statistical research in the public interest under applicable ethical and privacy rules, where deletion would likely prevent or seriously impair the research and you previously gave informed consent; (7) enable solely internal uses reasonably aligned with consumer expectations arising from the relationship; or (8) make other lawful internal uses compatible with the context in which you supplied the information. Information outside these exceptions will be deleted or de-identified in our records, and we will instruct processors to do likewise. | To request deletion, email support.signalguard@diyappsstudio.com. You do not need an account to submit a request to know or delete. |
Portability | You may obtain your personal data in a portable and, where technically feasible, readily usable format that lets you transfer it to another entity without hindrance. | Email support.signalguard@diyappsstudio.com to request a copy. We will choose a readily usable format intended to allow transfer between entities without hindrance. |
Opting out of Personal Data sales | You may opt out of sales of Personal Data for targeted advertising, sales to a third party for monetary gain, or profiling that supports decisions with legal or similarly significant effects on you or another consumer. You may authorise someone to act for you, including through broad technical tools such as DAA or NAI. | We do not exchange personal information for money or other payment. Disclosures for personalised advertising may nevertheless constitute “sale” or “sharing”. Section I.K explains those disclosures and the methods for opting out of sale or sharing. |
Opting out of targeted advertising | You may opt out of sales of Personal Data for targeted advertising, sales to a third party for monetary gain, or profiling that supports decisions with legal or similarly significant effects on you or another consumer. You may authorise someone to act for you, including through broad technical tools such as DAA or NAI. | We do not exchange personal information for money or other payment. Disclosures for personalised advertising may nevertheless constitute “sale” or “sharing”. Section I.K explains those disclosures and the methods for opting out of sale or sharing. |
Opting out of profiling | You may opt out of sales of Personal Data for targeted advertising, sales to a third party for monetary gain, or profiling that supports decisions with legal or similarly significant effects on you or another consumer. You may authorise someone to act for you, including through broad technical tools such as DAA or NAI. | We do not profile you, so a profiling opt-out is not provided. |
Appeals | If we decline to act on a request, we will notify you without undue delay and within 45 days of receipt, explain why and provide appeal instructions. If an appeal is denied, you can contact the Colorado Attorney General at https://coag.gov/office-sections/consumer-protection/ or (720) 508-6000. | Within 60 days after receiving an appeal, we will explain in writing what action we have or have not taken and the reasons for that decision. |
Non-discrimination and compliance with existing discrimination laws | Discrimination may include refusing goods or services, changing their level or quality, or charging different prices. | We do not discriminate against users. |
2. How to submit A request under CPA?
Only you or a legally authorised representative may submit a request to know or delete your Personal Data. A representative submitting a request for another consumer must provide proof of authority, such as a power of attorney or probate documentation.
We respond within 45 days after receiving a verifiable Consumer Request, no more than twice in a twelve-month period. When reasonably necessary, we may take an additional 45 days, provided we notify you within the first 45 days. If we refuse to act, you may appeal within a reasonable period by emailing support.signalguard@diyappsstudio.com and stating that you wish to appeal. Within 60 days after receipt, we will give a written explanation of action taken or not taken and the reasons. If the appeal is denied, you may complain to the Colorado Attorney General at https://coag.gov/file-complaint/.
If you have an account, we may choose to send the written response there or by email. Without an account, you can choose a response by post or electronically. An account is not required to submit a request.
Disclosures cover only the 12 months before we receive the request. Where we cannot comply, our response also explains why.
C. Additional notice to virginia residents
Under the Virginia Consumer Data Protection Act, as amended (“VCDPA”), Virginia residents acting as individuals or households, rather than in employment or commerce, have the following Personal Data rights.
“Personal data” is information linked or reasonably linkable to an identified or identifiable natural person. De-identified and publicly available information is excluded. Other scope exclusions include HIPAA, GBPA, non-profit entities, higher education, employment data, FCRA, the Driver's Privacy Protection Act of 1994, the Family Educational Rights and Privacy Act, and the Farm Credit Act.
The VCDPA requires disclosure of processing categories and their purposes, which appear in Section I.C. Section I.F describes shared-data categories and recipients. Section I.K addresses data sales and targeted advertising. The Colorado-residents table in Section II.B sets out your VCDPA rights and how to exercise them.
1. How to submit A request under VCDPA?
We respond within 45 days of receipt. Where reasonably necessary, we may extend this by 45 days and notify you within the initial period. A refusal to act can be appealed within a reasonable period by emailing support.signalguard@diyappsstudio.com and identifying the message as an appeal. Within 60 days after receiving it, we will explain in writing the action taken or not taken and our reasons. If the appeal is denied, you may complain to the Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform.
Responses are free up to twice a year, unless a request is manifestly unfounded, excessive or repetitive. If commercially reasonable efforts do not authenticate you and your request, we may ask for reasonably necessary additional information. We cannot grant a request that we cannot authenticate.
D. Additional notice to connecticut residents
The Connecticut Data Privacy Act, Public Act No. 22-14 (“CDPA”), provides the rights below to Connecticut residents acting as individuals or households. It excludes commercial or employment contexts and representatives of businesses, non-profit bodies or government entities.
“Personal data” is information linked or reasonably linkable to an identified or identifiable individual. It excludes de-identified or publicly available information and material outside the law's scope, including HIPAA, GBPA, non-profit entities, higher education, employment data, FCRA, the Driver's Privacy Protection Act of 1994, the Family Educational Rights and Privacy Act, and the Farm Credit Act.
Section I.C explains the categories of personal data processed and their purposes. Section I.F describes shared-data categories and the categories of third-party recipients. Section I.K covers data sales and targeted advertising.
The Colorado-residents table in Section II.B describes your CDPA rights and explains how to exercise them.
1. How to submit A request under CDPA?
We respond within 45 days after receipt. If reasonably necessary because of the complexity or number of requests, we may extend this once by another 45 days. We will tell you within the initial 45 days and give the reason.
If we decline to act, we will notify you without undue delay and within 45 days of receipt, explain the refusal and give appeal instructions. Within 60 days of receiving an appeal, we will provide a written explanation of action taken or not taken and the reasons. If an appeal is denied, you may complain to the Connecticut Attorney General at https://www.dir.ct.gov/ag/complaint/ or (860) 808-5318.
We provide responses free of charge up to twice annually, except for manifestly unfounded, excessive or repetitive requests. If commercially reasonable efforts cannot authenticate you and your request, we may ask for additional information reasonably needed for authentication. If authentication remains unsuccessful, we cannot grant the request.
E. Additional notice to utah residents (effective January 2024)
The Utah Consumer Privacy Act (“UCPA”) provides the rights below to Utah residents acting in an individual or household setting, rather than a commercial or employment setting. “Personal Data” means information linked or reasonably linkable to an identifiable person, excluding de-identified and publicly available data.
Section I.C describes processed personal-data categories and purposes. Section I.F identifies the categories of personal data shared and third-party recipients. Section I.K discusses sales and targeted advertising.
The Colorado-residents table in Section II.B also describes the rights under CDPA and the methods for exercising them.
F. Notice to nevada residents
Nevada residents may opt out of sales of certain personal information. Subject to exceptions, Nevada law treats a “sale” as exchanging specified types of personal information with another person for monetary consideration. We do not currently sell personal information under that definition. Nevertheless, Nevada residents may submit verified sales opt-out requests. We will record those instructions and apply them if our policy changes. Send requests to support.signalguard@diyappsstudio.com.