Privacy Policy

Last updated: 2025-12-29

Privacy Policy

1. Who we are

Deckr (Cybersion) (“Deckr”, “we”, “us”) operates deckr.io (the “Service”).

2. What data we collect

We aim to collect the minimum personal data needed to run the Service.

2.1 Data you provide

  • Account information: email address, and nickname/first name.
  • Support communications: if you email us, we’ll receive the information you send (e.g., your email address and message content).

2.2 Data collected automatically

Depending on how the Service is used and hosted, we (and our providers) may automatically collect:

  • Technical and log data: device/browser information, IP address, timestamps, and basic diagnostics/logs.
  • Platform analytics/telemetry: Replit may collect default analytics/telemetry relating to app performance and usage.

2.3 Local browser storage

We store some application state in your browser (e.g., via local storage).

This is used to make the app function smoothly.

We do not intentionally store secrets (like passwords) or tracking identifiers in local storage.

3. How we use your data (purposes)

We use personal data to:

  • Provide the Service (create and manage your account, authenticate you, and keep you signed in).
  • Verify email addresses (to reduce fraud and protect accounts).
  • Operate and maintain the Service (monitor performance, debugging, security).
  • Provide support and respond to requests.
  • Billing and payments (manage subscriptions and payments via Stripe).
  • Comply with legal obligations (e.g., recordkeeping where required).

4. Our legal bases (UK GDPR / EU GDPR)

Where UK GDPR / EU GDPR applies, we rely on:

  • Contract: to provide the Service you request.
  • Legitimate interests: to secure, maintain, and improve the Service, prevent abuse, and troubleshoot issues.
  • Legal obligation: where we must retain certain records.
  • Consent: only where required, e.g., for certain cookies/marketing—if introduced later.

5. How we share your data

We do not sell your personal data.

We share personal data only with service providers that help us run the Service:

  • Authentication & database: Google Firebase (account management, authentication, email verification).
  • Payments: Stripe (subscription billing; and in future, one-off payments).
  • Hosting: Replit (hosting and operational tooling).
  • Email delivery: Firebase.
  • Analytics/telemetry: Replit default analytics/telemetry (as enabled by the hosting platform).

These providers process data on our behalf under their own terms and (where applicable) data processing agreements.

6. International transfers

Because we support users internationally and use global providers, your data may be processed outside the UK/EEA. Where required, we rely on appropriate safeguards (for example, contractual protections and/or provider frameworks) to protect transfers.

7. How long we keep your data (retention)

  • Verified account data: kept indefinitely unless you request deletion or we are required to remove it.
  • Unverified accounts: removed after 30 days.
  • Support requests: kept as long as needed to resolve your request and maintain reasonable records.

8. Account deletion

Users cannot currently delete accounts in-app.

To delete your account and associated personal data, contact support@cybersion.co.uk from the email address on the account.

We have a robust workflow to erase relevant data, subject to any legal retention requirements (e.g., payment records).

9. Security

We use reasonable administrative, technical, and organisational measures to protect your data.

No method of transmission or storage is 100% secure, and we can’t guarantee absolute security.

10. Cookies

At present:

  • We do not intentionally use tracking cookies for advertising.
  • The Service may use essential storage mechanisms (including local storage) for functionality.
  • If we introduce cookies or analytics tools that require consent, we will update this policy and (where required) provide a consent mechanism.

11. Your rights

Depending on your location, you may have rights to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (where processing is based on consent)

To exercise rights, email support@cybersion.co.uk.

UK users: complaints
If you’re in the UK and have concerns, you can complain to the UK Information Commissioner’s Office (ICO).

12. Children

The Service is not designed specifically for children.

If you believe a child has provided personal data to us, contact support@cybersion.co.uk and we will take appropriate steps to delete it.

13. Changes to this policy

We may update this policy from time to time.

We’ll post the updated version on deckr.io and update the “Last updated” date.

If you have questions, contact: support@cybersion.co.uk