This notice says what is held about an account, why it is held, where it is kept and what deletion removes.

The product is operated under UK GDPR and the Data Protection Act 2018. Avanti Mind Ltd is the controller for personal data held by the product. Avanti Mind Limited is registered in England and Wales, company number 16049394. Registered office: The Venture Centre, Sir William Lyons Road, University of Warwick Science Park, Coventry, England, CV4 7EZ.

Registration with the Information Commissioner's Office has not been completed, because there is nothing to register until the product holds data. It will be completed before the product opens, and the registration number will be published on this page when it is.

Personal data is stored in the United Kingdom or the EEA, and nowhere else. A processor that cannot meet that condition is not used, which is a decision taken when the processor is chosen rather than a term negotiated afterwards.

Anyone may complain to the Information Commissioner's Office about how their data has been handled. Complaining to us first is not a condition of doing so.

The lawful basis for holding the item corpus is legitimate interest. A legitimate interests assessment will be published in full before the product opens, and this page will link to it, because a legitimate interest nobody can read is an assertion rather than a basis.

The lawful basis for location, for calendar access, for marketing and for non-essential cookies is consent. Each of those four is asked for separately, none of them is bundled into signing in, and any one of them can be withdrawn without withdrawing the others.

Deletion is requested from the account screen and completes inside 24 hours. It is a cascade over every table that holds anything about the account, and a test asserts on each of them.

• The identity record, including the email address and any sign-in identifier.
• The place set and its radius.
• The chips.
• The standing instructions.
• The follows, and the alert history attached to them.
• The seen state.
• The questions asked and the answers given.
• The recaps created.
• The delivery records.
• The push tokens.
• The audio assemblies.
• The subscription identifiers, beyond the period financial law requires them to be retained.
• The business workspace memberships.

One thing is not removed. The item corpus is not the personal data of a reader, so deleting an account does not delete a published item, and a correction already issued stays on the public record. The deletion screen says that plainly, on the screen, before the deletion is confirmed.

Everything held about an account can be exported as a JSON file from the account screen, without asking anyone for it.

This marketing site is not the product and holds no personal data. It stores nothing about a visitor, sets no cookie before consent, runs no analytics of any kind, and loads no script from a third party.

An email address given here for the Line is passed to the product and held there for one purpose, which is sending the Line. It is not passed to anyone else, it is not used for anything else, and it is removed by replying to any Line.

What the product publishes about a named person is governed by the editorial standards rather than by this notice, because that material is a record rather than an account.