Privacy Policy

Last updated 11 October 2026 · published centrally by AKdev and shared across every app it publishes, BusyWait included.

This Privacy Policy explains how AKdev Ltd collects, uses, and protects personal data across all of the websites, apps, and services we publish. It applies to everyone who uses an AKdev product. We are the “controller” of the personal data described here for the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018) and, where applicable, the EU GDPR.

1. Who we are

AKdev Ltd, company number SC892925, with its registered office at Suite 2/3, 48 West George Street, Glasgow, G2 1BP. For any privacy question or to exercise your rights, contact privacy@busywait.ai.

2. The data we collect

We collect only what we need to run our products. The categories below describe the kinds of data any AKdev app may process; which apply to you depends on the product and the features you use. An app distributed through an app store also discloses the specific data it collects through its store privacy label, and every app asks before it uses a device permission such as location or the camera.

Account data – such as your name, email address, authentication identifiers, and settings.
Free-trial record – where you start a free trial of one of our apps, we keep a free-trial record: a keyed cryptographic hash (HMAC-SHA256) of your email address, made with a secret key held separately from our database, together with the date of your most recent free trial and how many free trials have been recorded. The free-trial record does not contain your email address or account identifier, but because we hold the key we can match it to an email address, so it is pseudonymised personal data under the UK GDPR, not anonymous data.
Content you create – the data you add while using a product, stored in your account.
Location data – where an app uses it, the approximate or precise location you set or permit, to provide location-aware features.
Photos, media, and sensor data – where an app uses it, images or scans you choose to capture, processed to deliver the feature you requested.
Usage and device data – limited, privacy-respecting analytics such as device type, app version, and how features are used, to keep our products working and improve them.
Communications – the content of messages you send us (for example support requests).

We do not intentionally collect special-category data, and we ask that you do not send it to us unless a feature specifically requires it. Where a feature does require it, we process it only with your explicit consent – the condition we rely on under Article 9 of the UK GDPR – and you can withdraw that consent at any time.

3. How and why we use data, and our lawful bases

Under the UK GDPR we rely on one or more of the following lawful bases:

Performance of a contract – to create and maintain your account and provide the features you ask for.
Legitimate interests – to secure, maintain, and improve our products, prevent abuse, and communicate with you about them, balanced against your rights.
Consent – for optional features that require it (for example device location, camera, or any marketing emails). You can withdraw consent at any time.
Legal obligation – to comply with law, such as tax, accounting, and responding to lawful requests.

Where you start a free trial of one of our apps, we compare a keyed hash of your email address against the free-trial records we hold, to prevent free-trial abuse, for example repeat free trials by the same person. The lawful basis is legitimate interests (Article 6(1)(f) of the UK GDPR).

You have the right to object to this processing and to ask us to erase your free-trial record. Where we have overriding legitimate grounds to keep it, namely preventing repeat free trials, we may keep it until 12 months after your most recent free trial. When we respond to your request we will tell you whether we have erased your free-trial record or kept it, and why.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Cookies and analytics

Our websites use only the cookies that are strictly necessary for them to function. For analytics we use Vercel Web Analytics and Speed Insights, which are cookieless: they set no cookies and store no other identifier on your device, and they do not read any identifier stored on it. Visitors are counted from a hash that Vercel generates server-side from each incoming request and discards within 24 hours, and the statistics we see are aggregated and not tied to you or your IP address. Because we neither store nor access information on your device for analytics, this does not require your consent under PECR. We use no advertising cookies and no cross-site tracking.

5. Sharing and sub-processors

We share personal data only with service providers (“processors”) that help us run our products, under contracts that require them to protect it and use it only on our instructions. They are named, product by product, in our sub-processor register, with what each receives and where it processes it.

Where you pay us directly, the payment is taken by Stripe, which processes your payment data on our behalf and is listed in the sub-processor register. Where you buy through an app store, the payment is handled by Apple or Google, which act as independent controllers of your payment data under their own privacy policies, not as our processors. In either case we never receive your full card details.

We may also disclose data where required by law, to protect our rights or users’ safety, or in connection with a business transfer.

6. International transfers

Some providers may process data outside the UK or European Economic Area. Where they do, we rely on an adequacy decision or appropriate safeguards (such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses) so your data stays protected.

7. Retention

We keep personal data only for as long as needed to provide the Services and to meet legal, accounting, or reporting requirements, after which it is deleted or anonymised. As a guide, account and content data is kept while your account is active and removed when you close it; records we must keep for tax and accounting are retained for six years, as UK law requires. You can delete your content from within a product, and closing your account removes your personal data except where the law requires us to keep it, or where we keep your free-trial record, as described below.

Your free-trial record – the hash, the date of your most recent free trial and the count of free trials – is kept for 12 months from your most recent free trial, and then deleted. Closing your account does not remove it sooner.

8. Your rights

Subject to the conditions in the law, you have the right to:

access a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict or object to certain processing;
data portability; and
withdraw consent at any time, without affecting earlier processing.

To exercise any of these, email privacy@busywait.ai. We will respond within one month and will not charge a fee in most cases.

9. Automated decisions

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

10. Children

Our products are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact privacy@busywait.ai and we will delete it.

11. Changes to this policy

We may update this policy as our products or legal obligations change. We will revise the “last updated” date and, for material changes, take reasonable steps to notify you.

12. Complaints and contact

For any privacy matter, contact AKdev Ltd at privacy@busywait.ai. If you are in the UK and are not satisfied with our response, you can complain to the Information Commissioner’s Office (ico.org.uk); if you are in the EU, you may contact your local supervisory authority. We would appreciate the chance to resolve your concern first.