Privacy Policy
Effective [date] · Last updated [date]
1. Who we are
Zemble Ltd, company number 17356888, registered office [registered office address], is the data controller. We are registered with the Information Commissioner's Office, reference [ICO reference]. For any question about your data, email support@zemble.net.
2. The short version
We do not receive or store the content of your writing. It stays on your own device.
The only personal data we hold is what running your subscription needs: your email address, and whether your subscription is active. That is the whole of it.
3. What we collect, why, and on what basis
| What | Why | Lawful basis under UK GDPR |
|---|---|---|
| Your email address | To sign you in with a one-time link, and to know which subscription is yours | Performing our contract with you |
| Your subscription status and dates | To give you what you have paid for, and to run the grace period | Performing our contract with you |
| Technical error reports | To find and fix faults in the app | Our legitimate interest in keeping Zemble working |
| Support emails you send us | To answer you | Our legitimate interest in helping you, and the contract |
We do not collect your writing. We do not collect special-category data. We do not build a profile of you or track what you do in the app.
4. Your writing and local storage
Zemble uses your browser's storage, and, once you choose a save location, files on your own disk, to hold your writing on your own device. This is not tracking and none of it comes to us. It is how a local-first app works.
If you clear your browser's data, the copy in the browser goes with it. That is why Zemble asks you to choose a save location and to keep your own backups. See section 9 of the Terms.
5. Payment
Payments are handled by Paddle as merchant of record. Paddle collects and processes your payment details under its own privacy policy. We never see or store card details. Paddle tells us only that a subscription for your email address has started, renewed, or ended.
6. Error reports
If something goes wrong inside Zemble, the app may send a technical error report to our error-monitoring service, Sentry, so we can fix the fault. These reports are set up to leave out the content of your writing. They contain things like the build number, the browser, and where in the app the fault happened.
7. Who we share data with
We use a small number of companies to run Zemble, each processing data only on our instructions:
- Paddle, for payments.
- [Resend or Postmark], to send the one-time sign-in link to your email address.
- Sentry, for error reports.
- Cloudflare, which hosts the app and delivers it to your browser.
We do not sell your data, and we do not share it with anyone else unless the law requires us to.
8. How long we keep it
We keep your email address and subscription record for as long as you have an account, and for six years afterwards, because accounting law requires us to keep records of sales for that long.
9. Where your data goes
Zemble is sold worldwide through Paddle. Some of the companies in section 7 may process data outside the UK. Where that happens, we rely on the safeguards UK law provides for international transfers.
10. Your rights
Under UK data protection law you can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, ask for it in a portable form, and object to certain kinds of processing. Email support@zemble.net and we will act on it.
Deleting your account removes your email address and subscription record from our systems. Your writing, being on your device, stays with you to keep or delete as you choose.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first, so we can put it right.
11. Cookies and similar things
Zemble uses your browser's storage to run the app and to hold your writing. That is functional storage, not tracking, and there are no advertising or profiling cookies.
On this website we use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.