Privacy Policy

This Privacy Policy explains how AckerWorx Ltd ("AckerWorx", "we", "us", "our") collects, uses, and protects information when you use the AckerWorx UK website (ackerworx.uk) and the Android applications we publish on Google Play (together, the "Services").

AckerWorx Ltd is a company registered in England and Wales (Company Number 15193933) and is the data controller for the personal data described in this policy, except where stated otherwise below. We build our products local-first and collect as little data as possible. Where a specific product collects or processes data differently, that product has its own policy, linked from this page, which takes precedence for that product.

1. Who This Policy Covers

This policy applies to:

Other AckerWorx products and platforms, including XenoPOS (xenopos.com), AckerWorx.Net, AckerWorx.Com, and AckerWorx.Dev, are governed by their own privacy policies published on their respective websites. This policy does not apply to them.

2. Our Privacy Principles

• •Local-first: wherever possible your data stays on your device and is never sent to us.
• •No sale of data: we never sell, rent, or trade personal data.
• •No backdoors: we do not retain keys or build mechanisms to access your encrypted data.
• •Minimal third parties: we integrate third-party services only where a feature genuinely requires them, and we name them in this policy.
• •Transparency: every permission an app requests is tied to a feature you choose to use.

3. Website (ackerworx.uk)

Our website is a static site. It has no accounts, no sign-in, and no cookies set by us for tracking purposes.

Support chat and the data deletion request form (ackerworx.uk/delete-data) are provided by AckerWorx Comms, our own support system (comms.ackerworx.net). What you type there, the page you were on, and your IP address are stored with your request so that we can answer it; a random identifier in your browser's local storage lets you see our replies on this site. We do not ask for an email address. Support correspondence is kept for the period in Data Retention below, and the IP address for 90 days.

We use a privacy-focused, first-party analytics script (served from api-signal.ackerworx.net, which we operate) to measure aggregate traffic such as page views, referrer, approximate country, browser, and device type. It does not use advertising identifiers and is not used to build profiles of individual visitors.

Web fonts are loaded from Google Fonts. When your browser requests a font, Google receives standard request metadata such as your IP address. See Google's privacy policy for details.

Our hosting provider receives standard server logs (IP address, user agent, requested URL, timestamp) as part of delivering the site. These logs are used only for security and operational purposes.

4. Android Applications

Our Android apps are designed to operate entirely on your device. Unless an app's own policy says otherwise:

• •We do not operate a backend that receives your data.
• •There are no accounts, sign-in, or collection of your name, email address, or phone number.
• •We do not use analytics, telemetry, or crash-reporting SDKs.
• •Any data the app stores (history, settings, saved items) is stored locally and can be erased from within the app.
• •Network traffic is only sent when you take an action that requires it, such as streaming a radio station or running a network diagnostic you started.

Some apps include optional features that connect to third-party services (for example cover-art lookup, IP reputation lookups, or Google AdMob on a free tier). Those services, the data they receive, and how to turn them off are described in the individual app's policy. Google Play Billing is used to process in-app purchases; we do not receive your payment card details.

5. Permissions

Our apps request Android permissions only when a feature you open needs them, and each permission is used narrowly for that feature. Typical examples include Notifications for playback controls or alerts, Bluetooth for connecting to nearby devices you choose, Location where Android requires it to read Wi-Fi network names, and Foreground Service to keep audio playing or a scan running while the app is in the background. No permission is used for advertising or tracking. The exact permissions for each app, and why they are needed, are listed in that app's own policy.

6. Legal Bases for Processing

Where we process personal data as a controller, we rely on the following lawful bases under UK GDPR:

• •Performance of a contract: to provide, license, and support a product you have purchased.
• •Legitimate interests: to keep our website and products secure, to measure aggregate website usage, and to respond to enquiries.
• •Legal obligation: to keep business, tax, and accounting records as required by law.
• •Consent: for any optional feature that sends data to a third party, which you can withdraw at any time by turning the feature off.

7. Data Sharing

We share personal data only with:

• •Service providers that host our website or process payments on our behalf, bound by contract to use the data only for those purposes.
• •Third-party services that you choose to enable within a product, as described in that product's policy.
• •Law enforcement or regulators where we are legally required to do so. We will challenge requests we consider unlawful or overly broad, and we cannot provide access to data that is encrypted with keys we do not hold.

We do not sell personal data and we do not share it with advertisers for their own purposes.

8. International Transfers

AckerWorx operates as a network of companies in the UK, Asia, and the USA. Personal data we hold as a controller is stored in the UK. Where support or engineering staff outside the UK need access to personal data, that access is governed by the UK International Data Transfer Agreement or another mechanism recognised under UK data protection law.

9. Data Retention

• •Website analytics: aggregated and retained for no longer than 24 months.
• •Support correspondence: retained for 24 months after the request is closed.
• •Licence and purchase records: retained for 6 years after the end of the relationship, as required for accounting and tax purposes.
• •Data on your device: retained for as long as you choose; you can delete it from within the app at any time.

10. Security

We apply zero-trust principles across our products. Data in transit is protected with TLS. Sensitive values stored by our apps, such as API keys, are encrypted with hardware-backed keys where the device supports it. We do not retain encryption keys that would allow us, or anyone else, to access your encrypted data.

11. Your Rights

Under UK GDPR and the Data Protection Act 2018 you have the right to access, correct, erase, restrict, or object to our processing of your personal data, the right to data portability, and the right to withdraw consent. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

Because most of our products store data only on your device, the fastest way to exercise erasure is usually the in-app "delete all data" option. For anything we hold ourselves (for example in Pixyl, XenoPOS or Tshupa.com), use the request form at ackerworx.uk/delete-data: it needs no account or email, goes to our support team as a priority request, and we respond within one month.

12. Children's Privacy

Our Services are not directed to children under 13 (or the age of digital consent in your country, if higher). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Where a change materially affects how a product handles your data, the product will ask you to review the change before continuing.

14. Contact Us

For questions about this Privacy Policy, to exercise your rights, or to raise a concern, use the support chat on this site or the request form at ackerworx.uk/delete-data. We handle every request in our own support system and never by email.

AckerWorx Ltd, registered in England and Wales, Company Number 15193933. Website: https://ackerworx.uk