Privacy Notice

1. Who we are

Salt Cold App is operated by HMBLCK, which is the data controller for the personal data described in this notice. That means we decide why and how your personal data is processed.

2. What we collect and why

• Account data (email address, password credentials, display name) — to create and secure your account. Legal basis: performance of our contract with you.
• Evidence content you upload (audio, video, images, pasted text, case names, and the transcripts and extracted text derived from them) — to provide the analysis and ledger features you ask for. This content may contain sensitive information about you or third parties; you choose what to upload. Legal basis: performance of our contract with you.
• Usage and entitlement data (analyses used, credits, plan and subscription status) — to apply your plan limits correctly. Legal basis: performance of our contract with you.
• Technical data (IP address, device and browser information, error logs) — to keep the Service secure, prevent fraud and abuse, and diagnose faults. Legal basis: our legitimate interests in operating a secure and reliable service.
• Support messages you send us — to answer your query. Legal basis: legitimate interests and, where applicable, contract performance.

Payment card details are never collected or stored by us. Checkout is handled entirely by Paddle.

3. Who we share data with

• Hosting and database providers — to store your account and case data.
• AI processing providers — audio, images and text you submit for analysis are sent to third-party AI transcription and text-extraction services solely to produce your results.
• Paddle.com, our Merchant of Record — for the sale of our products, subscription management, payments, tax compliance, invoicing and refunds.
• Professional advisers (legal, accounting) where necessary.
• Authorities where we are required to disclose data by law.

We do not sell your personal data, and we do not use your evidence content for advertising.

4. International transfers

Some of our providers operate outside your country, which may include transfers outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. How long we keep data

Account, case and evidence data is retained for as long as your account remains open. If you delete an item or a case, it is removed from your workspace and purged from our storage in the ordinary course of operations. If you close your account, we delete or anonymise your data once it is no longer needed, except where we must keep records to meet legal, tax or accounting obligations.

6. Your rights

Subject to the law that applies to you, you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. Where the UK GDPR or EU GDPR applies, you also have the right to lodge a complaint with your supervisory authority. We aim to respond to requests within one month.

To exercise any of these rights, contact us using the details below.

7. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, per-account access controls enforced at the database level, and private media storage that is not publicly accessible. No system is completely secure, but we work to keep your data protected.

8. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in and to maintain your session. We do not use advertising or cross-site tracking cookies. You can clear this storage through your browser settings, though doing so will sign you out.

9. Changes and contact

We may update this notice from time to time; the "last updated" date above reflects the latest version. For any privacy question or request, contact HMBLCK through the support channel shown in the app or by replying to any email you have received from us.