Privacy Policy — Aps Events

1. Introduction

Aps Events is the official mobile app for conferences organised by APS. It allows attendees to authenticate with a code sent by email, complete their profile, and view the event programme from their device.

This policy explains what data we collect, why, how long we keep it, and what rights users have over it, in accordance with the UK GDPR and the UK Data Protection Act 2018.

2. Data Controller

Controller: Buhho Apps
Contact: [email protected] / contact form at apsgb.buhhoapps.dev/contact or apsgb.co.uk/contact-us

3. Data We Collect and Why

Email and one-time access code: used to log into the app. The code itself is not stored; only encrypted session tokens are stored locally on the device.
Profile data (optional unless marked as required): first name, last name, professional title, affiliation, bio, LinkedIn URL, profile photo, and chat preference, used to display your profile to other attendees.
Event data: programme, speakers, schedules, and rooms, used to show you the conference agenda.

We process this data because it is necessary to provide the service (login, agenda) or because the user has given consent by filling in the optional profile fields.

The backend used is apsgb.buhhoapps.dev, currently hosted in the United Kingdom. If hosting is moved to another country in the future, this policy will be updated accordingly.

4. Data Retention

Account and profile data: kept for as long as the user's account remains active. There is no in-app self-service deletion; users can request deletion of their account and profile data at any time by emailing [email protected], after which the data is deleted or anonymised within a reasonable period.
Session tokens: deleted on logout or automatically expire after 7 days.
Locally cached event data: remains on the device until the user uninstalls the app or clears the cache.

5. Service Providers (Data Processors)

Transactional email provider: Resend, used solely to send the access code to the user's email.
Server location: outside the United Kingdom (United States).
As the provider is located outside the United Kingdom, the transfer is safeguarded by appropriate mechanisms (an ICO adequacy decision, or the UK's International Data Transfer Agreement — IDTA), ensuring a level of protection equivalent to the UK GDPR.

We do not share your data with any other third party, sell it, or use it for advertising purposes.

6. Analytics and Tracking

We do not currently use any analytics, tracking, or usage measurement tools. If this changes in the future, this policy will be updated accordingly before any such tool is activated.

7. Security

We value your trust in providing us with your personal data, and we work to protect it through encryption of session tokens and secure communication (HTTPS/TLS). No method of transmission over the internet, and no method of electronic storage, is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.

8. Your Rights

Under the UK GDPR, users have the right to:

Access their personal data.
Rectify inaccurate or incomplete data.
Erase their data ("right to be forgotten").
Restrict processing in certain circumstances.
Object to processing based on legitimate interest.
Data portability: receive their data in a structured, commonly used format.
Withdraw consent at any time (for profile data based on consent), without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, you can write to [email protected] or use the contact form at apsgb.buhhoapps.dev/contact or apsgb.co.uk/contact-us, stating your name and the right you wish to exercise.

If you believe your rights have not been properly addressed, you may lodge a complaint with the Information Commissioner's Office (ICO) of the United Kingdom — ico.org.uk.

9. Links to External Sites

The app may contain links to external sites. By clicking these links, you leave the app and become subject to the privacy policy of the destination site. We are not responsible for the content or privacy practices of those sites.

10. Children's Privacy

The app is intended for users aged 13 and over (the digital consent age under the UK Data Protection Act 2018). We do not knowingly collect data from children under that age. If a parent or guardian becomes aware that a child in their care has provided data, they may request its deletion by contacting us at the email address above.

We comply with Google Play's Child Safety Standards.

11. Changes to This Policy

Updates to this policy take effect once published on this page. The "Last updated" date will be revised accordingly. In the case of material changes, users will be notified through the app itself.

12. Contact Us

For any questions about this policy or about how your personal data is processed:

Email: [email protected]
Form: apsgb.buhhoapps.dev/contact or apsgb.co.uk/contact-us

Controller: Buhho Apps.