Privacy notice

This Privacy notice explains how Digital Stratagems Limited (“we”, “our”, “us”) collects, uses, and protects your personal data when you use Mooring — the Mac app and the mooring.sh website. We are the data controller for that personal data, and we design Mooring to need as little of it as possible — the app runs on your Mac, so most of this notice concerns the website and your account.

Digital Stratagems Limited
UK company number: 14268586
153–155 London Road, Hemel Hempstead, Hertfordshire, HP3 9SQ, United Kingdom
Legal & data protection: [email protected]

1. Personal data we collect

1.1. We may collect and process:

• Account data — your email address and login details.
• Billing data — subscription and payment information. Card details are handled by Lemon Squeezy, our Merchant of Record; we never see or store a full card number.
• Usage data — IP address, browser and device information, and pages viewed.
• Support data — information you give us when you contact us.
• Marketing data — your preferences and engagement, if you opt in.

1.2. We don’t collect special-category (“sensitive”) data.

1.3. Voice input. When you use Mooring’s voice queue, your speech is transcribed using Apple’s built-in speech recognition. We never receive, store, or transmit your audio recordings — your audio is never sent to us. The resulting transcripts are saved as part of how Mooring works, on both Free and Pro, and are handled like the other data described in this notice. How Apple processes speech is governed by Apple’s own privacy policy.

2. How we use your data

2.1. We use your personal data to:

• create and operate your account and authenticate you;
• manage billing, subscriptions, and refunds;
• provide support and answer your questions;
• send service messages about your account or important changes;
• keep the Service secure and prevent fraud;
• understand how the website is used so we can improve it; and
• send marketing communications where you’ve consented (you can opt out anytime).

3. Legal bases

3.1. We process personal data under the following lawful bases:

• Contract — to provide the account and subscription you signed up for.
• Legitimate interests — for security, fraud prevention, and improving the Service.
• Consent — for analytics cookies and marketing communications.
• Legal obligation — where we must comply with the law.

3.2. Where we rely on consent, you can withdraw it at any time.

4. Cookies and analytics

4.1. We use two analytics tools, chosen so most visitors need no cookies:

• Plausible — cookieless and privacy-friendly; it sets no cookies and doesn’t track you across sites, so it runs without consent.
• Google Analytics — uses cookies and is off by default; it loads in a cookieless state and stores nothing until you choose “Accept” on our cookie banner. We enable analytics storage only — never advertising or personalisation.

4.2. You can change your choice at any time by declining, or by clearing the stored preference and your browser cookies, which brings the banner back. There’s more detail in our cookie policy.

5. Sharing your data

5.1. We don’t sell your personal data.

5.2. We share it only with the service providers we rely on to run Mooring — our hosting and database providers, our payments provider (Lemon Squeezy), and our email-delivery, error-tracking, and analytics vendors — and only so they can do that work for us, under contracts that protect it.

5.3. We may also share data with professional advisers, with regulators or law enforcement where legally required, or in connection with a business sale or reorganisation.

5.4. We may create aggregated, anonymised data from how Mooring is used, and use, share, or sell it for any purpose, including commercial ones. This data is aggregated and anonymised so that it can no longer be linked to you or any individual. We do not sell your personal data.

6. International transfers

6.1. Some of our service providers are located outside the UK and EEA, including in the United States.

6.2. Where we transfer personal data outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or other mechanisms approved under applicable data protection law.

7. Data retention

7.1. We keep personal data only as long as we need it:

• Account and billing data — while your account is active, and up to 6 years after closure (for tax and legal purposes).
• Usage and support data — up to 12 months.
• Backups — up to 30 days.

8. Your rights

8.1. Depending on where you live, you have rights to access, correct, delete, restrict or object to the processing of, and port your personal data, and to withdraw consent where consent is the lawful basis.

8.2. To exercise your rights, email [email protected].

8.3. If you’re in the UK or EEA, you can also complain to the UK Information Commissioner’s Office (ICO) or your local data protection authority.

9. Security

9.1. We use appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls and authentication, and regular backups and monitoring. No system is perfectly secure, but we work to keep the risk low.

10. Children

10.1. Mooring isn’t for children. We don’t knowingly collect data from anyone under 18. If you believe a child has given us their data, tell us and we’ll delete it.

11. Updates to this notice

11.1. We may update this notice from time to time. If we make material changes, we’ll change the date at the top and, where appropriate, notify you by email or through the Service.

12. Contact

Questions, or a request about your data? Email [email protected], or write to us:

Digital Stratagems Limited
153–155 London Road
Hemel Hempstead, Hertfordshire, HP3 9SQ
United Kingdom