App and Account Privacy Notice
RV-ACCOUNT-2026-11-01-v3 · Effective 1 November 2026
Current scope: restricted existing-founder account sign-in and existing hosted web account. General beta account access, phone/Watch evidence transfer and cloud AI are not enabled by this notice.
Who is responsible
RESULTANT-VECTOR LTD is responsible for the R V processing described here. We are registered in England and Wales, company number 17450189. Our registered office is 9 Treetops, Whalley, Clitheroe, BB7 9WE, United Kingdom. For privacy questions, rights requests or complaints, email support@resultant-vector.com.
What this notice covers
This notice covers R V account sign in and the existing hosted web account. Current account access is restricted to authorised founder testing; publishing this page does not open public beta registration or activate optional features. The current native phone connection supports Apple sign in, checking your account session and signing out. It does not transfer phone or Watch Projects, Health records or other evidence. Existing web Projects are stored by the hosted service and are separate from local phone and Watch records. Website enquiries, beta interest forms and marketing cookies have a separate website privacy notice.
Apple sign in and account information
Apple verifies your Apple Account and supplies the identifier and verification credentials needed to recognise your R V account. R V receives your Apple sign in identifier and matches it to an R V account identifier. We store the account link, encrypted Apple refresh credentials and protected session records. Apple may supply name or email information when a sign in request asks for it; the current R V account tables do not store a name or email profile, and native sign in does not require an email claim. We do not receive your Apple password. Apple handles its own service information under its Sign in with Apple privacy information.
Web Projects and other information
Information saved through the existing web account can include Project names and goals, setup answers, plans, commitments, records, notes, revisions and save or correction history. Editing a Project does not necessarily remove earlier versions or copies held in save receipts. The native login test does not upload these records from the phone or Watch. Use fictional Project content during the restricted acceptance test; it is not an invitation to submit personal Health records or medical information. We also process the account and technical information needed to respond when you contact support.
Why we use this information
We use necessary account, sign in and requested hosted account information to provide the service you request, on the contract lawful basis. We use proportionate authentication, access control, security and fault information for our legitimate interests in protecting accounts and operating a reliable service, taking account of individuals' rights. We handle rights requests and complaints to meet applicable data protection obligations. This notice is information about processing, not a request for blanket consent. It does not authorise optional marketing, cloud AI or health processing. Any enabled feature that processes health information needs its own explained purpose, applicable Article 6 basis and Article 9 condition before that processing begins.
Sessions and browser storage
Web and phone use separate secure sessions for the same R V account. The phone uses a bearer credential held by the app, not the browser's cookie. The restricted native test permits a session for no more than one hour and never beyond its separately approved test deadline. Its sign in challenge is valid for up to five minutes and can end earlier with that deadline. For the existing web account, __Host-rv_session is the necessary sign in session cookie with a one-hour lifetime; __Host-rv_oauth is a necessary sign in security cookie lasting up to five minutes and cleared on callback. Where the existing browser deletion-status flow is used, __Host-rv_delete is a restricted status-proof cookie lasting up to one hour; its protected server receipt can last up to one day. These are first party security cookies on app.resultant-vector.com, not advertising cookies. The four native login routes do not set these browser cookies or load marketing analytics. A validity deadline is not a promise that all expired database or backup copies are physically erased at that second.
Providers access and international processing
Apple operates its own Apple Account authentication and security service. Apple's privacy information identifies Apple Distribution International Limited in Ireland as controller for UK individuals and describes international processing, including in the United States, and relevant Standard Contractual Clauses. R V's subsequent account processing is separate. Our account hosting and support provider is BSolve IT Limited, trading as 365i, acting as a hosting processor under its published data processing agreement. The existing account server is an AWS server in London. This server location does not mean every provider or support operation stays in the UK. Details of the managed server's upstream AWS, platform and Cloudflare arrangements and applicable UK transfer safeguards remain under confirmation; we do not represent that chain as fully verified. Access remains restricted to the existing founder account while that follow-up and wider customer-readiness work are completed. For further information or copies of applicable safeguards, contact support@resultant-vector.com. Apple's privacy information is at https://www.apple.com/legal/privacy/en-ww/ and https://www.apple.com/legal/privacy/data/en/sign-in-with-apple/. The hosting agreement is at https://www.365i.co.uk/legal/gdpr-data-processing-agreement/. Cloud AI and marketing form providers are not part of the native login route.
How long information is kept
We retain account links and encrypted Apple refresh credentials while needed for the existing requested account and integration service. The service operator reviews that purpose at the end of a restricted test window and when the sign-in work is completed or cancelled; account retirement is a separate action. Closing a test window or signing out does not delete the account or its Projects. Hosted Project information, revisions and receipts remain with the account until a supported deletion or other justified disposition applies. Expired sessions and sign-in challenges become unusable at their expiry; physical database cleanup is request-driven, not a guaranteed erasure at that second. Our approved retention policy sets 30 days for ordinary support attachments and 90 days for ordinary support messages after resolution; complaints, rights requests and necessary legal evidence have separately justified retention. We limit any retained exception to its purpose and restrict access. Infrastructure log rotation and provider-backup expiry are still being confirmed for wider customer use. No immediate erasure of all logs or backups is promised. Contact us to understand or challenge retention of your information. General customer admission remains closed while the outstanding operating arrangements are resolved.
Signing out deletion and recovery
Signing out ends that session. It does not erase the account, revoke every Apple connection, remove hosted Projects or delete local phone, Watch or Apple Health information. Uninstalling is also different from asking R V to erase hosted information. The current phone login-only release does not provide its own account-deletion service action. To request account deletion or other privacy rights, email support@resultant-vector.com. We verify identity proportionately and explain the affected copies, timing and any justified exception. A provider revocation or deletion request can remain pending; we do not describe it as completed while it is still pending. Restoring account data is outside the restricted login test. Any future restoration must keep account access closed until the responsible operator has reconciled current deletion, revocation and access restrictions; this notice does not certify a completed recovery test.
Your rights and choices
Depending on the circumstances, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where consent is used, you may withdraw it without affecting the lawfulness of earlier processing. Contact support@resultant-vector.com. We normally respond to rights requests within one month, subject to lawful extensions, proportionate identity checks and applicable clarification rules. We explain any extension or refusal and the available complaint options. Choosing not to supply the identifiers and authentication information required for sign in means we cannot provide that account session; it does not itself authorise uploading local records.
Complaints
You can raise a data protection complaint at support@resultant-vector.com. Explain what happened and what you would like us to do, sharing only the necessary information. We acknowledge a complaint within 30 days, investigate appropriately, keep you informed and communicate the outcome without undue delay. Rights requests have separate deadlines. You can also complain to the UK data protection regulator through https://ico.org.uk/make-a-complaint/.
Automated checks and changes
We use automated checks to verify Apple credentials, session validity and the permitted account and testing window. The native login-only release does not activate AI advice, health interpretation or automatic Project changes. We explain material new account uses before they begin and obtain any separate consent that is required. This version is RV-ACCOUNT-2026-11-01-v3, effective 1 November 2026 for the restricted account scope described above. It replaces the earlier draft at this page for that scope; it is not an announcement of general beta availability.