Privacy Policy
Effective date: 28 October 2026
This Privacy Policy explains how Promptly processes personal data when you use the Promptly mobile app, its website at getpromptly.uk, and related support services.
1. Who is responsible for your information?
The data controller is AVENIQ LABS LTD, a company registered in England and Wales under company number 17548934. AVENIQ LABS LTD operates the Promptly app and website.
Registered office:45 Eleanor Street
London
United Kingdom
E3 4UR
Email: [email protected]
2. Information we process
- Account information: your email address, account identifier, authentication details and related account metadata. Password authentication is handled through our authentication provider; we do not need to view your password.
- Prompt content: the text you submit for enhancement, your Smart Enhance answers and generated prompt content, to the extent needed to provide the feature.
- Saved prompts: prompts you choose to save to your account, together with related metadata.
- Usage and operational records: enhancement requests, daily usage counts, request statuses, timestamps and Smart Enhance session records used to apply free-tier limits, prevent duplicate charges against your allowance and resolve interrupted requests.
- Support communications: information you send us when you contact support.
- Website analytics: limited website visit and performance information collected through Cloudflare Web Analytics, where enabled for the visitor.
Please avoid entering sensitive personal information, passwords, payment-card details or confidential third-party information into prompts unless you are authorised to share it and understand the implications.
3. Why we process information and our legal bases
- Provide the service (contract): create and manage accounts, enhance prompts, generate Smart Enhance questions and results, save prompts and maintain your daily enhancement allowance.
- Security and reliability (legitimate interests): detect abuse, troubleshoot errors, recover interrupted requests and protect the service.
- Respond to enquiries (legitimate interests or steps relating to a contract): answer support messages and account requests.
- Meet legal obligations (legal obligation): respond to valid legal requests and comply with applicable law.
- Understand website performance (legitimate interests, where applicable): use privacy-oriented website analytics to assess site usage and performance.
4. AI processing and service providers
When you request an enhancement, Promptly sends the relevant prompt content and, for Smart Enhance, relevant answers or context to the OpenAI API to generate a response. OpenAI processes this information under its applicable API terms and data-handling policies. The API requests used by Promptly’s reviewed enhancement functions specify store: false, which means those responses are not requested to be stored for later retrieval through the API. This does not disable all provider retention or abuse-monitoring logs. Promptly uses standard OpenAI API data-retention arrangements and does not claim zero data retention. OpenAI's own retention and security rules may differ from Promptly's database retention periods.
We use Supabase for account authentication, application database services and backend functions. Our primary Supabase database is hosted in the London region. We use Cloudflare for website hosting, delivery and web analytics. These providers may process data on our behalf or as otherwise described in their applicable terms and privacy notices. Email providers may also process account-related and support emails.
We do not sell your personal information.
5. How long we keep information
| Information | Retention approach |
|---|---|
| Saved prompts | Until you delete an individual saved prompt or delete your account. |
| Smart Enhance session records | Completed and failed session records are scheduled for deletion once older than 30 days. Interrupted sessions are separately processed for recovery before eligible records are deleted. |
| Completed or refunded enhancement request records | Scheduled for deletion after 90 days, provided no Smart Enhance session still references the request. |
| Daily usage records | Scheduled for deletion after 90 days. |
| Account information | While your account remains active, subject to account deletion and any legal retention requirements. |
| Support correspondence | For as long as reasonably needed to handle your enquiry and any associated legal obligations. |
These are retention practices for Promptly's primary application database. Information in security logs, provider systems, emails and backups may be subject to different retention schedules and may not disappear immediately when an application record is deleted.
6. Account and prompt deletion
You can delete individual saved prompts within the app. You can delete your account directly within the app’s Settings screen. After you confirm deletion by entering "DELETE MY ACCOUNT", Promptly automatically deletes your account and associated records from its primary application database without requiring manual approval. Account deletion removes the account and its associated records from Promptly's primary application tables, including saved prompts, usage records, enhancement requests and Smart Enhance sessions. This does not necessarily erase data already processed by third-party providers, retained in backups, or required by law.
If you need assistance, email [email protected].
7. International data transfers
Our service providers may process or store information outside the United Kingdom. Where UK data protection law requires safeguards for international transfers, we seek to rely on applicable adequacy regulations or recognised contractual safeguards, as appropriate to the provider and processing arrangement. You can contact us for further information about relevant safeguards.
8. Your UK data protection rights
Subject to applicable exceptions, you may have rights to access, correct, erase or restrict your personal data, object to certain processing and receive certain information in a portable format. Where processing is based on consent, you may withdraw that consent. You also have the right to raise a concern with the UK's Information Commissioner's Office (ICO) at ico.org.uk.
To exercise your rights, email [email protected]. We may need to verify your identity before responding.
9. Website analytics and cookies
Promptly uses Cloudflare Web Analytics for basic website traffic and performance reporting. Its availability and collection may depend on geographic settings and the website configuration. The app also uses device-based storage necessary to maintain authentication and application functionality. If we introduce non-essential cookies or additional analytics technologies, we will update this notice and provide any required choices.
10. Children
Promptly is not designed specifically for children. If you believe a child has provided personal information to us without appropriate authorisation, please contact us so we can review the situation.
11. Changes to this policy
We may update this policy when our features, providers or legal obligations change. We will publish the revised version on this page and update its effective date. Where required, we will provide additional notice.
12. Contact
For privacy questions or requests, contact [email protected] or write to AVENIQ LABS LTD, 45 Eleanor Street, London, United Kingdom, E3 4UR (company number 17548934).