BMVP AI Ltd ("we", "us", "our") is the data controller for all services described in this policy. Company No. 17126191. Registered in England and Wales.
This policy applies to all BMVP AI Ltd services:
localStorage only. Never sent to our servers.localStorage to avoid repeating on return visits. Not transmitted.There is no advertising on bmvp.io or any of our other products, and we do not set advertising or analytics cookies. We do not use Google AdSense, Google Analytics or any other ad or tracking service.
bmvp.io sets no cookies at all. It only keeps your game scores and your age-gate answer in your browser's localStorage, which never leaves your device. Because nothing is used for advertising or tracking, there is no cookie banner.
Under the General Data Protection Regulation, EU/EEA residents have the right to: access their data, rectify inaccurate data, erasure ("right to be forgotten"), restriction of processing, data portability, object to processing, and withdraw consent at any time without affecting prior processing.
You may also lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.
Legal basis: Enquiries and server logs — legitimate interests (Art. 6(1)(f)). We do not use advertising or analytics cookies.
To exercise any right, email legal@bmvp.ai. We respond within 30 days.
California residents have the right to: know what data is collected; delete personal information; correct inaccurate data; opt out of sale or sharing; and non-discrimination for exercising these rights.
We do not sell or share personal information. We do not serve advertising.
To submit a CCPA request, email legal@bmvp.ai with "CCPA Request" in the subject. We respond within 45 days.
Our services are not directed at children under 13. bmvp.io displays an age gate on every first visit. Users who indicate they are under 13 are blocked — no data is collected.
QR Studio is a productivity tool intended for adults. If you are under 18, you must have parental or guardian consent to use them.
If you believe a child under 13 has provided us with personal data, contact legal@bmvp.ai immediately.
We use encrypted data transmission (TLS/HTTPS), hashed passwords, restricted database access, and regular security reviews. To report a security concern, email legal@bmvp.ai.
We use the following third-party data processors. Under GDPR, these are sub-processors operating under our instruction:
We do not share your personal data with advertisers, data brokers, or third parties for commercial purposes.
Treasynx, formerly Hourloom, is our Android day planner. It works differently from our websites: your tasks, notes and schedules are stored locally on your device, not on our servers. There are no user accounts and no server holding your day.
Data leaves the device only for features you choose to use, and each is off until you set it up. Most go directly from your phone to a service you picked, never through us: an AI prompt to the provider you configured using your key; weather, place and route lookups to the services named in the app; encrypted backups to a server you supply; and speech to your phone's own speech service. Treasynx can also run a small AI model on the phone itself, in which case no AI request leaves at all.
Two optional features reach bmvp.ai's own server, hosted by Supabase in Ireland. Plan-shape donation, off unless you switch it on, sends twelve anonymous numbers describing the shape of a plan. MARK card verification — not yet on sale — checks the single-use code a MARK card produces when tapped, and keeps that card's chip ID, serial and tap count; nothing about your schedule. Anonymous usage analytics are off unless you agree to them in the app.
We may update this policy. Material changes will be notified by updating the date above. Continued use constitutes acceptance.