Skip to content
RDTEQ

Privacy Policy

Last updated: Use your browser’s print function to save as PDF.

1. Who we are

Rdteq LLC ("RDTEQ", "we", "us") is a limited liability company organised under the laws of the State of Wyoming, United States (Wyoming Secretary of State filing ID 2026-002073122, formed 3 September 2026). We build and publish apps for iPhone, iPad and Mac through Apple's App Store.

Rdteq LLC is the data controller (the party that decides how and why personal data is processed) for the processing described in this policy.

Contact for privacy matters: privacy@rdteq.com Postal address: Rdteq LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States Registered agent (service of process): Registered Agents Inc, 30 N Gould St, Ste R, Sheridan, WY 82801

2. Scope

This policy applies to:

  • the website rdteq.com (the "Website"), and
  • every app published by RDTEQ (the "Apps"), unless an app has its own privacy policy published at rdteq.com/apps/<app>/privacy. Where an app has its own policy, that policy adds to (and, in case of conflict, prevails over) this one for that app.

It does not apply to Apple's services (App Store, iCloud, Apple ID, Sign in with Apple), which are governed by Apple's Privacy Policy.

3. Website: we collect no personal data

The Website is a static site. When you visit it:

  • No cookies are set, and no local storage is used to identify you. That is why you will not see a cookie banner: there is nothing to consent to.
  • No analytics, no tracking pixels, no third-party scripts, no embedded social widgets. Fonts are served from our own domain.
  • No forms send data to us. Contact links open your own email app.
  • Server logs. Our hosting provider, Binadit (see Section 6), keeps standard technical server logs (IP address, requested URL, timestamp, user-agent) for security and reliability. RDTEQ does not analyse these logs or use them to identify visitors. They are retained by the provider for a short period under its own policy.

4. Apps: general principles

Every RDTEQ app is built on the same principles:

  1. Data minimisation. We only process what an app needs to function. If a feature can work on your device alone, it does.
  2. End-to-end encryption where offered. Where an app provides end-to-end encrypted (E2EE) messaging, storage or sync, the content is encrypted on your device with keys that only you (and your intended recipients) hold. RDTEQ cannot read message contents and does not store them in readable form. We hold no copies of your keys and offer no key escrow.
  3. No advertising. Our apps contain no ads and no advertising SDKs.
  4. No sale or sharing of personal data. We do not sell personal data, and we do not "share" it for cross-context behavioural advertising in the sense of the California Privacy Rights Act (CPRA).
  5. No tracking. We do not track you across other companies' apps or websites, and we do not link your data with data from data brokers. Our apps therefore do not need to ask for App Tracking Transparency permission, because there is no tracking to consent to.
  6. On-device by default. Your data stays on your device and in your own iCloud account (if you enable iCloud features) unless a feature explicitly requires a server.

5. Data we may process

Depending on the app and the features you use, we may process the categories below. Each app's own privacy page lists which of these actually apply to it. If a category is not listed there, that app does not process it.

DataPurposeLegal basis (GDPR)Retention
Account identifier (e.g. email address or phone number, if the app offers sign-in)Create and secure your account, let you sign in, send security noticesPerformance of a contract (Art. 6(1)(b))Until you delete your account, then removed within 30 days from active systems and within 90 days from backups
Push notification token (an anonymous device token issued by Apple)Deliver notifications you enabledPerformance of a contract (Art. 6(1)(b)); your device settings control itUntil you disable notifications, sign out, or delete the app; stale tokens are purged automatically
Crash diagnostics (stack trace, OS version, device model, app version; never message content)Find and fix bugsConsent (Art. 6(1)(a)), only if you enable "Share with app developers" in iOS Settings; otherwise Apple's own opt-inReports are kept for 90 days
Purchase receipts (Apple transaction identifier, product, dates; never your card details)Verify subscriptions and in-app purchases, restore purchases, handle refundsPerformance of a contract (Art. 6(1)(b)); legal obligation for accounting (Art. 6(1)(c))For the life of the subscription plus the period required by tax law
Support correspondence (your email and what you write to us)Answer your requestLegitimate interest in providing support (Art. 6(1)(f))24 months after the ticket is closed
E2EE content (messages, files, notes sent through an E2EE feature)Transmit or sync between your devices/recipientsPerformance of a contract (Art. 6(1)(b))Ciphertext is held only as long as needed for delivery (typically seconds; at most 30 days if a recipient is offline) and is never readable by us

We do not process special categories of personal data (health, biometrics, political opinions, etc.) unless you choose to put such information inside E2EE content, which we cannot read.

We do not make automated decisions with legal or similarly significant effects about you.

6. Third parties

We use as few third parties as possible:

  • Apple Inc. — the App Store (distribution, payments, refunds), StoreKit (in-app purchases), Apple Push Notification service (notifications), and, if you use it, iCloud/CloudKit and Sign in with Apple. Apple acts under its own privacy policy.
  • Binadit (binadit.com) — hosting provider for the Website and any app servers. Servers are located in the Netherlands (European Union). Binadit processes technical data (IP addresses, server logs) on our behalf as a processor. [TODO: confirm a data processing agreement (GDPR Art. 28) with Binadit is signed]

No other processors receive your data unless an app's own privacy page lists them. We do not use advertising networks, analytics vendors, or data brokers.

7. Children

Our Website and Apps are not directed to children under 13 (or under the minimum age required in your country, e.g. 16 in parts of the EU). We do not knowingly collect personal data from children. Apps that require an account require you to be at least 13 (or the local minimum age).

If you believe a child has provided us with personal data, email privacy@rdteq.com and we will delete it promptly. We comply with the U.S. Children's Online Privacy Protection Act (COPPA).

8. Your rights

You can always:

  • Access the personal data we hold about you and receive a copy.
  • Correct inaccurate data.
  • Delete your data. Every app with an account offers in-app account deletion (typically under Settings → Account → Delete account), as required by Apple's App Review Guideline 5.1.1(v). Deletion removes your account and its data from our systems as described in Section 5. See How to delete your account.
  • Export your data in a portable, machine-readable format (portability).
  • Object to, or ask us to restrict, processing based on legitimate interests.
  • Withdraw consent at any time where processing is based on consent (e.g. crash diagnostics), without affecting prior processing.

To exercise these rights, email privacy@rdteq.com from the address associated with your account (or provide enough detail for us to verify it is you). We respond within 30 days (45 days for CCPA requests, extendable once). There is no charge unless requests are manifestly unfounded or excessive. We will never discriminate against you for exercising your rights.

California residents (CCPA/CPRA)

  • We do not sell personal information and we do not share it for cross-context behavioural advertising. There is therefore no "Do Not Sell or Share My Personal Information" choice to make, but you may send us such a request anyway and we will confirm.
  • We do not use or disclose sensitive personal information for purposes other than those permitted by the CPRA.
  • The categories of personal information we may collect, and their purposes, are listed in Section 5. Sources: you and your device; Apple (purchase receipts). Disclosures: only to the service providers in Section 6.
  • You may designate an authorised agent to make a request on your behalf; we will ask for proof of authorisation.

EU / EEA / UK residents (GDPR / UK GDPR)

  • Our legal bases are listed per category in Section 5.
  • You have the right to lodge a complaint with your local supervisory authority (list of EU authorities; in the UK, the ICO).
  • EU representative: [TODO: we have not yet appointed a representative under GDPR Art. 27; add name and address once appointed].
  • UK representative: [TODO: not yet appointed].

9. Security

  • In transit: all connections between our apps, our servers and Apple's services use TLS 1.2 or later.
  • At rest: server-side data is encrypted at rest by our hosting provider.
  • End-to-end encryption: where an app offers E2EE, content is encrypted on your device using modern, publicly reviewed cryptography (for example the Double Ratchet / X3DH family, or AES-256-GCM with keys derived on device). Private keys never leave your device unencrypted. We hold no keys and offer no key escrow, so we cannot decrypt your content, even if asked to.
  • Access control: access to production systems is limited to the minimum number of people, protected by hardware security keys and multi-factor authentication.
  • Breach notification: if a breach of personal data is likely to result in a risk to you, we will notify the relevant authorities within 72 hours where required (GDPR Art. 33) and notify affected users without undue delay, in accordance with applicable state and federal law.
  • Responsible disclosure: security researchers can reach us at security@rdteq.com. See Security.

We comply with valid legal process (such as a subpoena, court order or warrant) issued by a court or authority with jurisdiction over RDTEQ LLC. We review every request and push back on requests that are overbroad or improper.

We cannot produce end-to-end encrypted content, because we do not hold it and cannot decrypt it. What we could be compelled to produce is limited to the non-content data described in Section 5 (for example an account email address and sign-up date).

Unless legally prohibited, we notify affected users before disclosing their data. If we ever receive a legal request, we will publish a transparency note on this page.

Transparency note: as of the "Last updated" date above, Rdteq LLC has received no law-enforcement or government requests for user data, and has never been subject to a national-security order. [TODO: update this statement at each revision]

11. International transfers

The Website and our servers are hosted by Binadit in the Netherlands (EU), so website visitors' technical data does not leave the European Union.

Rdteq LLC itself is established in the United States. Personal data that we access as a company (for example support correspondence, or account identifiers we look up to handle a rights request) may therefore be processed in the US. If you are in the EU/EEA, UK or Switzerland, we rely for such transfers on:

  • the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, and
  • where a provider is certified, the EU-US Data Privacy Framework.

Because the only personal data we hold server-side is minimal (see Section 5) and E2EE content is unreadable to us, the transfer risk is correspondingly low. You can request a copy of the safeguards at privacy@rdteq.com.

12. Changes to this policy

We may update this policy when our apps or the law change. The "Last updated" date at the top tells you when. For material changes affecting an app with accounts, we will also notify you in the app or by email before the change takes effect. Previous versions are available on request.

13. Contact