Privacy Policy
Last updated: 11 October 2026
1. Who I am
OwlApps is the trading name of Marius-Florin Poenaru ("OwlApps", "I", "me"), based in London. OwlApps designs, builds and rents web apps to businesses. I am the data controller for the personal data described in this policy.
For any privacy question, email hello@owlapps.co.uk.
2. What this policy covers
This policy covers personal data I collect through owlapps.co.uk, by email, by WhatsApp, and when a business subscribes to an OwlApps app.
It does not cover the data a customer stores inside their own app (for example their stock records or their own customers' details). For that data the customer is the controller and I act as their processor, as set out in the Data processing section of the Terms & Conditions.
3. What I collect
| Who | Data | Where it comes from |
|---|---|---|
| People who contact me | Name, business name, email, phone number, message | Email, WhatsApp, demo calls |
| Customers | Contact person, business name and address, billing details, invoices, support history | Sign-up, invoices, emails |
| Customers’ staff using an app | Name, work email, login details, activity in the app (for example who booked an item in) | The app |
| Website visitors | IP address and basic technical data, kept briefly by my hosting provider for security | Cloudflare |
I do not collect special category data (such as health data) and do not knowingly collect data from children.
4. Why I use it and my lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to enquiries and arranging demos | Legitimate interests: responding to people who contact me |
| Providing the app and support to a customer | Contract |
| Staff logins and app security | Contract with the customer, and legitimate interests in keeping the service secure |
| Invoicing and keeping tax records | Legal obligation |
| Occasional service updates to customers (for example planned maintenance) | Legitimate interests |
| Marketing emails | Consent only; you can unsubscribe at any time |
5. Who I share it with
I never sell personal data. I use these trusted providers to run OwlApps:
| Provider | What they do |
|---|---|
| Cloudflare | Website and app hosting, security |
| Supabase | App database and logins |
| Zoho | Business email |
| Only where a customer’s app uses Google Sheets or Google Drive | |
| WhatsApp (Meta) | Only if you choose to message me on WhatsApp |
| My payment provider (named on your invoice) | Taking payments |
| My accountant | Bookkeeping and tax |
I may also share data if the law requires it.
6. Where it is stored and how it is protected
App data is stored in the European Union (Ireland). Where any provider handles data outside the UK, I rely on the UK’s adequacy regulations or the standard contractual clauses approved for the UK.
Data is encrypted in transit (HTTPS) and access is protected by logins. Only I have administrator access. Backups are taken automatically and kept securely.
7. How long I keep it
| Data | Kept for |
|---|---|
| Enquiries that do not become customers | 2 years after last contact |
| Customer account and app data | For the subscription, then permanently destroyed, including backups, when the account is closed |
| Backups | Up to 30 days, then overwritten |
| Invoices and accounting records | 6 years, as HMRC requires |
8. Your rights
You can ask me to:
- give you a copy of your data
- correct it
- delete it
- restrict or object to how I use it
- send it to you or another provider in a common format
Email hello@owlapps.co.uk. I will reply within one month. If your data is inside a customer’s app, I will pass your request to that customer, as they control it.
If you are unhappy with how I handle your data, please contact me first at hello@owlapps.co.uk so I can put it right. If you are still not satisfied, you also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
9. Cookies
owlapps.co.uk does not use cookies or tracking. The page loads fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads.
The apps use a small number of essential cookies or browser storage to keep you logged in. These are needed for the app to work, so no consent banner is required.
10. Changes
I will update this policy when my services change. The date at the top shows the latest version. Customers will be told about significant changes by email.