Privacy
Last updated: 4 September 2026
Notice90 is a product of FKIT Club Ltd (company 14507831). We follow the UK GDPR and the Data Protection Act 2018. If you use us from the United States, we also respect applicable US state privacy rights as described below.
Who is responsible
FKIT Club Ltd is the controller. Registered office: The Gables, Byrkley, Burton-on-Trent, Staffordshire, DE13 9RF, United Kingdom. Write to support@notice90.com.
Optional two-step sign-in is never required to use Notice90. If Account offers it, we hold only the authenticator binding needed to verify it.
What we hold, and why
- Name, email, password hash
- Account and sign-in
- Contract
- Session cookies
- Keep you signed in
- Strictly necessary / legitimate interests
- Renewals, notes, preferences, optional income
- Run the book
- Contract
- Plan, Stripe customer and subscription ids
- Billing. We never store card numbers.
- Contract
- Reminder and account emails
- Deliver the service
- Contract
- Basic security and admin metadata (not renewal notes)
- Secure the service
- Legitimate interests
We do not sell personal data. We do not use the book for advertising. Snapshots are computed on our servers from the numbers you entered. Nothing in the book is sent to a language model to train a model.
Who else sees it
These processors see what they need to run the service. We do not plug your book into other tools.
- Vercel Inc.
- Website and server functions
- United States (production region iad1)
- Supabase
- Hosted Postgres for accounts and the renewal book (project notice90-live). Sign-in is Better Auth on app servers — not Supabase Auth.
- eu-west-2 (London) · db.qilbsxivxkyyezwtbxvc.supabase.co
- Stripe, Inc.
- Payments
- United States, and other locations Stripe publishes
- Microsoft Outlook via n8n
- Transactional email on FKIT infrastructure when mail is live — reminders, payment failed, deletion. Not marketing. Mail may be phased on.
- FKIT infrastructure
International transfers
The website and server functions are hosted in the United States today (Vercel region iad1), including for people in the United Kingdom. The database is Supabase Postgres in eu-west-2 (London). We rely on each provider's published transfer mechanisms, including standard contractual clauses where they apply.
How long we keep it
- While the account is open, the book and the login stay.
- If you delete an item, it is removed from the live book.
- If you delete the account, type DELETE. There is a 7-day hold, then we purge the live database. We may keep Stripe invoices and tax records, and a thin deletion audit. We do not keep renewal notes.
- Database backups: Supabase managed backups on the current Free plan. Point-in-time recovery (PITR) is not enabled. We do not invent a multi-day PITR window. A deleted account may remain in any residual managed backup Supabase retains until that backup ages out; we do not promise the book is gone from every backup within 7 days.
- Restores are handled by the controller, FKIT Club Ltd, and its account operators.
- A failed payment may move the account to Starter. It does not delete the book.
Your rights
Under UK law you can ask for access, correction, erasure, restriction, portability, and to object. On a paid plan, download a CSV copy from Account. On Starter, email support@notice90.com for a copy — we will verify identity. Delete in the app or by email. You can complain to the ICO.
If you use us from the United States: we do not sell personal data, and we do not share it for cross-context behavioural advertising.
Children
Notice90 is not for anyone under 16.
Emails
Service emails (reminders, payment failed, deletion) are part of the product when mail is live. Marketing and growth email is not on.
Cookies
Essential cookies only. See the cookie notice.
Contact
support@notice90.com. Operated by FKIT Club Ltd. Powered by FKIT.
Notice90 is operated by FKIT Club Ltd. Powered by FKIT.