Privacy

Last updated: 14 October 2026

The short version

No accounts, no Bitepoint server, no ads and no tracking. Your diary stays on your phone, and we could not read it if we wanted to, because it never reaches us.

The phone apps have one exception, for Unlimited pupils. Apple or Google takes the payment, and a company called RevenueCat confirms it for us. To do that, the app checks in with RevenueCat each time it opens. RevenueCat gets an anonymous ID, basic details of the phone and, once you buy, the purchase record. It never gets your diary. The web version sends none of this.

Who we are

Bitepoint is made and run by Rivermap AI Solutions Ltd, a private limited company, Company No: 16521303. Registered office: 107-111 John Street, Office 300, Blades Enterprise Centre, Sheffield, England, S2 4QX. For anything on this page, email support@bitepoint.app.

We are responsible, as the controller, for the personal data described on this page: the purchase details, the launch email list and visits to this website. Your diary is not part of that, because we never have it.

What the app stores

For each pupil: name, phone number, address, pick-up point, emergency contact and the area they are taught in. Every lesson and how it was paid, with your notes and lesson ratings. Progress records and mock test results. Money in and out, including your expenses and mileage.

All of it is kept in the app’s storage on this device, or in your browser’s storage if you use the web version. There is no account to sign into and no server copy. Your phone’s or computer’s own backup, such as iCloud or Google, may include it. That backup sits in your own Apple or Google account, and we never receive it. If you delete the app, or clear the browser’s data for the web version, the diary goes with it. An export file you have saved yourself is the copy that survives.

If you fill in an emergency contact for a pupil, that is somebody else’s name and phone number sitting in your diary, usually a parent or a partner. Tell your pupil you have it, and only keep it while there is a reason to.

All of it goes into the file when you export everything, emergency contacts included. Where that file goes next is up to you.

What leaves your device

Your diary leaves only when you choose to send it: a backup or spreadsheet you save, or a lesson time or link you share. It goes through your phone’s share sheet or a WhatsApp link to wherever you pick, not through a Bitepoint server, because there are no Bitepoint servers. The drive-time hint looks postcodes up on the phone, in a table that comes with the app, so no postcode is sent anywhere.

The phone apps also talk to RevenueCat about Unlimited pupils, as the next section explains. Nothing from your diary goes with it.

Buying Unlimited pupils (phone apps only)

Apple, through the App Store, or Google, through Google Play, takes the payment. Each handles it as a separate company under its own privacy policy, and we never see your card or bank details. RevenueCat checks purchases for us. It works on our instructions, as our processor.

The phone app talks to RevenueCat each time it opens, to see whether Unlimited pupils is unlocked and to show its price in your store. When you buy, or tap Restore purchases, RevenueCat checks the purchase with Apple or Google. What RevenueCat receives from the app:

• An anonymous ID that RevenueCat makes up for this copy of the app. It starts “$RCAnonymousID” and has nothing of yours in it.
• Once you buy or restore, the receipt or purchase token from Apple or Google: what you bought, and when.
• The phone model, its system version, the app version, your language settings, the country of your store and when the app was last opened.
• On an iPhone, Apple’s “identifier for vendor”: a code for this phone that only apps from the same developer can read.
• On an iPhone, whether apps are allowed to ask to track you (Apple’s App Tracking Transparency setting). RevenueCat only reads it. Bitepoint never asks to track you.

Your IP address is used to work out your country when the store has not given one, and RevenueCat then drops it.

We use this to give you what you paid for, on this phone and on the next one, and to see totals such as how many people have bought it. Once you have bought, our lawful basis is the contract with you. For the checks before that, and for the totals, it is our legitimate interest in making the purchase work and knowing how it sells.

RevenueCat keeps the data in the United States, on Amazon Web Services and the other providers listed in its data processing agreement, and encrypts it on the way there. Data sent from the UK is covered by the UK addendum to the EU standard contractual clauses in that agreement. RevenueCat keeps it for as long as we use RevenueCat, so that Restore purchases keeps working. If we stop using RevenueCat, we will ask it to delete what it holds.

To have your purchase record deleted, email support@bitepoint.app with the order ID from the receipt Apple emailed you (it is also in your Apple purchase history), or the order number on your Google Play receipt, which starts GPA. We will find the record in RevenueCat and delete it. Apple and Google keep their own record of the purchase. If you never bought anything, RevenueCat holds only the anonymous ID and the phone details, and there is nothing you could send us that would find that record.

The web version does not load RevenueCat and sends nothing about purchases. If you would rather RevenueCat heard nothing from you at all, use the web version.

Privacy policies: RevenueCat, Apple and Google.

The launch email

If you leave your email address on this website for the launch email, it is stored in a Google Form response sheet that only we can see. We use it once, to tell you the day Bitepoint reaches the App Store and Google Play, and then the list is archived. Our lawful basis is your consent, and you can take it back at any time: email support@bitepoint.app and we will remove it. Until you ask, it stays in the archived list. Google’s privacy policy is at policies.google.com/privacy.

This website

bitepoint.app is a static site with no analytics scripts and no cookies. It is hosted by Vercel, which handles technical details of each visit, such as your IP address and browser type, to serve the pages and keep the site secure. That is our legitimate interest in running the site. Vercel keeps those details under its own policy, at vercel.com/legal/privacy-policy.

Google and Vercel are based in the United States as well. Vercel is certified under the UK Extension to the EU-US Data Privacy Framework, and Google’s privacy policy explains how it protects data it moves between countries.

Your rights

For the details we hold about you, you can ask for a copy, ask us to correct or delete them, ask us to limit or stop using them, and ask for them in a form you can take elsewhere. Email support@bitepoint.app. Your diary is not on that list, because we never have it: you can see, change, export or delete it yourself in the app. None of this is used to make automated decisions about you or to build a profile of you.

If you are unhappy with how we have handled your data, you can complain to us at the same address. We will confirm we have your complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Contact

Questions about any of this? Email support@bitepoint.app.

Changes

If anything material changes, we will post the update here with a new "last updated" date at the top of this page.