Privacy policy
Website and mobile app operator
This website is operated by Obon Life Ltd., a company incorporated in with registered number 13971920 whose registered address is 9 Park Lane Business Centre, Park Lane, Colchester, Essex, CO4 5WR. You can contact Obon Life Ltd. by email at hello@myark.io.
The type of information we collect
Our website and mobile apps currently collect and process the following information:
- IP addresses associated with an approximate location and the pages accessed on our website.
- Contact email addresses for our newsletter and waiting list.
- Crash reports and anonymous statistics on the usage of our app.
- Your email address and name if you register to use MyArk's cloud services or become a customer.
- General information about payments you make to us, but not your card details as our payment provider handles this.
Our mobile app processes this information, but our system is designed so this data isn’t shared with MyArk servers, systems or staff, with processing performed on your mobile device:
- Personal or financial information that you enter in the MyArk app, or is added to the app automatically as a result of files, emails or financial connections.
- Your email account username, password, or any other details of your email account if you choose to link an account in the MyArk app.
- Any documents you add to MyArk, unless you agree to share them with the development team to help us improve our artificial intelligence, which is entirely optional.
How we obtain the personal information and why we have it
Website
We receive some personal information indirectly, from your accessing our website, such as your IP address and an approximate location.
We use the information that you have given us in order to contact you with emails, if you sign up to a mailing list, and to ensure our website remains secure, and to help us understand how many and how people use the website.
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information is our legitimate interest keeping our systems secure and measuring the performance of our website. If you provide us with your email address to join a mailing list, we’ll ask you to provide consent.
Mobile apps
The personal information collected by our mobile app is normally provided directly by you (e.g. your name or a document you scan), or the connections you choose to add in the app (e.g. to your email account or bank account).
If a MyArk user chooses to share information with you, we’ll use the contact details they provide for you to allow you to receive and accept or reject the request.
- We use your email address and name if you are a customer of MyArk's to protect your account, for example notifying you when there is a new sign-in and allowing you to reset your password.
- We might contact you to provide support, which will normally be in response to a request you make, or if we need to speak to you about issues with a payment or billing.
- We might contact you about offers and new features that may be of interest if you're an existing customer.
- Our mobile app attempts to extract information from documents, emails and financial transactions to populate information in the app. An example of this is identifying your broadband provider or insurance policy details using an email or document scan. We do this to make our app easier to use by reducing manual entry. When we do this, the processing takes place on your mobile device only, and we don't share the information extracted without your consent.
- Our mobile app allows you to connect financial accounts. If you choose to connect an account, we'll collect some information about the banks and account types you've connected (we need this to provide the service) but your transactions, balances, and account details aren't stored on MyArk's servers. Our cloud services might be used to help deliver updates to your mobile device when new data becomes available, but we don't pass the detail of your accounts or transactions through our servers.
- Our mobile app collects information on crashes or unexpected problems and sends these to the development team. This is normally anonymous data as we try to remove any personal information from logs before they're sent.
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing information in the mobile app and is legitimate interests when you first register for an account, sign up for a subscription, or use core functionality like adding documents, where the processing all takes place on your own mobile device.
However, for some parts of the mobile app (e.g. connecting financial accounts, or sharing personally-identifiable data with others), we’ll provide a detailed explanation of how the functionality works and ask for your consent before proceeding. You can revoke your consent at any time.
Who we share information with
Our mobile app can be used to share information including:
- You can choose to share some information with other MyArk app users, such as sharing your household bill information with your partner. You can stop sharing at any time, but they might still have access to information from before you stopped sharing.
- You can choose to connect a financial account to MyArk, for which we'll need to share some basic information with Moneyhub Financial Technology Ltd ("Moneyhub"), who provide the API services that allow this data to be linked to MyArk. You'll be given more information about this in the app before you link an account. They are authorised by the Financial Conduct Authority to provide account information services, and if you use this functionality they'll share information with MyArk so we can display your account and transaction data in the mobile app and provide automation and insights.
- You can choose to share information with service providers using MyArk so you don't have to re-enter information elsewhere, such as to receive an insurance quotation. When you do this, we'll show you exactly what information you'll be sharing and who with.
- You can choose to export data from MyArk to be stored elsewhere, such as Google Drive or a W3C Solid Pod, as a backup or for you to use in other systems. This will only happen if you configure the app to do this.
How we store your personal information
Your information is securely stored. Access logs on our servers are encrypted, and our mobile app is designed to encrypt data until the device is first unlocked, or you can optionally enable further protection with biometrics, FaceID or TouchID.
We keep access logs for up to five years, and contact email addresses until up to three months after you ask us to stop contacting you. We will then dispose of your information unless you were a customer, where we’ll dispose of your data except that which we’re obliged to retain (e.g. details of any payments you made to us for legal and tax reasons).
Data you enter in the MyArk app is not transmitted to MyArk, except where explicitly stated in the app (such as if you volunteer to send us a file to improve our artificial intelligence).
If you send us documents to help us improve our artificial intelligence, we’ll keep these for no more than a year, and normally much less.
Your data protection rights
Under data protection law, you have rights including:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
- You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us by email at hello@myark.io if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us by email at hello@myark.io.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
-
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk/