Privacy Policy

Last updated: 3 August 2026

This policy explains what personal data AplyOne collects, why, and your rights over it. Items marked like this must be completed before publication, and this draft should be reviewed before launch.

1. Who we are

AplyOne ("we", "us", "our") is a service operated by TheInvestmentAnalyst.com Ltd, a company registered in England and Wales (company number 14845454), registered address 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. We are the "data controller" for the personal data described in this policy. For any privacy question or to exercise your rights, contact us at geoff@theinvestmentanalyst.com.

2. The data we collect

Account data: your name and email address, provided when you sign up with email, Google, or Apple. Sign-in is handled by our authentication provider, WorkOS.
Subscription and payment data: your plan, trial and subscription status, and billing records. Card payments are processed by Stripe. We do not see or store your full card details.
Profile data (optional): academic and career details you choose to give us (for example your university, course, year of study, and target roles), used to tailor recommendations and content. You are never required to provide these to use the core tracker.
Usage data: basic information about how you use the service, kept to run, secure, and improve it.

3. How and why we use your data

To provide the service (the tracker, your saved deadlines, and account), on the basis of our contract with you.
To take payment and manage your subscription, on the basis of our contract with you.
To personalise recommendations and content, on the basis of your consent (for optional profile data) and our legitimate interest in improving the service.
To send you service messages, and, where you have not opted out, messages about features and offers during and around your trial.
To keep records we are required by law to keep (for example tax and accounting records), on the basis of our legal obligations.

4. Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract:

WorkOS, for authentication and account management.
Stripe, for payment processing.
Railway and Netlify, for database and website hosting.
Email provider, for service and marketing emails (once enabled).

5. International transfers

Some of our providers (including WorkOS and Stripe) may process data outside the UK, including in the United States. Where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent standard contractual clauses.

6. How long we keep it

We keep your account and profile data while your account is active and for a reasonable period afterwards. We keep payment and transaction records for as long as the law requires (in the UK, generally six years). You can ask us to delete your account at any time.

7. Your rights

Under UK data protection law you have the right to access, correct, delete, or restrict the use of your personal data, to object to certain processing, to data portability, and to withdraw consent at any time. To exercise any of these, contact us at geoff@theinvestmentanalyst.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use a single strictly necessary cookie to keep you signed in. We do not use advertising or third-party tracking cookies, so no cookie banner is required for essential functionality.

9. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, let you know.

10. Contact

Questions about this policy or your data: geoff@theinvestmentanalyst.com.