Privacy policy

Effective 6 May 2026. Worldweaver Ltd is the data controller.

What we collect

• Email, name, phone, date of birth, profile photo — to identify you, contact you, and personalise the app.
• Yard, horse, paddock, treatment, visit, vehicle and feed records you create — to provide the service you signed up for.
• Push notification tokens (web, iOS, Android) — to send the reminders and messages you opted into.
• Subscription tier and Stripe customer reference — to bill paid plans. We never see your card number; Stripe handles that directly.
• Login times, IP addresses, basic logs — to detect abuse, debug problems, and keep the service secure.

Where it lives

All data is stored in Microsoft Azure's UK South region. The database is Azure SQL; uploaded images go to Azure Blob Storage in the same region.

Who can see your data

You and people you've invited to your business (Owner / Admin / Member roles). Practitioners you invite, only for records where they're named. Worldweaver staff only when needed to operate or debug. Sub-processors: Microsoft Azure (hosting), Stripe (payments), Apple Push Notification service and Firebase Cloud Messaging (push delivery).

How long we keep it

For as long as your account is active. When you delete your account we remove your personal data within 30 days, except where we're legally required to keep something (e.g. invoices for tax purposes).

Your rights

Under UK GDPR you can ask us to provide a copy of your data, correct it, delete it, restrict processing, or object to processing. Email support@worldweaver.com. You can also lodge a complaint with the UK Information Commissioner's Office.

Cookies and similar

We use a single authentication token (stored locally in your browser or app) to keep you signed in. The Azure load balancer sets a small affinity cookie. We don't use third-party tracking or advertising cookies.

Children

Horsepower isn't aimed at children under 13.

Contact

Worldweaver Ltd, United Kingdom · support@worldweaver.com