Privacy Notice

Who we are

CaseEthics, trading as CaseEthics, is the data controller for the personal data described in this notice. That means we decide why and how your data is used. You can reach us at support@caseethics.app.

What we collect and why

• Account data (email address, username, password hash) — to create and secure your account. Legal basis: performance of our contract with you.
• Content you create (custom dilemmas, case notes, binder entries, saved analyses, arguments, debate messages) — to provide the Service and save your work across devices. Legal basis: performance of our contract.
• AI prompts and outputs — sent to our AI provider to generate the response you asked for. Legal basis: performance of our contract.
• Usage data (number of AI interactions, subscription status, timestamps) — to enforce free usage limits and provide paid features. Legal basis: performance of our contract and our legitimate interest in preventing abuse.
• Technical data (IP address, device and browser information, error logs) — for security, fraud prevention, and diagnosing problems. Legal basis: our legitimate interest in keeping the Service safe and working.
• Support messages — to answer your questions. Legal basis: legitimate interest.

We do not collect or store your payment card details. Payment data is collected directly by Paddle.

Who we share it with

• Paddle — our Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing, and tax compliance.
• Service providers — hosting, database, authentication, and AI model providers who process data on our instructions to run the Service.
• Advertising — Google AdSense serves ads on the Service and may use cookies for that purpose.
• Professional advisers and authorities — where required by law or to establish or defend legal claims.

We do not sell your personal data. Where data is transferred outside the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

How long we keep it

We keep your account data and saved work for as long as your account is open. If you delete your account, your profile, custom dilemmas, binder entries, and saved analyses are deleted with it. Records we must keep for legal, tax, or accounting reasons are retained for the period the law requires, then deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access your data, correct it, have it erased, restrict or object to its processing, receive a portable copy, and withdraw consent. You can exercise most of these directly from your account settings, or by emailing support@caseethics.app — we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your local supervisory authority.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, and access controls that limit each account to its own records.

Cookies

We use essential cookies and local browser storage to keep you signed in and to remember your theme preference. Our advertising partner may set advertising cookies. You can manage or clear cookies in your browser settings; blocking essential cookies will prevent sign-in from working.