Privacy Policy

Last updated: 24/09/2026

Welcome to AgentApp24 ("we", "us", or "our").
We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and related services (together, the "Service").

1. Who We Are

AgentApp24 is operated by TopBamboo Limited, a company registered in England and Wales.
Company number: 12868964
Email: info@topbamboo.co.uk

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

Information you provide directly

Account information: your email address (required), first name (required), last name (optional), profile picture (optional) and time zone.
Content you create: tasks, events, notes, comments, checklists, messages, custom field values, and the names you give folders and spaces.
Document links: the web address and label of documents you pin. We store the link, never the file itself.
Pasted images: screenshots you paste into a comment. These are the only files we store, and they are subject to a per-space limit shown in the app.
Messages to the Agent: what you ask it, and what it proposes in reply.
Communications: information you provide when contacting us for support or feedback.

Information about other people

When you add someone to a space, assign them a task, or record a detail about a family member, colleague or club member, you are giving us personal data about them. Section 4 explains how that is handled, and the Terms of Use explain your responsibilities for it.

Information collected automatically

Technical data: IP address, device type, operating system and browser information, collected by our hosting provider as part of serving the Service securely.
Service records: sign-in times, notification delivery records, and a record of your use of the Agent (including a count of the processing consumed), so we can operate fair limits and diagnose faults.

We do not use third-party analytics, advertising or tracking technologies. See section 12.

3. How We Use Your Personal Data

Each purpose below is followed by the legal basis we rely on under UK GDPR.

To create and manage your account — performance of a contract
To provide core features — calendars, tasks, folders, spaces, messages — performance of a contract
To show your name and activity to the other members of a space you join — performance of a contract
To send reminders and notifications you have asked for — performance of a contract
To provide the Agent and answer what you ask it — performance of a contract
To communicate with you (e.g. support requests, service updates) — legitimate interest / consent
To measure and limit Agent usage so the Service stays available and affordable — legitimate interest
To keep the Service secure and to investigate faults or misuse — legitimate interest
To maintain and improve our Service — legitimate interest
To comply with legal obligations — legal obligation

We do not sell or rent your personal data to third parties, and we do not use your content to train AI models.

4. Shared Spaces — What Other People Can See

This is the part of the Service most worth understanding.

Your Personal space is private to you. Nobody else can see it.

A shared space has members. When you join one, or contribute to one:

Your name and profile picture are visible to the other members of that space.
Anything you put in a folder is visible to every member who has been granted access to that folder, and they may be able to edit it.
Your activity — creating, changing, completing, commenting — is recorded in the item's history and is visible to those members.
The space's Admin decides who is invited, who is removed, and who can see which folders.

We are the data controller for the Service as a whole. But the person who creates a shared space decides what goes into it and who sees it, and where that space is run by a business, club or other organisation, that organisation has its own responsibilities for the personal data it puts there. If you have a question about information held in someone else's space, the Admin of that space is the right first point of contact.

If you leave or are removed from a space, you lose access to it. Content you contributed may remain visible to the remaining members so that their records stay intact — see section 8.

5. The Agent and AI Processing

The Agent is an assistant you can ask questions and give instructions to.

What is sent. To answer you, we send your message and the relevant parts of your content to a third-party AI provider. The Agent can read across the spaces you have access to, so that it can answer questions that span your life and your work — it cannot read anything you could not already see yourself.
Who processes it. Agent requests are currently processed by Google Gemini, reached through the Base44 platform.
Training. Your content is not used to train AI models.
Accuracy. AI output can be wrong. The Agent shows you what it proposes to do and waits for you to confirm before it changes anything.
Records. We keep a record of Agent conversations so you can refer back to them, and a count of the processing each turn consumed so we can operate fair limits.

If you would rather a particular piece of information were never sent to an AI provider, do not put it in a message to the Agent.

6. How We Share Your Data

We share your data only with:

Base44 — the platform on which the Service is built and hosted, providing the application hosting, database, authentication, email sending and push notification delivery.
Google — for Agent processing (Gemini), and for sign-in if you choose "Continue with Google". If you sign in that way, Google tells us your email address and basic profile information; we do not receive your Google password.
Regulatory authorities or law enforcement, when required by law.

All third-party processors are required to meet UK GDPR standards and to process data only on our instructions.

7. International Transfers

The Service is hosted on infrastructure located outside the United Kingdom, and the AI provider that supports the Agent also processes data outside the UK. This means your personal data is transferred internationally.

Where data leaves the UK, we rely on UK-approved safeguards — the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses — or on a jurisdiction covered by UK adequacy regulations.

You may ask us for details of the safeguards that apply by contacting us at info@topbamboo.co.uk.

8. How Long We Keep Your Data

We keep your personal data only as long as necessary to:

Provide the Service;
Meet legal or regulatory requirements; or
Resolve disputes.

If you delete your account, we will remove or anonymise your personal data within 30 days, unless we are required by law to retain it longer.

One exception, which is worth stating plainly. Content you contributed to a shared space may remain in that space after your account is closed, so that the other members' records — a club's fixture list, a business's job history — do not develop holes. Where that content identifies you, your name is replaced so that the record remains intelligible without continuing to identify you. If you want specific content removed rather than anonymised, contact us or the Admin of that space.

9. Your Rights

Under UK GDPR, you have the following rights:

Access – to request a copy of the personal data we hold about you.
Rectification – to correct inaccurate or incomplete information.
Erasure – to request deletion of your personal data ("right to be forgotten").
Restriction – to limit how we use your data in certain circumstances.
Portability – to receive your data in a machine-readable format.
Objection – to object to processing based on legitimate interests.
Withdrawal of consent – where processing is based on consent.

To exercise your rights, contact us at info@topbamboo.co.uk.
We may need to verify your identity before processing your request.

Please note that where your data sits inside a shared space run by someone else, we may need to involve that space's Admin in order to act on your request, and there may be limits on what we can remove without damaging other members' records.

If you are unhappy with how we handle your data, you can lodge a complaint with the Information Commissioner's Office (ICO): www.ico.org.uk

10. Data Security

We use appropriate technical and organisational measures to protect your personal data, including:

Encryption in transit and at rest;
Access rules enforced per user and per folder, so that members of a space see only what they have been granted;
Limited access by us, on a need-to-know basis, for support and fault diagnosis.

However, no system is completely secure, and we cannot guarantee absolute security of your data transmitted via the internet.

11. Children's Privacy

Our Service is not directed to children under 16 years old, and we do not knowingly collect data from anyone under that age.

Please note that an adult may record information about a child — a school event, a fixture, a medical appointment — within their own or a family space. That information is the responsibility of the adult who enters it, and is covered by this Policy in the same way as any other content.

If you believe a child under 16 has registered an account, please contact us and we will delete it promptly.

12. Cookies and Local Storage

We do not use tracking cookies, advertising cookies or third-party analytics.

We use:

Essential cookies and tokens, to keep you signed in and to keep your session secure. The Service does not work without these.
Your browser's local storage, to remember small preferences on your own device — which columns you have shown in a table, whether you have hidden completed items, and whether you have already seen a one-time explanation. This information stays on your device and is never sent to us as a profile of your behaviour.

You can clear this at any time through your browser settings, though doing so will sign you out and reset those preferences.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes.
If we make significant updates, we will notify you via email or within the app.
The "Last updated" date at the top will always indicate the latest version.

14. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact:

Email: info@topbamboo.co.uk

AgentApp24 is a trading name of TopBamboo Ltd

TopBamboo Ltd is the name of our company through which we do our work which we hope will have a positive impact on our community and environment. TopBamboo Ltd has a website www.topbamboo.co.uk

Our other trading entity is TopBambooImpact which is where we sell merchandise to help us fund our work. Do take a look at www.topbambooimpact.co.uk