Privacy Policy.

Last updated: 8 May 2026 · Effective immediately

This Privacy Policy explains what personal data we collect when you use our website at si187apps.com or sign up for our waitlist or Labs programme, why we collect it, and what we do with it. It's written in plain English because we think privacy policies should actually be readable.

1. Who we are

The "we" in this document is si187 Enterprises Ltd, a private limited company registered in England and Wales. We trade as si187 Apps. Our registered office is in London, UK.

For the purposes of UK GDPR and the Data Protection Act 2018, si187 Enterprises Ltd is the data controller for any personal data collected through this site or our products.

2. What we collect

We try to collect as little as possible. Here's everything:

From the waitlist forms

• Email address — required to contact you about FPL Coach AI early access.
• Name — only on the Labs sign-up form, optional.
• Your interest area and any free-text response — only on the Labs sign-up form, optional.
• Submission timestamp — automatically recorded.

From your visits to our website

• Standard server logs — IP address, user agent, pages visited, referrer. Held by Cloudflare and GitHub Pages for security and abuse prevention.
• Analytics data — only if you accept cookies. See section 4.

If you email us

• Email content and metadata — whatever you choose to send to [email protected] or any other address at si187apps.com.

We do not collect payment information through this site. When FPL Coach AI launches on the App Store, payments will be handled entirely by Apple — we never see your card details.

3. Why we collect it

Each piece of data has a specific purpose and a lawful basis under UK GDPR:

• Waitlist email — to send you launch updates and early access information you've asked for. Lawful basis: consent (Article 6(1)(a) UK GDPR).
• Labs sign-up data — to communicate with you about our market testing programme and shape future products. Lawful basis: consent.
• Server logs — to keep the site running, prevent abuse, and debug issues. Lawful basis: legitimate interests (Article 6(1)(f)).
• Analytics — to understand how the site is used and improve it. Lawful basis: consent.
• Email correspondence — to reply to you. Lawful basis: legitimate interests.

4. Cookies and analytics

We use a small number of cookies, but only with your explicit consent. When you first visit, you'll see a cookie banner asking whether you accept. If you decline or ignore it, no analytics cookies are set.

Cookies we may set with consent

• Google Analytics 4 cookies (_ga, _ga_*) — measure site usage. Anonymised IP. 13-month retention.
• Consent preference cookie (si187_cookie_consent) — remembers your cookie choice so we don't ask every visit. Strictly necessary, set regardless of consent. 12-month retention.

Strictly necessary (no consent required)

• Cloudflare security cookies (__cf_bm, cf_clearance) — protect the site from bots and abuse. Set automatically by our infrastructure provider.

You can change your cookie choice at any time by clicking the "Cookie preferences" link in the footer.

5. Who we share data with

We don't sell your data. We don't share it with advertisers. The only third parties who process your personal data are infrastructure providers we use to run the site:

• Cloudflare — DNS, security, content delivery. Based in the US with UK/EU presence. Data Processing Agreement in place.
• GitHub (Microsoft) — site hosting via GitHub Pages.
• Formspree — receives waitlist and Labs sign-up form submissions and forwards them to us.
• Brevo — outbound transactional email (replies and confirmations from [email protected]).
• Google — Google Analytics 4, only if you consent to analytics cookies.
• Apple — when FPL Coach AI launches, Apple handles app distribution, in-app purchases, and TestFlight beta access. Their privacy terms apply.

We may also share data if required by law, court order, or to protect our legal rights.

6. How long we keep data

• Waitlist email — until you unsubscribe, or 24 months after our most recent product launch communication, whichever is sooner.
• Labs sign-up data — until you ask us to delete it, or 24 months of inactivity.
• Server logs — 30 days, then automatically deleted.
• Analytics data — 13 months (Google Analytics default).
• Email correspondence — kept while there's an active conversation, archived for up to 3 years for our records.

7. Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Access — ask for a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to stop processing your data while we resolve a dispute.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to us processing your data on the basis of legitimate interests.
• Withdraw consent — at any time, for any processing based on consent.

To exercise any of these rights, email [email protected]. We aim to respond within 30 days. Most requests we can action within 48 hours.

If you believe we've mishandled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to fix things first.

8. Security

We use HTTPS everywhere, modern TLS, and Cloudflare's edge security to protect data in transit. Form submissions are sent over encrypted connections. We don't store sensitive personal data on our infrastructure — Formspree and Brevo handle that, both with their own enterprise-grade security.

That said: no system is 100% secure. If a breach affects your data, we'll notify you and the ICO within 72 hours as required by UK GDPR.

9. International transfers

Some of our infrastructure providers (Cloudflare, GitHub, Google, Formspree, Brevo) are based in the US or operate global infrastructure. When your data is transferred outside the UK, we rely on the UK's adequacy decisions, EU-US Data Privacy Framework certification, and Standard Contractual Clauses to ensure appropriate safeguards are in place.

10. Changes to this policy

We may update this Privacy Policy occasionally. The "Last updated" date at the top will change. For material changes (e.g. new categories of data, new third parties, changes to your rights), we'll email people on our waitlist and Labs list and post a notice on the site.

You can always view the latest version at si187apps.com/privacy.

11. Contact