ERB ONELegal
Privacy Policy
Applies to the erb.one website and to every application published by Erb Networks, LLC (doing business as ERB One) for iOS, iPadOS, macOS, Android, and Windows.
1. Who we are and what this covers
ERB One is the trade name of Erb Networks, LLC ("Erb Networks", "ERB One", "we", "us"), a Utah limited liability company operated by Ryan Erb in Utah, United States. This policy explains what personal data we collect, why, and what you can do about it. It covers the erb.one website (also reached through erbworks.com) and every application ERB One publishes on the Apple App Store, Mac App Store, Google Play, Microsoft Store, or directly for download (together, the "Apps"). Where an individual App collects something not described here, its store listing and in-app privacy notice say so.
Erb Networks, LLC is the data controller for the data described in this policy. Contact us through the contact form.
2. Data we collect on the website
Contact form
When you describe a problem to us, we collect the name, company, email address, optional phone number, and the message you type. We use it to reply to you and to scope the work you asked about.
Email subscription
If you subscribe to our field notes, we store your email address and the page you subscribed from. We use it only to send those notes. Every email includes a way to unsubscribe, and you can also email us to be removed.
Server logs
Our web server records standard request logs: IP address, time, the page requested, browser type, and referring page. We use them for security and to keep the site running. They are rotated and deleted automatically.
Cookies and tracking
The website uses Google Analytics 4 to understand which pages are visited and how people arrive. It sets first-party cookies (for example _ga) and sends page views, approximate location, device and browser type, and interaction events such as a form being sent to Google. It does not send your name, email, phone number, or the contents of a message. IP addresses are not stored by Google Analytics 4. We do not use it for advertising or cross-site tracking. You can block it with a browser setting, an ad-blocker, or Google's opt-out add-on. Fonts are loaded from Google Fonts, which receives your IP address as part of serving the font files; see Google's privacy policy for how they handle it.
3. Data our Apps collect
Our Apps are built to collect as little as possible and to keep data on your device unless a feature needs otherwise. Across all Apps:
- Account data. If an App offers accounts, we collect the email address and credentials needed to sign you in. Apps with accounts let you delete the account from inside the App, and you can also request deletion by email.
- Device permissions. Camera, microphone, location, photos, notifications, local network, Bluetooth, or file access are requested only when a feature you use needs them, at the moment you use it, and can be revoked in your device settings.
- Content you create. Data you enter, capture, or upload in an App is used to provide the feature you used it for. Where it is synced to our servers, it is stored in the United States and protected as described in section 7.
- Diagnostics. Apps may collect crash reports and basic performance data (device model, OS version, App version, the error that occurred). Where the platform allows, this is opt-in, and it never includes the contents of your files or messages.
- Purchases. In-app purchases and subscriptions are processed by Apple, Google, or Microsoft. We receive a transaction record but never your payment card details.
Our Apps do not sell personal data, do not show third-party advertising, and do not use data for cross-app tracking. If an App ever uses a third-party service that processes personal data (for example a crash-reporting or analytics provider), that App's store listing names the service.
4. How we use data
- To provide the website and Apps and the features you ask for
- To reply to you and carry out engineering work you engage us for
- To send field notes you subscribed to
- To keep our systems secure, prevent abuse, and diagnose faults
- To meet legal, accounting, and regulatory obligations
Our legal bases, where they apply, are performance of a contract, our legitimate interest in running a secure service, your consent (for subscriptions and optional permissions), and legal obligation.
5. Sharing
We never sell personal data. We share it only with:
- Service providers that host our servers, deliver email, or process payments, under contracts that limit what they may do with it
- Platform operators (Apple, Google, Microsoft) as required to distribute the Apps and process purchases
- Authorities when the law requires it, or to protect the rights and safety of users or the public
- A successor if Erb Networks, LLC is sold or merged, under this same policy
6. Retention
Contact-form messages are kept for as long as needed to respond and, where they lead to work, for the life of that engagement plus the period our records must be kept. Subscription addresses are kept until you unsubscribe. Server logs are kept for no more than 90 days. App account data is deleted when you delete your account, except where we must keep a record for legal or accounting reasons.
7. Security
Data is transmitted over TLS and stored on servers we control, with access limited to the people who need it. Form submissions are stored outside the public web root. No system is perfectly secure; if we learn of a breach affecting your data we will tell you as the law requires.
8. Your rights
You can ask us to show you the personal data we hold about you, correct it, delete it, or stop using it for a purpose. To do so, use the contact form and include the email address in question, or use the option inside an App where it exists. We respond within 30 days. Residents of the European Economic Area, the United Kingdom, and California have additional rights under GDPR, UK GDPR, and CCPA, including the right to complain to a supervisory authority; we honor those rights for everyone, wherever they live. We do not discriminate against anyone for exercising them.
9. Children
The website and Apps are not directed at children under 13 (or under 16 where that is the applicable age), and we do not knowingly collect their data. If you believe a child has provided us data, tell us through the contact form and we will delete it.
10. Changes
When this policy changes we update the date at the top and, for material changes affecting an App, notify users through the App or its store listing. Continued use after a change means you accept the updated policy.