Privacy

Scope

This notice applies to the PXL Banking application for iOS and to the pages served at demo.pxl.zone. The controller is PXL L.L.C-FZ, Dubai, United Arab Emirates.

No account or sign-in

The application has no login and holds no accounts. It requests no identifying information at any point.

Simulated data

No screen displays a real customer, a real account or a real bank's systems. All balances, transactions and payees are invented. The institutions in the App Store version are likewise invented. Where a version has been prepared in an institution's own identity, it is reachable only from a link issued to that institution.

No analytics or advertising

The application contains no analytics, no advertising identifier and no crash reporting. Activity within the application is not recorded and does not leave the device.

Server logs

The application retrieves imagery, and a file naming that imagery, from demo.pxl.zone. These pages and that imagery are hosted by Cloudflare, Inc., which logs the requests it serves: the link requested, the time, and the originating IP address. Retention of those logs is governed by Cloudflare's policy.

Institutions use distinct imagery, so the link requested identifies which version was opened and when. From that we keep our own record: the link, the time, the country the request came from, and a random identifier the application generates for its own installation. We do not record the IP address from which the country is derived, and we record no location finer than the country. The identifier is generated on the device, describes nothing about it, and is joined to no other information; it exists because a link goes to one recipient but not to one device, so without it a second reader and a second reading are the same entry. Each link goes to one recipient, so an open is attributed to them; we do not attempt to establish who in fact opened it, and the identifier does not tell us. It is held by Cloudflare and by ClickUp, disclosed to nobody, kept no longer than we keep the record of the organisation the link was sent to, and removed on request.

Where the General Data Protection Regulation or the UK GDPR applies, the legal basis is PXL's legitimate interest in knowing whether a link it issued has been opened, for its own marketing. You may object at any time by writing to hello@pxl.zone.

Rights

Where the General Data Protection Regulation or the UK GDPR applies, you may request access to, rectification of, or erasure of your personal data; request restriction of its processing; object to its processing; and lodge a complaint with your supervisory authority. Requests should be sent to hello@pxl.zone.