1. Who we are
detwer (“we”, “us”, “our”) is a trading name of Mendmyi Limited, a company registered in England and Wales under company registration number07705267, with its registered office at20-22 Wenlock Road, London, England, N1 7GU. We are the data controller for the personal data described in this policy.
detwer is a business tool. Accounts are held by businesses (each a “tenant”) — repair shops, refurbishers, recyclers and insurers — and used by their authorised staff. This policy covers our website, dashboard, desktop Bridge, API and mobile apps (together, the “Service”).
We comply with the UK Data Protection Act 2018 and the UK GDPR.
2. What we collect
2.1 Account data
Name, work email address, business name, role, and authentication data (hashed password, session tokens, optional two-factor secret) for each staff user.
2.2 Device technical data
When you connect a device, the Service reads technical information aboutthat device — not about any person. This includes serial number, IMEI, model, manufacturer, storage capacity, colour, operating-system version, battery health and cycle count, activation/lock status, blacklist status, and the results of diagnostics, erase and restore operations.
2.3 Usage and billing data
Counts of unique devices processed per month (used for metering), actions performed, IP address, app/browser metadata, and diagnostic logs. Payments are handled by Stripe; we store billing status and identifiers, never full card numbers.
2.4 What we do NOT collect
To be explicit, the Service does not collect:
- Personal content from processed devices — photos, messages, contacts, files or backups
- Location data
- Contacts or address book
- Advertising identifiers (IDFA) — we run no advertising
- Browsing history
- Biometric data
- Payment card numbers
Erase and restore operations act on the device; we retain only the technical outcome, never the device's contents.
3. How we use data
- To provide the Service — diagnostics, erase/restore, status checks, and each device's history
- To authenticate users and enforce role-based access within a tenant
- To meter usage and process subscription and pay-as-you-go billing
- To deliver results you request via the API and webhooks
- To secure, debug and improve the Service
- To send service, security and account messages
Legal bases: performance of a contract, our legitimate interests in securing and improving the Service, legal obligation (tax and compliance), and consent where required. We do not sell personal data and we do not use advertising networks or social media SDKs.
4. Third parties
We share data only with providers that help us run detwer, under contract:
- Cloud infrastructure provider — hosting, storage and network delivery
- Payment provider — subscription and payment processing
- Device status provider — blacklist/status lookups, sent device identifiers only, when you run a check
- Email provider — transactional messages
- Apple / Google — app distribution and, where used, in-app purchases
We may disclose data where required by law or to protect the rights, safety and security of detwer and its users.
5. Storage and security
Data is stored on Cloudflare's infrastructure. We protect it with encryption in transit and at rest, tenant isolation, role-based access control and least-privilege service credentials. Where data is transferred outside the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses.
6. Retention and deletion
We keep account and device data while your tenant account is active, so you retain each device's history.
- Delete your account in the app or dashboard (Settings → Account → Delete account), or see Delete your account. Data is permanently deleted within 30 days.
- Accounts inactive for 24 months are deleted automatically.
- We may retain limited records where required for legal, tax, accounting or fraud-prevention purposes, plus anonymised aggregate data.
7. Your rights
Under UK GDPR you may access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent. Contact privacy@detwer.com and we will respond within 30 days.
If you are not satisfied with our response, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Children
detwer is a business tool intended for users aged 18 and over. It is not directed to children and we do not knowingly collect data from children.
9. Changes
We may update this policy. We will post the new version here and update the date above; account holders will be told of material changes.
10. Contact
Privacy: privacy@detwer.com · Support: support@detwer.com
Mendmyi Limited (trading as detwer), 20-22 Wenlock Road, London, England, N1 7GU. Company number 07705267.