Privacy Policy
Effective date: April 25, 2026 Last updated: April 25, 2026
This Privacy Policy explains how Ambit Labs Ltd ("Withkin", "we", "us") collects, uses, and protects personal data when you visit withkin.app and use our parent waitlist or venue partnership forms.
We've kept it short and plain. If anything is unclear, email hello@ambitlabs.ai.
1. Who we are
Ambit Labs Ltd, a company registered in England and Wales (company number 16980164), operates withkin.app. For GDPR purposes we are the data controller for the personal data described below.
- Contact: hello@ambitlabs.ai
- Postal address: Flat 2, 1 Clephane Road, London, England, N1 2TJ
2. What we collect
Parent waitlist (the form on the home page)
When you join the waitlist, we collect:
- Email address
We also record the timestamp of your consent when you tick the opt-in box, to demonstrate lawful basis under GDPR.
Venue partnership form (on /venues)
When you submit the venue form, we collect:
- Venue name
- Contact name
- Contact email
- Approximate monthly family count
- A short description of what partnership would mean for your venue
Plus the timestamp of your consent.
Automatically collected on any visit
- IP address and user-agent (server-side) for rate-limiting, security, and abuse prevention. Retained up to 30 days.
- Aggregate page analytics via Vercel Web Analytics: page visited, referrer, device type, approximate country, anonymous visit counts. Cookieless and not tied to an individual.
- Custom event counts via Vercel Analytics for waitlist and venue submissions. No personal identifiers are included.
We do not currently use cookies that require your consent. If we add tools that do (e.g. product analytics with persistent identifiers), we'll show a consent banner before they load.
3. Why we collect it — purposes and lawful bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your waitlist signup or venue enquiry, and keeping you informed about Withkin | Consent — Art. 6(1)(a), via the opt-in checkbox on each form |
| Security, rate-limiting, abuse prevention | Legitimate interests — Art. 6(1)(f) |
| Aggregate, cookieless site analytics (Vercel) | Legitimate interests — measuring and improving the site |
4. Who we share it with — processors
We do not sell personal data. We use these processors, each under a data-processing agreement:
| Processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Loops (Loops Inc.) | Email delivery, waitlist and venue mailing-list management | United States | EU–US Data Privacy Framework / SCCs |
| Vercel (Vercel Inc.) | Website hosting, Web Analytics, Speed Insights | United States | EU–US Data Privacy Framework / SCCs |
Each processor's privacy documentation:
- Loops — loops.so/privacy
- Vercel — vercel.com/legal/privacy-policy
5. International transfers
Loops and Vercel are US-based. We rely on the EU–US Data Privacy Framework where applicable and Standard Contractual Clauses (SCCs) to safeguard transfers.
6. How long we keep your data
- Waitlist data (parent + venue) — until you withdraw consent, or 24 months of inactivity, whichever comes first.
- Security logs (IP, user-agent, request metadata) — 30 days.
- Aggregate analytics in Vercel — Vercel's default retention window (typically 12 months rolling).
- Consent records (opt-in timestamp + form source) — as long as we hold the underlying data, to demonstrate lawful basis.
7. Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (right to be forgotten)
- Object to processing based on legitimate interests
- Port your data to another provider
- Withdraw consent at any time (withdrawal does not affect processing that already occurred)
- Lodge a complaint with your local data-protection authority
To exercise any right, email hello@ambitlabs.ai. We respond within 30 days.
8. California privacy rights (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal data we have collected and how we use it
- Delete personal data we hold
- Correct inaccurate data
- Opt out of "sharing" — we do not "sell" personal data as defined by CCPA, and our current analytics are cookieless and aggregate only
- Limit use of sensitive personal information — we do not collect sensitive categories
- Non-discrimination — exercising your rights does not change your access to the site
We honor the Global Privacy Control (GPC) signal where applicable.
To make a request, email hello@ambitlabs.ai. We verify identity via the email associated with your record.
9. Children
withkin.app is not directed at children and only adults may submit data on this site. Withkin's product (in development) is designed for parents to find trusted local families; it will be used by adults on behalf of their families. We do not knowingly collect personal data from anyone under 16 (GDPR / UK GDPR threshold) or under 13 (COPPA). If you believe a child has submitted data through one of our forms, email us and we will delete it.
When the in-app product launches, this Privacy Policy will be updated to describe how parent-provided information about their children is handled. Children themselves will not be users of the app.
10. Cookies and similar technologies
Strictly necessary (always active)
Session or preference cookies required for the site to function. No consent needed.
Aggregate analytics — cookieless (always active)
Vercel Web Analytics — no cookies, no individual identifiers, aggregate data only. Processed under legitimate interests.
We do not currently use any cookies or similar technologies that require your consent. If that changes, we will display a consent banner before any such technology loads.
11. Changes to this policy
We may update this policy from time to time. Substantive changes will be communicated by email (if you are on a waitlist) or posted on this page with an updated effective date. Please review it periodically.
12. Governing law and how to contact us
This policy is governed by the laws of England and Wales. Nothing in it limits the rights granted to you by mandatory consumer-protection laws in your place of residence.
- Email: hello@ambitlabs.ai
- Postal: Flat 2, 1 Clephane Road, London, England, N1 2TJ