Privacy & UK GDPR
Your data, explained clearly.
Rubbleo (JL Software), trading as FormSignal, is the controller for personal information used to provide this website and the FormSignal Android editions. The unlocked Google Play edition and the separately distributed Direct edition use different access systems, explained below.
Last updated 27 September 2026Google Play edition
The unlocked Google Play closed-testing edition does not require a FormSignal website account, Stripe checkout, subscription activation, device enrolment or website access token. Google Play may process installation, update and diagnostic information under Google’s own privacy terms. FormSignal receives only the operational information generated when the app requests race cards, predictions, results or notifications, such as limited technical and security records needed to deliver and protect those services.
Direct edition
The separate Direct edition is distributed from this website. Its trial, subscription, protected-download and device-access systems use the contact, subscription and security information described below. Direct-edition purchases are handled by Stripe and are not purchases through Google Play.
Contacting the controller
Email [email protected] with a privacy question or request. Please do not send card details. Business and postal contact information is also provided on transaction records.
Information we collect
- Contact details, including name and email, when you enquire, apply for access, join a beta programme or subscribe.
- For Direct-edition customers only: subscription identifiers, plan, status and renewal information received from Stripe. FormSignal does not receive your complete card number.
- For Direct-edition customers only: protected device and identity hashes, device name, activation dates and token records used to secure access and enforce trial and device limits.
- Messages you submit and limited technical/security records needed to operate and protect the service.
- Beta application details, Android phone model, testing commitment and product feedback supplied by founding testers.
- Aggregate website usage information, such as page views, referring sites, broad location, device type and performance measurements collected through Cloudflare Web Analytics. This privacy-first measurement does not use advertising cookies or identify individual visitors to FormSignal.
Why we use it and our lawful bases
- Contract: to create, activate, support and administer your beta access, trial or paid subscription.
- Legitimate interests: to secure the service, prevent trial abuse, diagnose faults, understand aggregate website use, assess campaign performance, respond to enquiries and improve reliability.
- Legal obligation: to retain transaction or accounting information where the law requires it.
- Consent: for optional direct marketing or non-essential cookies, if introduced. You may withdraw consent at any time.
Your right to object: you may object to processing based on legitimate interests and to direct marketing at any time.
FormSignal does not add you to a marketing list merely because you start a trial.
Who receives information
We use service providers only where necessary, including Stripe for checkout and billing, Cloudflare for website hosting, database storage and security, and an email-delivery provider for support notifications. Professional advisers or authorities may receive information where legally necessary. Personal information is not sold.
International transfers
Some providers may process information outside the UK. Where required, transfers rely on UK adequacy regulations or recognised contractual safeguards. Contact us if you would like information about the safeguard relevant to your data.
How long we keep it
We keep information only while it is needed for the purpose described, to meet legal duties, resolve disputes and protect the service. Subscription and transaction records may be retained for the applicable accounting limitation period. Enquiries are periodically reviewed and deleted when no longer needed. Hashed trial identifiers may be retained while the one-trial rule operates. Expired access tokens are no longer accepted and are removed or anonymised through routine maintenance.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability, or object to processing. You may also withdraw consent. We may need to verify your identity, and some information may need to be retained for legal or fraud-prevention reasons.
If we cannot resolve a concern, you may complain to the Information Commissioner’s Office.
Children’s information and changes
We do not knowingly seek children’s personal information. Material changes to this notice will be published here with a revised date.
