Privacy, plainly.
The short version: joining the waitlist gives us your email address. That's it. We confirm it's really you before you're on the list, we never ask about your health at this stage, the optional feature vote is anonymous, and leaving takes one click. Nothing is sold, shared, or used for anything except the occasional honest update from Josh.
Who we are
myKera is run by Josh Marsh through Brewyon & Co Ltd, a company registered in England (company number 17343425, registered office 66 Paul Street, London, EC2A 4NA), the data controller for your information. We're building a calm companion for people living with keratoconus. Contact: hello@mykera.app. We're registered with the UK Information Commissioner's Office (registration reference ZC200666).
What we collect when you join
Your email address, plus a note of where you signed up and when, our record of your consent. Joining is your consent to receive occasional emails about myKera (that's the lawful basis: consent, which you can withdraw any time). We'll send you a confirmation email first, you're only on the mailing list once you click it, so nobody can sign you up but you. Sign-ups that are never confirmed are never emailed, and we clear them out in our routine data reviews.
We ask no questions about your health, nothing about your eyes or your condition. Providing your email is entirely voluntary, and we make no automated decisions about you of any kind.
The feature vote is anonymous
After joining you can tap which feature you'd like built first. That tap is stored as an anonymous counter only, never linked to you, your email, or anything else. Because it's truly anonymous, there is no "your vote" on record to retrieve or delete; it's just a number that went up by one. Your browser keeps a small local note of which option you tapped, so we don't ask you twice, and that note stays on your device; it never reaches us.
One honest note
Being on this waitlist at all could suggest you have keratoconus, though plenty of members are family, friends, optometrists, and the curious. Either way, we treat the whole list with the care we'd give health data: locked down, shared with no one, deletable on request.
The ads measurement tag
This site includes Google's advertising tag so we can tell whether our ads are working. It's configured in "consent denied" mode: it sets no cookies and stores nothing on your device. It sends basic technical pings to Google, IP address, browser type, page address, which Google uses to estimate ad performance in aggregate, processed in the US under the UK Extension to the EU-US Data Privacy Framework (Google's privacy policy). No other analytics or trackers exist here; our fonts are self-hosted.
If you email us
Email to hello@mykera.app is handled by Google Workspace. Replies are read by a human (Josh) and never added to any marketing tool. Please share only what you're comfortable sharing, and if you'd like anything you've sent deleted, one email and it's done.
Who processes your data
Only the services that run this site, each under a data-processing agreement:
- Supabase, stores the sign-up list, in AWS London (UK).
- Vercel, hosts the site; our functions run in London. (Their short-lived request logs and edge network involve US infrastructure, covered by the safeguards below.)
- EmailOctopus (Three Hearts Digital Ltd, a UK company), sends the emails, runs the opt-in confirmation, and handles unsubscribes; subscriber data stored on EU servers. They receive your email address only.
- Google Workspace, our email inbox (above).
- Google, the cookieless ads measurement tag (above).
No one else, ever, except if the law compels it. We never sell, rent, or trade the list.
Where your data lives
The list is stored in the UK, with our UK email provider holding its copy on EU servers. Where a provider touches US infrastructure (Vercel's network, Google), the transfer is protected by the UK Extension to the EU-US Data Privacy Framework and/or UK IDTA / Standard Contractual Clauses in our agreements with them. Wherever you join from, your data comes into these systems under this policy.
How long we keep things
The list: until launch plus six months, then we re-confirm you're still interested or delete you, and if myKera doesn't go ahead, we delete the whole list. Unsubscribes are honoured immediately, keeping only what's needed to make sure we never email you again. If the confirmation email is never clicked: never emailed, and cleared out in our routine reviews.
Your rights, for everyone, everywhere
Wherever you live, you can ask us to access, correct, or delete what we hold about you, restrict or object to our use of it, take a copy elsewhere, and withdraw consent at any time, one email to hello@mykera.app, free, normally handled within days. Every email has one-click unsubscribe. If you're unhappy with how we've handled your data, complain to us first and we'll investigate promptly and keep you informed, and you can always contact the ICO or your local authority. California residents: we don't sell or share personal information; the same rights apply. Everyone else: the same core rights, honoured regardless of local minimums.
Age
The waitlist is intended for people 16 and over. We don't knowingly hold data about anyone younger, if that's happened, email us and it's gone.
Changes
We'll post updates here with a new date. Before myKera launches as a product, which will involve genuinely different data and a much fuller policy, you'll get a fresh, separate consent ask. Nothing carries over silently.