Last updated: October 21, 2026
General
In this Privacy Policy ("Policy"), "we", "us" and "our" refer to JetMinds UK Hub Limited, a company registered in England and Wales under company number 17368830, with its registered office at Tallis House, 2 Tallis Street, London EC4Y 0AB, United Kingdom.
This Policy explains how we process personal data in connection with provision of the Sweetlane app, including the macOS application, sweetlane.ai, the waitlist, account services and related communications (altogether “Sweetlane”).
This Policy applies worldwide. We comply with the EU General Data Protection Regulation (EU GDPR), the UK General Data Protection Regulation (UK GDPR) and other mandatory privacy requirements where they apply, and use GDPR principles as our baseline worldwide. Terms defined in the EU GDPR and UK GDPR have the same meaning in this Policy unless mandatory local law requires otherwise. Personal data includes information relating to an identified or identifiable individual, including information called personal information under some laws. Local law may provide further rights or safeguards.
Privacy contact: info@sweetlane.ai.
Our EU representative is: John Ceccarelli
Our role
We act as a data controller for processing whose purposes and means we determine, including account and waitlist administration, security, support, consented analytics, voluntary prompt sharing and marketing.
Personal data we process and why
We receive personal data from you and your device, collect website and account activity, and generate records through your use of the service. The following table describes the categories, purposes and sources.
| Data category | Purpose of use | Source of data | Legal basis |
|---|---|---|---|
| Email address, account ID | Sign-in; account and setup-help emails; marketing | User | Contract for sign-in and account services; legitimate interests for necessary, non-promotional setup assistance; consent for marketing. |
| Sign-up date, sign-in events | Authentication, account security, drop-off emails, marketing | Product | Contract for authentication; legitimate interests for security and necessary setup assistance; consent for marketing and re-engagement. |
| Onboarding answers (role, built an app before, can code, goal) | Account security, marketing; copied to usage events only with usage-data consent | User | Legitimate interests for proportionate onboarding and security; consent for marketing and copying answers into optional usage events. |
| Acquisition source, campaign, referrer, country | Totals per channel, account security, marketing | Website | Legitimate interests for necessary account security; consent for optional analytics and marketing. |
| Web-funnel steps (visit, waitlist, download link, first sign-in) | Funnel totals, drop-off emails, marketing | Website, product | Legitimate interests for necessary account administration and non-promotional setup assistance; consent for optional tracking and marketing. |
| Consent records (usage data, prompt sharing, marketing per channel) | Proof of consent | Product | Legal obligation |
| Pseudonymous usage events, bucketed system info, copied onboarding answers | Fix bugs, improve the product | App on the user's device | Consent |
| Crash reports | Fix bugs | App on the user's device | Consent |
| Shared full prompt text, LLM-judge labels, review labels | Improve generation quality, roadmap | User, product | Consent (separate opt-in) |
| Diagnostic bundle, support tickets | Support | User | Contract or legitimate interests for requested support; consent for an optional diagnostic bundle. |
| Website analytics cookies | Web analytics | Website | Consent |
| Plan, quota | Billing, quota enforcement, marketing | Product | Contract; marketing: consent |
We need your email address and authentication information to provide account services. Without them, we cannot provide those functions.
Our legitimate interests include protecting accounts, responding to requests and helping users complete a setup action they have requested. We use this basis only where the processing is necessary and proportionate and does not override your rights and interests. Promotional reminders are covered by marketing consent.
Sweetlane is not intended to collect special categories of personal data, such as information about health, racial or ethnic origin, political opinions, religion, trade union membership, genetic data, biometric identification, sex life or sexual orientation. Do not include these data, financial credentials or secrets in prompts you share with us or optional diagnostic material. Avoid including personal data about other people in shared prompts.
Sweetlane attempts to remove secrets, email addresses and phone numbers before optional sharing, but this cannot guarantee that all personal data will be removed. Review what you choose to submit. If unnecessary sensitive data is received, we assess it, restrict its use and remove it where appropriate and lawful.
AI features and prompt sharing
Your projects remain on your Mac. Anthropic processes content you submit to its services under your own account agreement and its applicable privacy notice. Using Claude Code does not itself give us a copy of your full prompts; sharing prompts with Sweetlane is a separate, optional choice.
If you opt in to full prompt sharing, we use the shared text to assess generation quality, understand requested capabilities and improve the product roadmap. AI evaluation and authorised reviewers may add labels describing the prompt, such as its app category, whether generation succeeded and whether the request was unclear. These labels describe prompts and are not combined into profiles of individual users. We do not infer sentiment or protected characteristics about you.
We do not use your personal data, prompts, project content or outputs to train or fine-tune AI models, and we do not authorise providers acting on our behalf to do so. Using a model to label a shared prompt is distinct from training that model. This commitment does not change Anthropic's rules for your own account; its agreement, privacy notice and account controls govern that separate processing. See https://www.anthropic.com/legal/privacy.
Who receives personal data
We use service providers to perform the functions below. They receive only information needed for their role. Providers acting on our behalf are process it under appropriate agreements and instructions, with confidentiality, security and retention restrictions. The examples illustrate categories and are not an exhaustive list of named processors.
| Recipient category | Purpose and typical data | Examples |
|---|---|---|
| Hosting and account services | Operate the website and account backend, send service emails and store account data and voluntarily shared prompts. | Cloud and backend services, such as Lovable Cloud and Supabase. |
| Product analytics and crash reporting | Process consented usage events and crash reports to identify bugs and understand product use. | Analytics and diagnostics services, such as Amplitude and Sentry. |
| Website analytics and consent tools | Measure website use with consent and store privacy choices. | Analytics and consent services, such as Google Analytics and Cookiebot. |
| AI evaluation providers | Assess and label full prompts shared with consent. | Model services used for prompt evaluation |
| Support | Handle support requests and optional diagnostic material. | Ticketing services, such as YouTrack provided by JetBrains s.r.o. |
| Professional advisers and authorities | Where necessary for legal obligations, professional advice, protecting rights or legal proceedings. | Legal advisers, regulators and law-enforcement bodies acting under applicable law. |
The Sweetlane service does not expose your account data, optional usage reports or shared prompts to other users. If you join our Discord community, the information you choose to post may be visible to other members. Discord acts as an independent controller for its community service under https://discord.com/privacy.
Anthropic's processing of your Claude Code content is governed by your own account agreement and privacy notice.
These separate services do not become our processors merely because you use them alongside Sweetlane, and we do not jointly determine their independent processing.
Where data is processed and international transfers
Account data and voluntarily shared prompts are hosted in the United Kingdom. Product analytics is hosted in the EU. Crash reporting uses infrastructure in the United States. Authorised team members may access data from the EU. Other service providers may process data in the countries required for their services.
Where a transfer is subject to international transfer restrictions, we use a lawful mechanism before it occurs. This may include an applicable adequacy decision or approved contractual safeguards, such as EU Standard Contractual Clauses and the appropriate UK transfer agreement or UK Addendum, with assessments and supplementary safeguards where required. You can contact info@sweetlane.ai for information about it.
Cookies and similar technologies
Types and purposes
Our website and app use cookies and similar technologies, including session storage, consent records and software development kits (SDKs). Strictly necessary technologies support requested functions such as sign-in and remembering privacy choices. Optional website analytics, app usage reporting and crash reporting require prior consent. They remain off unless you agree.
The inventory includes both website cookies and desktop SDKs. For SDK rows, the period describes retention of collected events or reports rather than the expiry of a browser cookie. A tag manager follows the purposes of the tags it loads; its use does not make an optional analytics tag strictly necessary.
| Cookie or tool name | Provider | Purpose (Cookie type) | Data collected | Lifetime |
|---|---|---|---|---|
| Google Tag Manager / Google Analytics | Website analytics (analytic) | Pages visited, device, approx. location, UTM source | Up to 2 years | |
| Cookiebot | Usercentrics | Stores consent choice (essential) | Consent choice | 12 months |
| Sign-in session | Lovable / Supabase | Sign-in (essential) | Session token | Until sign-out |
| Amplitude SDK (app) | Amplitude | Product analytics (analytic) | Pseudonymous usage events | 12 months |
| Sentry SDK (app) | Sentry | Crash reporting (functional) | Crash reports | 90 days for collected crash reports |
Giving and withdrawing consent
You give or refuse website cookie consent through the Cookie banner. You can change or withdraw your choice through the website's Cookie settings link, your browser settings or by contacting info@sweetlane.ai. Browser settings can block or delete cookies; our privacy contact can also help stop processing based on consent.
App usage reporting and crash reporting are offered with an optional consent choice. Full prompt sharing has a separate opt-in, and marketing choices are separate from both. You can change or withdraw these consents in the app's Settings or by contacting info@sweetlane.ai. Withdrawal stops future processing based on that consent and does not make earlier lawful processing unlawful.
Choices generally apply to the relevant browser or app installation. You may need to choose again on another device or after clearing storage. We keep proportionate records of consent and withdrawal, and request fresh consent before any material change that legally requires it.
Communications and marketing
We send necessary sign-in, account, security and requested support messages. A setup reminder may be sent to help you complete an action you requested, with an opt-out. A reminder that promotes Sweetlane or encourages you to return is sent only with marketing consent. This also applies to research invitations and re-engagement emails.
You can object to direct marketing at any time, without giving a reason, or withdraw consent through the app, website, each email's unsubscribe link or info@sweetlane.ai.
With your marketing consent, we may tailor emails using your onboarding answers, country, acquisition source, setup progress, recent sign-in activity and plan, where available. This is limited marketing profiling, which you can object to at any time. We do not use this profiling to make solely automated decisions with legal or similarly significant effects. Routine automated actions can include setup reminders and deletion of an inactive account following the notice. Contact us if you want us to review an inactivity notice before deletion.
We do not upload customer lists to advertising platforms. Advertising campaigns use those platforms' own targeting. Announcements posted in our Discord community reach people who have chosen to join it and are subject to their Discord settings.
How long we keep data and how deletion works
We retain personal data only for as long as it is needed for its processing purpose. We delete it when it is no longer necessary, unless a limited legal retention requirement or another lawful ground applies. The periods below are the normal limits for the stated purpose; data is deleted sooner where required. Any lawful extension is limited to its specific reason, such as a legal obligation, claim or documented security issue.
| Data category | Normal retention and what happens afterwards |
|---|---|
| Account data | Until account deletion, or after 24 months without sign-in followed by 30 days' notice. We delete the account unless you sign in during the notice period. |
| Waitlist-only emails | 24 months from sign-up or the last download-link click, followed by 30 days' notice, then deletion unless you renew your interest. |
| Sign-in events, web-funnel steps and acquisition data | 12 months from the event. Afterwards, only non-identifying totals and the last activity date needed for account or waitlist administration remain. |
| Consent records | 12 months after withdrawal or account deletion, then deletion. |
| Pseudonymous usage events | 12 months from the event, then non-identifying totals only. |
| Crash reports | 90 days from the event, then non-identifying totals only. |
| Shared prompt text and prompt labels | Prompt text: 90 days from collection, then deletion. Labels: 12 months from creation, then non-identifying totals only. |
| Diagnostic bundles and support tickets | Diagnostic bundles are deleted when the ticket closes. Support correspondence is kept only as long as needed to handle the request and any necessary follow-up or limited lawful record. |
Statistics may be retained for long-term product trends only after they are effectively anonymous. We remove identifying references and suppress small groups, and treat data as anonymous only where individuals can no longer reasonably be identified.
Account deletion and remaining data
You can request account deletion by emailing info@sweetlane.ai or through your account at sweetlane.ai (if available). Once account deletion is processed, it takes effect without an account-recovery period. Account deletion does not automatically remove all optional usage events or shared prompts, because these records are stored without a direct link to your account. They remain subject to their normal retention limits and applicable rights. If you give us information that allows us to identify relevant records, we assess and act on your request as required by law; the absence of an account link does not itself remove your rights.
Consent records may remain for 12 months after withdrawal or deletion to demonstrate your choices. Other limited information may remain only where needed for a legal obligation, claim or another specific lawful reason. We restrict its use and delete it when that reason ends. Effectively anonymous statistical totals may remain.
Security
We use technical and organisational measures appropriate to the nature and risks of the data, including limiting access to authorised people, protecting accounts, reducing identifying information in optional reports and limiting collection and retention. Optional data collection and provider access must meet the applicable consent, contractual and security requirements before they begin. We assess security incidents and notify affected individuals or authorities where required by law.
Your privacy rights
You can contact info@sweetlane.ai to exercise the rights below. We make the request channel available worldwide. Rights apply subject to the relevant conditions and lawful exceptions; mandatory local rights are not reduced by this Policy.
| Right | What you can request |
|---|---|
| Information and access | Information about processing purposes, categories, sources, recipients and retention, and a copy of your personal data. |
| Correction | Correction of inaccurate personal data and completion of incomplete data. |
| Deletion | Erasure when data is no longer necessary, consent is withdrawn without another ground, an applicable objection is upheld or another legal ground applies. Some data may remain for a limited lawful reason. |
| Restriction | Restricted processing where applicable, including while accuracy or an objection is assessed or where data is needed for a legal claim. |
| Portability | A structured, commonly used, machine-readable copy of data you provided where automated processing is based on consent or a contract, and transfer to another controller where feasible. |
| Objection | Object to legitimate-interest processing on grounds relating to your situation. We stop unless an applicable overriding ground or legal-claims exception applies. Direct marketing and related profiling can be opposed at any time. |
| Withdrawal of consent | Withdraw consent at any time, including for optional tracking, prompt sharing and marketing, without affecting earlier lawful processing. |
| Automated decision safeguards | Challenge qualifying solely automated decisions and obtain human intervention where required by applicable law. |
| Complaints and additional local rights | Complain to a competent supervisory authority and exercise additional local rights, including applicable opt-outs or an appeal. You need not contact us before complaining. |
We may request proportionate information to verify your identity and locate the relevant records. We do not require unnecessary identity documents or collect extra identifying data solely to identify previously unlinked reports. If we cannot identify you in particular records, we explain the limitation and allow you to provide additional information that makes identification possible. An authorised representative may make a request where permitted by law.
We respond without undue delay and normally within one month of receiving a request, subject to applicable verification rules. Where the applicable law permits an extension because of the complexity or number of requests, we may take up to two further months and explain the reason within the first month. We follow any different mandatory local deadline. Requests are normally free; a fee or refusal applies only where permitted by law, with reasons and available complaint or appeal options.
In the United Kingdom, you can complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. In the EEA, you can complain to the relevant supervisory authority, including where you live, work or believe an infringement occurred. Other mandatory local rights and safeguards apply where required, including rights concerning targeted advertising, sale or sharing of personal information and qualifying profiling. Contact us for the process applicable to your location.
Children
Sweetlane is intended for people aged 16 or older, subject to any higher minimum age or parental authorisation required by local law. We do not knowingly collect personal data from anyone below the applicable minimum age. If you believe such a person has provided personal data, contact info@sweetlane.ai. We investigate and take appropriate steps to restrict use and delete the data, subject to any lawful, limited retention requirement.
Changes to this Policy
We update this Policy when our processing or legal requirements change and revise the "Last updated" date above. Each new version takes effect on that date unless it states a later effective date. We provide additional notice of material changes where required, for example through the service or by email.
By continuing to use Sweetlane after a revised version takes effect, you acknowledge and accept the updated Policy to the extent permitted by law. Continued use does not constitute consent to a new processing purpose or optional tracking, waive your privacy rights or replace any fresh consent required by law.
Contact us
For any privacy request, to exercise your personal data rights, or to send questions, concerns or comments about this Policy or our processing, please use our privacy contact: info@sweetlane.ai.