Privacy Policy & Data Protection Notice

1. Data Controller Identity & Contact Details

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is Craig Wells trading as Dunwell Software, operating in the United Kingdom. For any privacy questions, data protection enquiries, or support requests, please contact us directly at dunwell.software@outlook.com.

2. Desktop Applications: 100% Local Data Storage (%APPDATA%)

Dunwell Finances and Dunwell DevStudio are engineered around strict local data sovereignty. We do not operate remote user-tracking servers, we do not embed third-party advertising SDKs or analytics telemetry, and we never sell, rent, or transmit your application data. All SQLite financial ledgers, budgets, CSV imports, workspace configurations, prompt histories, and project backups are stored exclusively on your local Windows device within standard user-level %APPDATA% directories (or local project folders you explicitly select).

3. Windows Permissions, Microphone & Screenshot Inputs

Our MSIX packages utilise the Windows runFullTrust capability solely to read and write your local databases, configuration files, and project directories on your machine. In Dunwell DevStudio, optional features such as Voice Microphone dictation and Ctrl+V Screenshot Vision process audio and clipboard images strictly locally on your computer to pass instructions to your chosen AI model. Dunwell Software never records, uploads, or accesses your microphone audio, screen captures, or source code.

4. Local & Hybrid AI Connections (Dunwell DevStudio)

Dunwell DevStudio is designed primarily to orchestrate local Large Language Models (such as LM Studio and Ollama) running offline on your own hardware. If you optionally configure external local HTTP/SSE Model Context Protocol (MCP) bridges (such as Unreal Engine, Blender, or Godot) or third-party cloud API keys, all prompts and tool calls are transmitted directly between your device and the endpoint you configure—never through Dunwell Software servers. Any third-party service you choose to connect is governed by that provider's own privacy policy.

5. User Responsibility for Local Backups & Data Security

Because your financial ledgers and development projects reside strictly on your own hardware and never on Dunwell Software servers, we cannot access, restore, or recover your data in the event of hardware failure, accidental deletion, OS reinstallation, or device loss. You are solely responsible for maintaining regular backups of your local %APPDATA% directories, CSV exports, and project files, as well as securing physical and password access to your Windows user account.

6. Website Hosting & Embedded Microsoft Store Badges

We do not use tracking cookies, marketing pixels, or behavioural analytics on this website. However, to deliver this website securely and display official store links, two infrastructure providers process standard technical connection data (such as your IP address and browser user-agent) under our Legitimate Interests (UK GDPR Art. 6(1)(f)) in operating a secure web presence:

• Cloudflare Pages: Hosts and delivers this static website and provides network security and DDoS mitigation.
• Microsoft Store Badge Component: Pages displaying the official "Download from the Microsoft Store" badge load Microsoft's badge script from get.microsoft.com so you can view and launch official Microsoft Store listings.

7. Microsoft Store Distribution, Licensing & Billing

Application purchases, free trials, tax calculation, licensing verification, and automatic MSIX updates are processed directly by Microsoft Corporation through the Microsoft Store in accordance with the Microsoft Privacy Statement. Dunwell Software never receives or stores your credit/debit card details or personal billing address; we only receive aggregated, anonymised sales and payout reports from Microsoft Partner Center.

8. Customer Support & Email Correspondence

If you contact us via email at dunwell.software@outlook.com, we will receive your email address, name (if provided), and the contents of your message. We process this information under the lawful basis of Legitimate Interests (or Contractual Necessity for existing customers) solely to reply to your query and provide technical support. Emails are hosted via Microsoft Outlook (which may process data on secure global servers protected by UK Adequacy regulations and Standard Contractual Clauses) and are retained only for as long as necessary to resolve your enquiry and maintain basic business records, typically no longer than 24 months.

9. Children's Privacy (PEGI 3 / Everyone Compliance)

Our applications are certified PEGI 3 / Everyone and are safe for general audiences. Neither our desktop applications nor this website knowingly collect, solicit, or store personal data from children under the age of 13 (or under the applicable age of digital consent in your jurisdiction).

10. Your UK GDPR Rights & Non-Advisory Software Disclaimer

Your Data Protection Rights: Under the UK GDPR, in relation to any personal data you send us via email correspondence, you have the right to request access, rectification, erasure, restriction of processing, or to object to processing. To exercise these rights, email dunwell.software@outlook.com. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.

Software Scope & Non-Liability Notice: Dunwell Finances is a self-managed offline bookkeeping utility and does not provide regulated financial, investment, tax, or accounting advice; users are solely responsible for verifying figures submitted to HMRC or financial institutions. Dunwell DevStudio orchestrates local and third-party AI models that may produce inaccurate or incomplete code; users are solely responsible for reviewing, testing, and backing up all code and project files prior to execution.