Private preview programme
How application information is used
Effective 15 October 2026 · Version: privacy-2026-10-15-v5
Wells Code Ltd operates this waitlist and private preview and is the data controller. Wells Code Ltd is registered in England and Wales under company number 17384274. Its registered office and public legal-contact address is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Questions and privacy requests can be sent to privacy@wellscode.com.
Who can apply
The preview is for people aged 18 or over. The form records your confirmation that you are an adult, but it does not ask for your date of birth.
What is collected
The application asks for your first name, email address, apps of interest, device and operating-system coverage, what you use now, why the apps interest you and how you could help test. It also records the application source, administrative status, relevant correspondence and the versions of the notices and choices shown to you.
The form also asks for the email address where you want to receive a TestFlight invitation if you are invited. It is your application email unless you give a different one, and it does not need to match the Apple Account on your device. You can change or clear it from the secure application form.
Why it is used
Application information is used to operate the waitlist, assess applications, administer TestFlight invitations, protect the Console and support the preview. The lawful basis is Wells Code Ltd's legitimate interest in running a proportionate testing programme that applicants have asked to join.
Wells Code News is optional and relies on your consent. If you tick its box, your address joins the Wells Code News list, the same list as the sign-up on wellscode.com, which emails you a link to confirm. The list is described in the Wells Code privacy policy. If you ticked the earlier box for product and launch news, your address was moved to that list on 3 October 2026. You can apply and test without it. Application confirmations, secure links and TestFlight administration are operational messages rather than marketing.
Who receives it
The information is available only to Wells Code Ltd and providers needed to host the Preview Console, protect it and deliver email. If you are invited, the TestFlight invitation email is entered into Apple's TestFlight service. Information is not sold, used for behavioural advertising or shown to other applicants.
20i Limited provides the website, database infrastructure and StackMail email service. Its published policy says personal information is ordinarily stored in the UK or European Economic Area, with safeguards used when a transfer outside that area is necessary. 20i states that hosting data is retained for 30 days, server logs are rotated after 12 weeks and infrastructure backups can be retained for up to 12 months. If a backup is restored after deletion, removal from the restored copy can take up to 180 days. Apple handles TestFlight information under its own privacy terms.
How long it is kept
- Active applications are kept while they remain relevant to the preview.
- An applicant who is not selected is reviewed for deletion 12 months after their last activity, or within 90 days after the preview closes, whichever comes first.
- An invited tester's identifiable record is kept while they participate and for up to 12 months afterwards.
- A TestFlight invitation address is kept with your application. It is removed when an application is declined or removed, and no later than 90 days after it is used to send an invitation. You can clear it sooner from the secure form.
- Identifiable feedback is kept for up to 12 months after participation, then deleted or genuinely anonymised.
- Expired access links and sessions are removed within 24 hours.
- Hosting-provider logs and backups follow the 20i schedule described above.
- Minimal records of the wording and choices presented may be kept for up to three years after the last relevant communication.
- Leaving Wells Code News deletes your address from the list straight away.
If you withdraw or ask for deletion, Wells Code will delete or anonymise your identifying application information within 30 days unless a specific legal reason requires a limited record to be kept.
Security
Connections are encrypted. Private-link tokens are stored as hashes, work once and expire. Administrative access is restricted and protected by multi-factor authentication. Sessions expire, and backups follow the retention schedule above. No system can be guaranteed completely secure, so please do not place passwords or sensitive real-world app content in an application or feedback report.
Your choices and rights
You can ask to see, correct or delete your information, restrict or object to relevant processing, withdraw from the programme, or leave Wells Code News, by unticking its box on your application or with the unsubscribe link in any email. Some rights depend on the circumstances and lawful basis. Email privacy@wellscode.com; Wells Code may need to confirm your identity first.
You can complain to the UK Information Commissioner's Office at ico.org.uk. The full Wells Code policy, including website and app information, is available at wellscode.com/privacy.
Cookies and local storage
The Console uses an encrypted, essential session cookie for security and to let a private application link open the correct record. A theme preference is stored locally in your browser. There is no advertising or third-party analytics tracking.
Contact
Privacy: privacy@wellscode.com
Preview administration: beta@wellscode.com
General support: support@wellscode.com
Legal notices: legal@wellscode.com