Privacy Notice - mygov.scot app

This Privacy Notice is for the mygov.scot app. This includes a: 

• mobile app downloadable from the App Store and Google Play 
• web application that you can sign in to on a web browser 

These are different to the mygov.scot website. 

You can read a separate Privacy Notice for the mygov.scot website. 

The mygov.scot app is run by the Scottish Government, which is the data controller for the personal data you give us.  

What type of information we collect 

Information we collect when you use the mobile app 

When you first sign in to the mobile app we collect your: 

• acceptance of the Terms and Conditions 
• preferred name – the name you want us to call you 

You can edit your preferred name at any time in the mygov.sot app’s settings. If you change it in the app it will also be changed in your Mailbox (if you have one). Your preferred name is separate from your ScotAccount details.  

We do not collect this information in the web application. 

Information we collect when you use the web application 

The web application uses Google Analytics to collect the same information that’s collected when you visit the mygov.scot website.  

We also collect information to: 

• record your response to the cookies banner that appears when you sign in 
• keep you signed in 

We use system and security logs to help our systems run smoothly. For security and incident management, these collect your IP address.  

Information collected by integrated services 

The mygov.scot app integrates with other Scottish Government services like ScotAccount and Digital Licensing. 

You can find out about the information they collect by reading their Privacy Notices: 

• ScotAccount Privacy Notice 
• Tobacco and Vapour Products Retailers Register Privacy Notice 
• Funeral Sector Register Privacy Notice 

Why we collect this information 

We collect this information so that we can: 

• improve our services 
• give you access to government services 
• identify security threats 
• give you a personalised home page on the mobile app  

The lawful basis for this is “performance of a task in the public interest.” 

What we do with this information 

There are third party organisations who have access to your information.  

These organisations are: 

• NetCompany, an independent data processor subject to a contract with the Scottish Government to build the mobile phone app and mailbox and provide ongoing support
• Sentry, a tool licensed by NetCompany, provides error diagnostics and basic performance monitoring for the mobile phone version of the app   
• Squiz, an independent data processor subject to a contract with the Scottish Government to build the web application and provide the supporting platform and ongoing support 
• Cloudflare, a sub-processor contracted to Squiz to deliver the platform’s front end 
• Openresty, a sub-processor contracted to Squiz to provide the web server for their content management system 
• Google Analytics, which provides performance analytics for the web application 

How long we keep your information 

We’ll keep your acceptance of the Terms and Conditions for as long as you use the mobile app. It will be deleted if you remove the app from your device. 

Your preferred name will not be deleted if you delete or uninstall the mobile app. To remove your preferred name, you must request for your ScotAccount to be deleted. You can do that by contacting the ScotAccount team by email at ScotAccount@gov.scot.  

IP addresses logged when you use the web application will be stored for thirty days. 

You can find out how long we keep cookies and Google Analytics information in in our Cookies policy.  

How long we keep your information when you contact us 

You can contact us by emailing app@gov.scot.  

Do not include personal details in your message.  

If you email us with an issue we will: 

• keep your email in our inbox – we will not save it anywhere else 
• delete your email as soon as the issue has been resolved 

We log issues and resolutions to help us improve the app. They’re summarised and fully anonymised. No personal information is stored. 

How we store this information 

All personal information is stored in the United Kingdom and the Republic of Ireland. Transfers outside of the UK are safeguarded by the EU-UK Data Adequacy Decision.  

Your data protection rights 

You have the right to: 

• see your information – through a subject access request 
• improve your data – if you think the information we have is inaccurate or incomplete 
• delete your information – if you do not want us to use your data anymore 
• object to or restrict the use the use of your data – depending on the circumstances 

These rights are not absolute. There may be restrictions or exemptions. 

How to get in touch 

You can contact our Data Protection Officer about this privacy notice by email: DataProtectionOfficer@gov.scot. 

How to complain 

If you're unhappy with how we've used your information, you can complain to our Data Protection Officer. 

If you’re not happy with their response, you can complain to the Information Commissioner's Office (ICO): 

Address 

Information Commissioner's Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire 
SK9 5AF 

Phone 

0303 123 1113 
Find out about call charges.