Privacy Policy

This policy explains what personal information App Builder collects, how we use it, who we share it with and the choices you have. App Builder is operated by App Builder (“we”, “us”), the controller of the personal information described here. Questions: [contact email — set LEGAL_CONTACT_EMAIL].

1. Information we collect

You give us

• Account details: your name, email address and password. Passwords are stored only as a salted hash.
• What you build: the prompts and chat messages you write, reference images and other files you upload, your app plans, the generated source code and every version of it, and the store listing text we write for you.
• Accounts you connect: access tokens and keys for services you choose to connect, such as Expo, App Store Connect, Google Play, RevenueCat, GitHub, Linear, Notion and the other connectors in Settings. We store them encrypted and use them only to do what you ask (for example, to build and upload your app or to read an issue you mention).
• Payment details: paid plans are billed by Stripe. Stripe collects your card details; we receive your billing name, email, plan and payment status, never your full card number.
• Messages to us and answers you give in our surveys, such as the App Store check.
• Bug reports and feature requests: what you write, any screenshots you attach and, unless you switch it off, technical details that help us reproduce a bug: the page you were on, your browser and window size, the builder’s recent errors in that tab and the project’s last failed step. Never your apps’ data.

We collect automatically

• Usage and credits: which steps you run (plans, builds, edits), what each one cost in credits, and errors.
• Technical data: IP address, browser and device type, and server logs, used for security, rate limiting and fixing problems.
• Cookies and local storage: a sign-in session cookie that is necessary for the service, and your light or dark theme preference in your browser. We don’t use advertising cookies or third-party analytics on this website.

2. How we use your information

• To provide the service: generate, preview, store, build and publish your apps.
• To bill you and keep track of credits.
• To keep the service secure, prevent abuse and enforce our Terms.
• To answer you and send service messages (for example, password resets).
• To improve App Builder, using aggregated usage (for example, how many credits a typical build uses).
• To send you emails about launching your app, only if you asked for them. Every such email has an unsubscribe link.

Where the GDPR or UK GDPR applies, our legal bases are: performing our contract with you (providing the service and billing), our legitimate interests (security, abuse prevention and improving the service), your consent (marketing emails, which you can withdraw at any time) and legal obligations (tax and accounting records).

3. AI features and your prompts

To plan, write and edit your app, we send your prompts, the relevant parts of your project and any images you attach to our AI provider, Anthropic (Claude), through its commercial API. Under its commercial terms, Anthropic doesn’t use this data to train its models. We don’t sell your prompts or code, and we don’t use them to train models of our own. AI output can be wrong; review it before you publish.

4. Data in the apps you build

If you turn on App Cloud, analytics, push notifications or AI features in an app you build, we store data about that app’s users for you: their account email and a hashed password, the records your app saves, push tokens, usage events (with a random install id, never names, emails or advertising ids) and the questions they send to the app’s AI (passed to Anthropic, not stored by us). For that data, you are the controller and we process it on your behalf. We host a starting privacy policy for each app, written from the features it uses, at a link the app shows by default; you’re responsible for reviewing it or replacing it with your own, and for the disclosures the App Store and Google Play ask for.

5. Who we share information with

We don’t sell personal information. We share it only with:

• Service providers that run App Builder for us: Railway (hosting, database and file storage, in the United States), Anthropic (AI), Stripe (payments), Resend (email) and, when enabled, ImageKit (generated images).
• Services you connect or publish to: Expo (builds and phone previews), Apple and Google (store submissions), RevenueCat, GitHub and any connector you enable, with your access and only to do what you ask.
• People you share with: collaborators you invite, and anyone who sees an app you make public or publish to the web.
• Authorities and advisers, when the law requires it, to protect rights and safety, or as part of a merger or sale of the business (with notice to you).

6. International transfers

App Builder is hosted in the United States. If you use it from elsewhere, your information is transferred there. Where the law requires it, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. How long we keep it

• Your account, projects and versions: while your account is open. When you ask us to delete your account, we delete it and its projects within 30 days, except records we must keep for tax or legal reasons.
• Usage events from apps with analytics on: 90 days.
• Bug reports and feature requests: while your account is open, so you can follow their status.
• App Cloud sessions expire after 90 days; anonymous app users who never saved anything are removed after 30 days.
• Billing records: as long as tax law requires.
• Server logs: a limited period set by our hosting provider.

8. Security

We use encryption in transit (HTTPS), hash passwords, encrypt connected-account tokens and store keys at rest, and run the code we generate in an isolated preview on a separate domain. No system is perfectly secure; tell us at [contact email — set LEGAL_CONTACT_EMAIL] if you find a problem.

9. Your rights and choices

• You can see and change your account details in Settings, download your app’s source code at any time, and disconnect any connected account.
• You can ask us for a copy of your personal information, to correct or delete it, or to restrict or object to how we use it, by writing to [contact email — set LEGAL_CONTACT_EMAIL]. We’ll answer within 30 days.
• You can unsubscribe from marketing emails with the link in any of them.
• If you’re in the EU, the UK or another place with a data protection authority, you can complain to it.

California residents

We collect the categories of information described in section 1 for the purposes in section 2. We don’t sell personal information or share it for cross-context behavioural advertising, and we don’t use sensitive personal information to infer characteristics about you. You have the right to know, delete and correct your information and to not be discriminated against for using these rights; use the email above.

10. Children

App Builder isn’t for children under 16, and we don’t knowingly collect their personal information. If you think a child has given us information, contact us and we’ll delete it.

11. Changes to this policy

We’ll post changes on this page and update the date at the top. If a change is significant, we’ll tell you by email or in the app before it takes effect.

12. Contact

App Builder
[contact email — set LEGAL_CONTACT_EMAIL]