Privacy Policy

1. Introduction

Appilot.ai ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, password (encrypted)
• Payment Information: Processed securely through Stripe (we don't store card details)
• Project Data: App names, descriptions, and content you create
• Generated Content: Icons, metadata, and other AI-generated assets

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, IP address
• Cookies: Session tokens, preferences, analytics data
• Authentication: OAuth provider information (Google, GitHub)

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain our Service
• Process your transactions and manage subscriptions
• Generate AI-powered content based on your inputs
• Improve and personalize your experience
• Send administrative communications and updates
• Respond to your inquiries and provide support
• Monitor usage patterns and prevent abuse
• Comply with legal obligations

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using:

• Supabase: User accounts, projects, and generation history
• Bunny CDN: Generated icons and assets
• Stripe: Payment and subscription information

4.2 Security Measures

• Industry-standard encryption (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Row-level security (RLS) policies in database
• Regular security audits and updates
• Access controls and authentication

Note: No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

5.1 Third-Party Services

We share data with trusted third-party providers:

• OpenAI: AI text generation (prompts only, no personal data)
• Stripe: Payment processing
• Supabase: Database and authentication
• Bunny CDN: Asset storage and delivery
• Analytics: Usage statistics (anonymized)

5.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, property, or safety.

6. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Authentication, security, session management
• Functional Cookies: Preferences, settings, UI state
• Analytics Cookies: Usage patterns, performance monitoring

You can control cookies through your browser settings, but disabling them may limit Service functionality.

7. Your Data Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Export your data in a machine-readable format
• Objection: Opt-out of certain data processing activities
• Restriction: Limit how we process your data

To exercise these rights, contact us at privacy@appilot.ai

8. Data Retention

We retain your data for as long as:

• Your account is active
• Required to provide our Service
• Necessary for legal or regulatory purposes
• Needed to resolve disputes or enforce agreements

When you delete your account, we remove your personal data within 30 days, except for data we're legally required to retain.

9. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect data from children. If you believe we've collected data from a child, please contact us immediately so we can delete it.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. AI and Machine Learning

11.1 Training Data: We do not use your personal data or generated content to train AI models.

11.2 Third-Party AI: When you generate content, we send prompts to OpenAI's API. These prompts may contain your app descriptions but not personal information.

11.3 Data Minimization: We only send the minimum data necessary for content generation.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent version.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

14. GDPR Compliance (EU Users)

If you're in the European Economic Area (EEA), we process your data based on:

• Contract: To provide the Service you signed up for
• Consent: When you explicitly agree (e.g., marketing emails)
• Legitimate Interest: To improve and secure our Service
• Legal Obligation: To comply with laws and regulations

15. CCPA Compliance (California Users)

California residents have additional rights under CCPA:

• Right to know what data we collect and why
• Right to delete personal data (with exceptions)
• Right to opt-out of data sale (we don't sell your data)
• Right to non-discrimination for exercising privacy rights