Privacy Policy

Last updated: September 2026

1. What we collect

Account data: your email address, display name, and a hashed password (we never store the password itself).

Project records: which apps you create, whether each is public or private, and operational records needed to run them.

Usage and billing records: your credit balance and the ledger of credit movements (purchases and charges).

Session data: a login cookie, plus the technical details (browser, approximate IP) attached to your sessions for security.

2. How we use it

To provide the Service: sign-in, your project workspace, publishing, and credit metering.

To keep the Service safe: abuse and rate-limit enforcement, and account security.

To communicate with you about your account: verification and password-reset emails, and operational notices. We do not send marketing email without your consent.

3. Who we share it with

Managed infrastructure providers host this site and its database.

Dodo Payments processes credit-pack purchases; they receive what payment processing requires (such as your email) and never your password.

Resend delivers transactional email (verification, password reset) on our behalf.

We may disclose information where required by law or to protect the Service and its users.

4. Cookies

We use only the essential cookie that keeps you signed in. No advertising or cross-site tracking cookies are used.

5. Retention

Account and project records are kept while your account is active. Credit ledger entries are retained as financial audit records. You can delete individual projects in the builder at any time.

6. Your rights

You can request a copy of your data or the deletion of your account and its records. Where local law grants additional rights (access, correction, portability, objection), we honor them.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect their data.

8. Security

Traffic is encrypted in transit; passwords are stored only as modern password hashes; sessions are signed, http-only cookies. No system is perfectly secure — report anything suspicious via the contact below.

9. Contact

Privacy questions? Use the support channel listed on this site.