Privacy Policy

Last updated: 26 July 2026

This Privacy Policy explains what personal information AppCreator collects, why we collect it, and what you can do about it. It applies to the website appcreator.me, the dashboard at app.appcreator.me, and the related build, monetization and publishing services (together, the “Platform”).

“AppCreator”, “we” and “us” refer to the trading name AppCreator, operated by its owner. You can reach us at any time at admin@appcreator.me.

1. The short version

We collect what we need to run your account, build your apps and bill you — not more.
We never sell your personal information.
Your app content and the credentials you connect belong to you. Credentials are stored encrypted and are never shown back to you in full.
Apps you build can display ads and collect device identifiers. That happens in your app, under your responsibility, and section 7 explains it in detail.
You can ask us to export or delete your data by writing to admin@appcreator.me.

2. Two very different groups of people

This policy has to be read with one distinction in mind, because it changes who is responsible for what:

You, the creator. You sign up, build apps and publish them. For your personal data, we are the data controller and this policy describes what we do.
The end users of the apps you build. When someone installs an app you created, you decide what that app collects and why. You are the controller of that data; we act as your service provider. You are responsible for giving those end users their own privacy notice and for obtaining any consent the law requires.

3. Information we collect

3.1 Account information

Your name, email address, password (stored hashed, never in readable form), preferred language, and the organization or team you belong to.

3.2 Billing information

Your plan, billing history, invoices and the country you declare for tax purposes. Card numbers are handled by our payment processor and never reach our servers.

3.3 Content you create

Everything you put into the Platform to build an app: app names, descriptions, screens, text, images, videos, icons, catalogs, product listings, prompts you write for the AI builder, and any file you upload. We store it so we can render, build and publish your apps.

3.4 Credentials you connect

To publish or monetize on your own accounts you can connect third-party services — ad networks, app stores, e-commerce platforms and similar. The keys, tokens and secrets you provide are encrypted before storage, are decrypted only at the moment they are needed to make a request on your behalf, and are shown back to you masked. We use them only for the actions you configure.

3.5 Technical and usage data

IP address, browser and device type, pages viewed, features used, build logs, error reports and timestamps. We use this to keep the service working, diagnose failures and prevent abuse.

3.6 Communications

Messages you send us for support, and your preferences for product and marketing email. You can unsubscribe from marketing email at any time; we will still send you essential service notices, such as billing or security messages.

4. Why we use it, and on what legal basis

To provide the service — creating your account, building and publishing your apps, processing payments. Legal basis: performance of our contract with you.
To keep the service safe and working — monitoring, backups, fraud and abuse prevention, enforcing our Terms. Legal basis: our legitimate interest in a secure and reliable platform.
To improve the Platform — understanding which features are used and where builds fail. Legal basis: legitimate interest, using aggregated data wherever it is enough.
To communicate with you — service notices (contract), product and marketing email (consent, withdrawable at any time).
To comply with the law — tax records, responding to lawful requests. Legal basis: legal obligation.

5. Artificial intelligence

The Platform uses AI models to generate app content, text, layouts and translations. You should know exactly what that means:

The prompts you write and the context needed to answer them are sent to third-party model providers so they can generate a response.
We select providers that do not train their models on data submitted through their business APIs, but we cannot control a provider’s own policies beyond the contract we have with them.
Do not paste personal data of other people, passwords or confidential material into AI prompts.
AI output can be wrong, biased or similar to existing material. You are responsible for reviewing anything the AI produces before you publish it. See our Terms of Service.

6. Cookies and similar technologies

On appcreator.me and the dashboard we use:

Strictly necessary cookies — to keep you signed in, remember your language and protect forms. These cannot be switched off.
Preference cookies — to remember choices such as your interface theme.
Measurement — to count visits and understand which pages are useful, in aggregate.

You can delete or block cookies in your browser settings. Blocking the strictly necessary ones will stop you from signing in.

7. Advertising in apps you build

This is the part most people miss, so we will be explicit.

Apps built with AppCreator can display advertising. When they do, the advertising SDK embedded in your app collects data from the end user’s device — typically an advertising identifier, IP address, device model, operating system version, coarse location and interaction with the ads. That data goes to the ad network, not to us.

By default, apps are monetized through AppCreator’s managed advertising configuration. You may instead connect your own ad network credentials at any time.
You must disclose this in your own app’s privacy policy and obtain any consent required where your users live — including GDPR/ePrivacy consent in Europe, and applicable US state-law disclosures.
If your app is directed at children, additional rules apply (COPPA, the Google Play Families policy, GDPR provisions on minors). You are responsible for configuring your app accordingly, including disabling personalized advertising where required.
Each ad network publishes its own privacy policy, which governs what it does with the data it collects.

8. Who we share information with

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do share it with the service providers we need to run the Platform:

Hosting and infrastructure — servers, storage, content delivery and backups.
Payment processing — to take payment and issue invoices.
AI model providers — to generate the content you request (section 5).
Advertising networks — where you or the managed configuration enable monetization (section 7).
App stores and distribution channels — when you publish an app, we transmit the app and the store listing you provide.
E-commerce and content platforms — when you connect a store or a feed to import your own catalog.
Email delivery — for service and, where you have opted in, marketing messages.

We may also disclose information where the law requires it, to enforce our Terms, or to protect the rights and safety of users and third parties. If the business is ever transferred, your information may transfer with it; you will be told before that happens.

9. International transfers

The Platform is operated from, and uses providers located in, several countries. Your information may therefore be processed outside the country where you live. Where data leaves the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

10. How long we keep it

Account and app content — while your account is open. If you delete your account, we delete or anonymize it within 90 days, except where the law requires us to keep it longer.
Connected credentials — until you disconnect the service or delete your account, whichever comes first; deletion is immediate.
Billing and tax records — for the period required by tax law, typically between 5 and 10 years.
Technical logs — normally up to 12 months.
Backups — deleted data may persist in encrypted backups for a short period before being overwritten on the normal rotation.

11. Security

We use encryption in transit (TLS) and at rest for sensitive fields, hashed passwords, access controls limiting who can see what, isolation between accounts, and logging of administrative actions. Credentials you connect are encrypted with authenticated encryption and the keys are held separately from the database.

No system is perfect. If a breach affects your personal data and creates a risk to you, we will notify you and the competent authority within the time limits the law sets.

12. Your rights

Depending on where you live, you can ask us to:

Access the personal data we hold about you, and receive a copy in a portable format.
Correct anything inaccurate.
Delete your data, subject to records we must legally keep.
Restrict or object to processing based on legitimate interest.
Withdraw consent at any time, without affecting what was done before.
Not be discriminated against for exercising any of these rights.

Write to admin@appcreator.me. We answer within 30 days. If you are in the European Economic Area or the United Kingdom and you are not satisfied, you may complain to your national data protection authority. If you are in California, you may exercise the rights granted by the CCPA/CPRA, including through an authorized agent.

13. Children

The Platform is not intended for people under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal information, write to admin@appcreator.me and we will delete it. This is separate from the rules that apply to apps you build for a child audience, described in section 7.

14. Changes to this policy

We update this policy when the Platform changes. The date at the top always reflects the current version. If a change materially affects your rights, we will tell you by email or through the dashboard before it takes effect.

15. Contact

Questions, requests or complaints about privacy: admin@appcreator.me.