Legal
Privacy Policy
What AppMake collects, why, how long we keep it, and who processes it for us. We only list what the service actually does today.
1What we collect and why
| When | What | Why |
|---|---|---|
| Sign-up and sign-in | Email, name, profile photo and account ID from the provider you choose (Google, Kakao or Naver) | Identify your account and contact you |
| Making a site or app | What you enter: business name, industry, address, phone, opening hours, description, photos and business details | Build and publish your site and app |
| Contact form | Name, contact details, message, and a one-way hash of your IP address (the IP itself is not stored) | Reply to you and block spam |
| Payment | Your account email, the plan you picked, the amount, and our app, account and order IDs. Card details, address and country are collected by Paddle on its payment page, not by us | Take payment, calculate tax, send receipts and handle refunds (through Paddle) |
| Getting a free web address | A device cookie, browser characteristics and a hash of your IP address (raw values are not stored) | One free address per person — stop multiple accounts |
| Site reports | Report reason, a short note and a hash of the reporter’s IP address | Stop scams, impersonation and illegal sites; filter duplicate reports |
| Service and payment emails | Your sign-up email, and which emails we sent and when | Payment, cancellation and refund notices, free plan limits, sleep and report notices (notice emails have an unsubscribe link) |
| Automatically | A sign-in cookie, a language cookie, a device cookie (1 year) and Google Analytics cookies (in the EEA, UK and Switzerland only if you allow them) | Keep you signed in and remember your language; the device cookie limits free addresses |
2Who processes it for us
We use these companies to run the service. Some of them store data outside your country.
| Company | Country | What and why |
|---|---|---|
| Cloudflare, Inc. | United States | Hosting, database, file storage and delivery, notifications and service emails — everything stored in the service |
| GitHub, Inc. | United States | The app definition, site address and encrypted signing key, to build your Android app file |
| Google LLC | United States | Device push tokens and the message you send, to deliver push messages from your app |
| Google LLC (Google Analytics) | United States | Visit analytics on appmake.app only (pages viewed, buttons pressed, device and browser type, rough region) — not on the sites and apps you build |
| Paddle.com Market Ltd | United Kingdom | Payments as Merchant of Record — payment page, tax, receipts and refunds |
| Kakao Corp. | Republic of Korea | Your business address only, to turn it into map coordinates (Kakao Local API) — no customer data |
| Telegram FZ-LLC | United Arab Emirates | Notifies the operator of new contact messages and payments — name, contact details and the start of the message (payment notices: amount, currency and country only). The operator deletes them within 1 year. |
| Kakao Corp. (KakaoTalk) | Republic of Korea | Notifies the operator of new contact messages and payments by KakaoTalk message to self — the same items as above. The operator deletes them within 1 year. |
Payments outside Korea are processed by Paddle.com as Merchant of Record. Paddle collects your card details, billing address and country on its own payment page under its own privacy policy; we never receive card numbers.
We do not sell your data. Apart from the companies above, we share data only when the law requires it.
3How long we keep it
| Data | Kept for |
|---|---|
| Account, sign-in details, apps, photos and sites | Deleted as soon as you delete your account |
| Sign-in cookie | 30 days |
| Device cookie | 1 year |
| Device and IP hashes from getting a free address | 30 days |
| Contact messages · site reports · sent email records | 1 year |
| Records of legal requests and rights-infringement reports | 2 years |
| Payment records | As long as tax and consumer law requires (up to 5 years); Paddle keeps its own records under its policy |
Cancelling a plan is not the same as deleting your account: your content stays until you delete the account.
4Your customers’ data
Data your customers leave on your site or app belongs to you; we process it on your behalf. If a customer asks us to see or delete their data, we tell you and handle it within 10 days.
5Your rights
You can download your data and delete your account from your account page, and edit your content in the editor at any time. For anything else — including objecting to processing — use the contact page. We reply within 10 days.
6Cookies
Our own cookies: one to keep you signed in, a short-lived one that protects the sign-in step, one that remembers your language choice (1 year), and a device cookie that limits free web addresses (1 year). We do not use advertising cookies.
We use Google Analytics (cookies) to see how visitors use appmake.app. It runs only on our own site, never on the sites and apps you build. In the EEA, the UK and Switzerland it is off until you allow it in the bar at the bottom of the page. We do not use it for advertising — ad storage and ad personalization are turned off. We do not send your email or name.
7Security
- App signing keys are stored encrypted with AES-256-GCM.
- The admin area needs two checks: a Cloudflare Access sign-in and an admin email list.
- IP addresses are stored only as one-way hashes.
- Everything is sent over HTTPS.
- We never receive or store card numbers.
8Contact
Questions about privacy: support@appmake.app or the contact page.