Privacy policy

Who we are

Appatchy (appatchy.com) is run by Pixor UG (haftungsbeschränkt), Belziger Str. 69–71, 10823 Berlin, Germany. We're responsible for the personal data described here. Questions and requests: privacy@appatchy.com.

What we collect and why

Your account

• Your email address, how you sign in (email link), when you signed up and last signed in.
• A display name, if you add one.
• Your plan, and whether you've asked for access to video generation.

Why: to give you an account and run the service you signed up for.

Payments

• When you buy a plan or credits, Stripe handles the payment. We never see or store your card details. We keep your Stripe customer id, your subscription's status and billing dates, and the credits you bought.
• Stripe collects your billing name and address, and a VAT id if you add one, to work out tax and issue invoices.

Why: to sell you a plan and keep the records tax law requires (contract and legal obligation).

Your apps and what you make

• App Store links you add, and the listing details we read from them (name, description, screenshots, icon).
• Descriptions you type, screenshots and screen recordings you upload.
• What Appatchy makes for you: briefs, ideas, scripts, UGC videos, images and exported videos.

Why: that's the service. Uploaded and generated files are stored at long, unguessable web addresses so videos can load them. Anyone you give such an address to can open the file.

Usage records and abuse protection

• What you did and when (for example “generated a video”), to apply your plan's credits and daily limits.
• For people who aren't signed in, a scrambled form of the IP address (a keyed hash; we don't store the address itself), to limit how often the free tools can be used.

Why: to keep the service available and its costs under control (our legitimate interest).

Free tools

• The 3D showcase, slideshow and screenshot makers run in your browser. Files you add there are not uploaded to us. The video or images are made on your device.
• The listing check reads the App Store link you paste.
• The screenshot maker and listing check ask for an email before downloading. We keep the email, the tool and the time. If you tick the box, we also keep your consent to receive tips and news, with its time.

Why: to know who uses the tools. We only send marketing email if you ticked the box (your consent), and you can withdraw it with the unsubscribe link in any such email.

Stored in your browser

• Sign-in cookies set by our login provider, needed to keep you signed in.
• The email you gave a free tool, so it isn't asked again on this device.
• When you sign up from a free tool, what you were working on (including files) waits in your browser for up to a day, so it's still there when you come back. It isn't sent to us.

We don't use advertising cookies.

Analytics

• For every visitor, without cookies: we count page views, where visitors come from (the referring site), their country and device type, and tool downloads. Nothing is stored on your device. To count unique visitors per day, our analytics provider PostHog combines your IP address and browser details with a random key that changes every day and keeps only the resulting hash, so visits can't be linked across days or to you. Why: to understand how many people use the site and which pages work (our legitimate interest).
• Only if you accept in the cookie banner: cookies that let us count page visits and tool downloads, and recordings of how pages are used (form fields are hidden in them), to see what people find confusing. If you're signed in, this is linked to your account id. Change your choice any time under “Cookie settings” at the bottom of every page. Why: your consent.
• Whether or not you accept: when you're signed in, we record key steps in the product, such as signing up, adding an app, generating ideas or a video, exporting, and plan changes, linked to your account id. This happens on our server and stores nothing in your browser. Why: to understand how the product is used and improve it (our legitimate interest).

Who processes it for us

We use these services to run Appatchy. They process data on our behalf and only as needed for that.

• Supabase: accounts and database (region: EU (Ireland / Frankfurt)).
• Vercel: hosts the website and handles each request, which includes your IP address.
• Cloudflare (R2): stores uploaded and generated files.
• Resend: sends sign-in and account emails.
• Stripe: payments, subscriptions, tax and invoices.
• PostHog (EU Cloud, Frankfurt): product analytics, as described above.
• fal.ai: runs the AI models. App details and scripts are sent to it to write briefs, ideas and scripts (using a Google Gemini model through fal's OpenRouter service), images to label your screenshots, and prompts to generate UGC videos and images and to transcribe them.
• Remotion: the video library. When you export a video, your browser sends Remotion a usage count (our website address and whether the export worked).

Some of these are based in, or use servers in, the United States. Where data leaves the EU, it's covered by the provider's EU Standard Contractual Clauses or their certification under the EU–US Data Privacy Framework.

How long we keep it

• Your account and everything in it: until you delete the account.
• Free-tool emails: until you ask us to delete them. If you unsubscribe, we keep a note of that so we don't email you again.
• Usage records: as long as they're needed for limits and credit balances.
• Analytics events and session recordings: for PostHog's retention period for our plan, at most a year.
• Payment and invoice records: for as long as tax law requires, in Germany up to ten years.
• Request logs at our hosting providers: for their standard retention periods, typically days to weeks.

Your rights

You can ask to see the data we hold about you, correct it, delete it, receive it in a portable format, restrict or object to how we use it, and withdraw consent at any time. You can delete your account and everything in it yourself, under Account. For anything else, email privacy@appatchy.com. You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

Children

Appatchy is for app developers and isn't meant for anyone under 16.

Changes

If this policy changes in a way that matters, we'll update the date above and tell account holders by email.