Privacy Policy

1. Who we are

App Mare ("App Mare", "we", "us", "our") operates appmare.com and the App Mare no-code app builder and editor (the "Service"). We are the controller of the personal data we collect about users of the Service and visitors to our website.

Privacy contact: [email protected].
Registered address: [App Mare registered address].

2. Personal data we collect

• Account data — your name, email address, login credentials, and profile details you provide when you register.
• Your content — apps, pages, templates, text, images, and other materials you create, upload, or store through the Service.
• Subscription data — plan, subscription status, billing history, and identifiers that link your account to your purchase. Card and payment details are collected and processed by Paddle, not by us (see section 5).
• Support communications — messages you send to us and any information you include in them.
• Usage and device data — IP address, device and browser information, pages visited, actions taken in the editor, log data, and diagnostic/telemetry events.
• Cookies and similar technologies — as described in section 7.

3. How we use your data and our legal bases

• To provide the Service — creating your account, authenticating you, storing and rendering your apps, and delivering features you request. Legal basis: performance of a contract.
• Security and fraud prevention — protecting accounts, detecting abuse, and keeping the Service safe. Legal basis: legitimate interests (securing our platform and users).
• Improving the Service — understanding how features are used, diagnosing issues, and developing new functionality. Legal basis: legitimate interests (improving our product) or consent where required.
• Customer support — responding to your questions and resolving problems. Legal basis: performance of a contract and legitimate interests.
• Marketing — sending product updates and offers where permitted. Legal basis: consent (or soft opt-in where allowed by law). You can opt out at any time.
• Legal and tax obligations — keeping records and complying with applicable law. Legal basis: legal obligation.

4. Who we share data with

We share personal data only as needed with:

• Service providers and subprocessors — cloud hosting and infrastructure (including Google Firebase), email delivery, analytics, and support tooling, acting on our instructions.
• Paddle (merchant of record) — Paddle.com Market Limited and its affiliates, for the sale of the Service, subscription management and payments, tax compliance, and invoicing. See section 5.
• Professional advisers — lawyers, accountants, and auditors where necessary.
• Authorities — where required by law, or to protect our rights, safety, or the safety of others.

5. Payments and Paddle as merchant of record

Paid plans and subscriptions are sold through our online reseller Paddle.com Market Limited ("Paddle"). Paddle.com is the Merchant of Record for all our orders: Paddle provides all customer service inquiries and handles returns. When you make a purchase, Paddle collects and processes your payment and billing information as an independent controller. Please see Paddle's privacy policy for details of how Paddle handles your data.

6. Data retention

We keep personal data for as long as your account is active and for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete it or anonymise it. Support messages are kept for up to 24 months; server logs are kept for up to 12 months; billing records are kept as long as required by tax and accounting law.

7. Cookies

We use cookies and similar technologies to keep you signed in (essential cookies), to understand how the Service is used (analytics), and — where you consent — to measure marketing. Essential cookies are required for the Service to work. You can control or delete cookies in your browser settings; blocking essential cookies may prevent you from signing in.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, but we work to protect your data and review our safeguards regularly.

9. International transfers

We and our service providers may process personal data in countries outside the UK and the European Economic Area, including the United States. Where we transfer data internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses, or an adequacy decision.

10. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data (rectification);
• ask us to delete your data (erasure);
• ask us to restrict or object to certain processing;
• receive your data in a portable format (portability);
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

To exercise your rights, email [email protected]. We respond within one month, unless the law allows us to extend that period.

11. Children

The Service is not directed to children, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date above. Where changes are material, we will provide additional notice.

13. Contact us

Questions about this Privacy Policy or how we handle your data? Email [email protected].