Privacy Policy

1. Who we are and what this policy covers

MobApp Labs LLC operates MobAppCreator. This Policy explains how we handle personal information in connection with our website, app-building platform, customer accounts, billing and support (the “Services”). “We,” “us” and “our” mean MobApp Labs LLC.

It also explains our role when we process personal information for applications built by our customers (“Customer Apps”). A Customer App’s owner generally decides what information its app collects and why. Its own privacy notice should identify that owner and explain the app’s practices. This Policy does not replace the privacy notice for every app created with MobAppCreator.

For information we use to manage our own business, accounts and Services, we act as the controller or business responsible for that processing. When we handle information solely on a customer’s instructions, we generally act as its processor or service provider, subject to the applicable agreement. These roles depend on the actual activity and applicable law.

Reading or accepting this Policy does not by itself provide consent for optional cookies, marketing or other processing that legally requires a separate choice.

2. Information we handle

Account and business information. Information you provide when registering, subscribing, requesting a demo or contacting us, such as your name, email address, organization, account credentials and business contact details. We also keep account settings and the subscription information needed to administer your account.

Billing information. Billing contact details, invoice information, subscription status, payment history and information needed to address billing issues. Stripe processes payments and handles payment details under its own terms and privacy notice. We receive transaction and payment-status information needed to manage your subscription.

Content and support communications. App configuration, text, images, files and other materials you upload or make available to us, together with support requests and related correspondence. Content you choose to publish may become visible to your app’s audience or the public.

Technical and usage information. Information associated with access to and use of the Services, such as IP address, browser and device characteristics, operating system, timestamps, page visits, interactions, referring pages, errors and security logs. Google Analytics helps us understand use of our website and Services; the information collected depends on the relevant settings and choices.

Customer App Data. Information customers submit or instruct us to process for their apps, which may include End User accounts, contact details, form submissions, uploaded content, device identifiers, notification-related information and usage records, depending on the features enabled. This is a description of possible feature-dependent processing, not a statement that every app collects all these categories.

Permissions and integrations. An app may request access to device functions or connect to another service where the app owner enables that functionality. The app’s notice and permission prompts should explain the specific data and purpose. Permissions can generally be managed in the device settings, although some functionality may then be unavailable.

Information comes from you, your authorized collaborators, the operation of the Services and providers or integrations involved in your selected functionality. You should not provide information about another person unless you are authorized to do so.

3. Why we use information

We use information relevant to the following purposes:

• Set up and administer accounts, authenticate access and deliver the selected Services.
• Host Customer Content and process Customer App Data on the relevant customer’s instructions.
• Manage subscriptions, collect payments through Stripe, issue invoices and respond to payment questions.
• Provide support, troubleshoot problems and communicate about account activity, security, billing or material service changes.
• Understand website and service usage through Google Analytics and improve functionality and usability, subject to applicable choices and consent requirements.
• Detect misuse, prevent fraud, protect accounts and systems, and investigate incidents.
• Send promotional communications where permitted by law and subject to applicable consent or opt-out requirements.
• Meet legal obligations, maintain required business records and establish, exercise or defend legal claims.

Providing certain account and billing information is necessary to supply a subscription. If you do not provide required information, we may be unable to create an account, accept payment or supply the requested feature. Optional information and optional tracking choices should not be treated as required merely because you use the Services.

4. Legal bases where required

Where European, UK or another applicable law requires a legal basis, the relevant basis depends on the purpose and relationship:

• Contract: processing necessary to provide Services you personally request or purchase.
• Legitimate interests: administering business-customer relationships, providing support, protecting systems, preventing fraud and improving Services where those interests are not overridden by your rights. Where you act for a company, managing that business relationship may rely on legitimate interests rather than a contract with you personally.
• Legal obligation: required accounting, tax, legal-response and other statutory processing.
• Consent: optional tracking, certain marketing or other activities where the law requires consent. You may withdraw consent without affecting processing that was lawful before withdrawal.

When we process Customer App Data only on a customer’s instructions, the customer is responsible for establishing its own legal basis. This Policy is not a substitute for that assessment or the applicable processing agreement.

5. Service providers and other disclosures

We disclose information as needed for the purposes in this Policy, subject to applicable legal and contractual restrictions.

Google — hosting and infrastructure. We use Google hosting services to operate the platform and store or process information involved in providing it. The specific product and hosting location depend on our infrastructure configuration.

Stripe — payments. Stripe processes subscription payments and associated payment, billing and fraud-prevention information. It may act under its own legal responsibilities for parts of that processing.

Google Analytics — usage measurement. We use Google Analytics to understand visits and interactions. Google receives the information associated with the analytics implementation, subject to its service terms, our configuration and applicable user choices. This does not mean that customer app content is intentionally sent to analytics.

Provider information is available at:

• Google Privacy Policy
• Google Cloud Privacy Notice
• Google Analytics information
• Stripe Privacy Policy

We may also disclose relevant information to authorized people in your organization, recipients or integrations you select, professional advisers, or public authorities when legally required. We may disclose information where reasonably necessary to investigate unlawful activity, protect rights or address a security threat, as permitted by law.

If the business is acquired, reorganized or transferred, relevant information may be disclosed in connection with that transaction, subject to applicable confidentiality, notice and data-protection requirements. A business transfer does not remove existing legal protections or authorize incompatible uses of information.

6. Cookies, analytics and advertising choices

Cookies and similar technologies can support account sessions, security, saved preferences and analytics. Google Analytics may use browser storage, cookies or similar identifiers to measure interactions. The precise technologies, duration and data collected depend on the configuration.

Where the law requires consent for non-essential technologies, those technologies must remain disabled until valid consent is obtained, and the consent mechanism must let you change your choice. Browser settings can restrict or delete cookies, although essential functionality may be affected. An opt-out from email marketing does not itself change analytics or cookie settings.

We do not sell personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.

7. Customer app data and end user requests

Customer App owners choose the content, settings, audience, integrations and data collection for their apps. They must provide their own notices and obtain any required permissions. We process information on their instructions to provide the selected functionality, subject to applicable written processing terms and legal requirements.

If you use a Customer App and want to access, correct or delete information, contact its owner using the details in that app’s privacy notice. If you contact us, identify the app and the nature of the request. Where we act as a processor, we will direct the request to the customer or assist it in accordance with our agreement and applicable law, rather than independently changing information without authority.

We may separately process limited technical, account or security information for our own responsibilities. A request relating to that processing can be addressed directly to info@mobappcreator.com.

Customer-enabled integrations are distinct from the platform providers listed above. The app owner must explain disclosures to services it independently connects, including any AI service it chooses to embed or link.

8. AI services

MobAppCreator does not send personal information or Customer App Data to external AI services. This statement concerns MobAppCreator’s handling of data; it does not describe a third-party service that a customer independently connects to its app. Review that customer’s notice for the connected service’s practices.

If we introduce a feature that would change this practice, we will provide the relevant disclosure and obtain any consent or authorization required before that processing begins.

9. How long information is kept

Retention depends on the information and its purpose. We consider whether an account or subscription remains active, what information is needed to deliver the selected functionality, support requirements, legal recordkeeping periods, unresolved disputes, security risks and applicable processing instructions.

Account and service information is kept while needed to administer the relationship, and afterward only where a continuing purpose or legal requirement justifies retention. Billing and transaction records may be kept for legally required accounting and tax periods. Support correspondence and security logs are kept for the period reasonably needed to handle the issue, protect systems and address related claims.

Customer App Data is handled under the relevant customer instructions and applicable processing agreement, including its return or deletion provisions. Ending a subscription does not by itself erase records we must legally retain or information controlled independently by third parties. Where deletion is required, restricted backup copies may remain until they expire through the applicable backup rotation, unless a legal requirement requires longer retention.

Contact us for information about retention relevant to your account or request. Specific retention and backup settings must be consistent with these criteria and the applicable customer agreement.

10. Security

We use safeguards appropriate to the nature of the information and the risks of processing, including controls intended to limit access to authorized people and protect operation of the Services. No internet service or storage system can be guaranteed completely secure.

You can help by protecting credentials, reviewing collaborator access and promptly reporting suspected misuse. Please report a suspected security issue to info@mobappcreator.com without including unnecessary sensitive information. We will provide notices of a personal-data breach when applicable law or our processing agreement requires them.

11. International processing

MobApp Labs LLC is based in Florida, United States. Information may be processed in the United States and other locations used by our service providers. These countries may have different privacy laws from your own.

Where applicable law restricts an international transfer, the transfer must use a valid legal mechanism, such as an applicable adequacy decision or appropriate contractual safeguards, together with supplementary measures where required. Contact info@mobappcreator.com to ask about the arrangements relevant to your information or to request a copy or description of applicable safeguards, subject to permitted redactions.

We do not rely on your reading this Policy as blanket consent to international transfers. We do not claim participation in a data-transfer certification framework unless that participation has been verified.

12. Your privacy rights and choices

Depending on the law that applies to you and subject to its exceptions, you may have rights to:

• Obtain information about processing and access your personal information.
• Correct inaccurate information or request deletion.
• Obtain a portable copy where applicable.
• Restrict processing or withdraw consent for future processing based on consent.
• Object to processing based on legitimate interests, taking account of your circumstances.
• Object at any time to use of your personal information for direct marketing.
• Opt out of a sale, targeted advertising, legally defined sharing or certain profiling where applicable.
• Appeal a rights-request decision where the applicable law provides an appeal right.
• Complain to a competent data-protection authority, including in your place of residence or work where applicable.

To submit a request, email info@mobappcreator.com. Explain the request and the account or app involved. We may request proportionate information to verify identity or an authorized agent’s authority. Do not send government identification or sensitive documents unless we specifically request an appropriate verification method.

We will respond within the period required by the applicable law, explain a refusal or permitted extension when required and provide an available appeal process. We will not discriminate against you for exercising a protected privacy right. Some information may need to be retained for legal obligations or another applicable exception.

You may unsubscribe from promotional emails using the message’s unsubscribe option or by contacting us. Essential service, billing and security messages may continue while relevant to your account.

13. Children

Our app-building platform is intended for adult account holders and is not directed to children under 18. If you believe a child has provided account information without appropriate authorization, contact us so we can investigate and take appropriate action.

Customer Apps may serve different audiences. Their owners must evaluate children’s privacy requirements, provide appropriate notices and obtain legally required parental authorization before using the platform to collect children’s information. Do not assume an app is suitable for children merely because it was created with MobAppCreator.

14. Changes and contact

We may update this Policy as our practices or legal requirements change. We will update the effective date and provide an appropriate notice of material changes. Where required, we will obtain new consent or authorization before using information in a materially different way. An update does not retroactively remove protections that apply to information already collected.

Contact for privacy requests and questions: