Privacy policy
Last updated: 8 November 2026
This policy explains what personal information appTown collects, why, who we share it with, and the choices you have. It covers the appTown website, web app, mobile app and API (together, "appTown", "we", "us").
The short version: we collect what we need to run appTown, we use it only to run appTown, we never sell it, and we don't show ads or use tracking cookies.
Two roles we play
- For your account, we decide how your information is used (we are the controller).
- For the data inside apps, the app's owner decides what is collected and who sees it; we store and process it on their behalf (we are a processor). If you use an app someone else built, questions about the data in it should go to that app's owner first. We will help them answer you.
What we collect
Account information. Your name, email address and profile picture from the sign-in provider you choose (for example Google or Microsoft, through our sign-in partner), your time zone, your settings and your plan.
Content you create. The apps you build (tables, fields, views, automations, settings), the records you add, files you upload, the change history of apps and records, and the people, groups and roles you share apps with.
Connections you set up. If you connect an app to another service (for example Slack, Google Sheets, Google Calendar, Stripe or a webhook), we store the credentials needed to use it. They are encrypted at rest and only used to run what you set up.
AI requests. When you use AI features, the messages you write and the app context needed to answer them, plus how many credits each request used.
Payment information. If you buy a plan, payment is handled by Stripe. We receive the plan, billing status and a reference to your Stripe customer, never your full card number.
Technical information. IP address, browser and device type, pages and API endpoints requested, timestamps and error logs. We use these to keep appTown secure, prevent abuse and fix problems.
What we don't collect. We don't use advertising or analytics trackers, and we don't build profiles of you for marketing.
How we use it
- to provide appTown: sign you in, store and show your apps, run your automations, send the emails and notifications you or an app owner set up;
- to answer AI requests you make (AI is always optional);
- to bill paid plans and track AI credits;
- to keep appTown secure: detect abuse, enforce limits, investigate incidents;
- to support you when you contact us;
- to tell you about important changes to appTown or these terms (not marketing, unless you ask for it);
- to comply with the law.
Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (running the service), our legitimate interests (security, fixing bugs, improving appTown in ways that don't override your rights), your consent where we ask for it, and legal obligations.
Who we share it with
We share information only with service providers that help us run appTown, under contracts that limit their use of it to providing their service to us:
| Provider | What for |
|---|---|
| DigitalOcean | Hosting the app and database (United States) |
| Cloudflare | Network, security and file storage |
| WorkOS | Sign-in |
| Stripe | Payments for plans, and payments in apps that connect their own Stripe account |
| Brevo | Sending email |
| AI model providers (such as Anthropic, OpenAI and Google) | Answering AI requests |
| Maps in map views, and Google Sheets / Calendar when an app connects them |
AI providers receive only what is needed to answer a request and are not allowed to use it to train their models.
Apart from these, we share information only: with the people an app is shared with, as its owner allows; with services an app owner connects; when the law requires it; to protect the rights, safety or property of our users or the public; or as part of a merger or sale of the business, in which case this policy keeps applying to your information.
We never sell your personal information and never share it for cross-context behavioural advertising.
Where it is stored
appTown is hosted in the United States. If you use it from elsewhere (including the EU and UK), your information is transferred to the US. We rely on our providers' safeguards for these transfers, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses (with the UK addendum).
How long we keep it
- Account and content: as long as your account is open. appTown keeps record versions and removed fields so nothing is lost by accident; you can restore them while the app exists.
- Automation run logs: 7 days on Free, 30 days on Builder, 90 days on Pro.
- Technical logs: a short time, normally no more than 30 days, unless needed to investigate a security incident.
- Backups: kept for a limited period (currently up to a few weeks) and then overwritten.
- Billing records: as long as tax and accounting laws require.
When you ask us to delete your account, we delete your account and the apps you own (after giving you a chance to export them), and remove the rest from backups as they expire.
Your rights
Depending on where you live, you may have the right to access your information, get a copy of it in a portable format, correct it, delete it, restrict or object to how we use it, and withdraw consent you have given. California residents also have the right to know what we collect and not to be discriminated against for using their rights (we don't sell or share personal information as defined by the CCPA).
You can export app data yourself from any table or view. For anything else, use Contact us below; we answer within 30 days. We may need to confirm it's you first. If you are in the EU or UK and are unhappy with our answer, you can complain to your local data protection authority.
Security
We encrypt traffic (HTTPS) and stored credentials, isolate every app's data at the database level, keep sessions short-lived and limited to appTown's own address, and give staff access to customer data only when needed to support you or keep appTown running. No service is perfectly secure; if a breach affects your information, we will tell you and the authorities as the law requires.
Children
appTown is not for children under 16, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
Changes
We may update this policy. If a change is significant, we will tell you by email or in appTown before it takes effect. The date at the top shows the latest version.
Contact
Questions or requests about your privacy: use Contact us at the bottom of this page.