Privacy Policy

• Account details: your name and email address, and your password stored only as a secure hash. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Billing details: your plan, subscription status and payment history from Dodo Payments. Card and bank details go straight to Dodo Payments; we never see or store them.
• Usage data: the pages, searches and features you use, with timestamps, so we can run usage limits, keep the service fair and improve it.
• Technical data: IP address, browser and device type in our server logs and sign-in sessions, for security and to prevent abuse.
• What you save: apps, keywords and lists you save or track.

• to create your account, sign you in and keep it secure;
• to provide the service, process your subscription and show your billing history;
• to send account emails (email confirmation, password resets, receipts and important service notices);
• to measure usage, enforce fair-use limits and prevent fraud and scraping;
• to understand which features are used and improve them.

We use a session cookie that keeps you signed in, a preference cookie for things like the theme, and a first-party cookie (appsupa_src, kept for 90 days) that remembers how you first found Appsupa: the referring site, the landing page and any campaign tags in the link. When you create an account we store that with your account, so we know which channels bring people to Appsupa. Our analytics providers set first-party cookies that tell repeat visits from the same browser apart: PostHog (ph_…_posthog, kept for up to a year) and Google Analytics (_ga and _ga_…, kept for up to two years). We don’t use advertising or cross-site tracking cookies, and we don’t share these cookies with anyone else. The site footer shows badges from launch directories we are listed on (Smol Launch, ufind.best and PublishYourSaaS); your browser loads those images from their servers, which see your IP address as any website would.

We share data only with providers that help us run Appsupa, under contracts that protect it:

• Dodo Payments: payment processing and merchant of record (your name, email and subscription);
• Google: sign-in, if you choose “Continue with Google”, email delivery, and Google Analytics (pages visited, how you found us, browser, device and approximate location, not linked to your account);
• Cloudflare: network delivery and security;
• PostHog: product analytics (pages viewed, clicks, browser, device and approximate location, and for some visits a replay of how the page was used, with anything you type hidden), linked to your account and email once you sign in;
• Backblaze: storage of app images (no personal data).

We may also disclose data if the law requires it. We never sell personal data.

We keep account data while your account is open. Usage records are kept for up to 24 months. Billing records are kept as long as tax law requires. When you delete your account we delete or anonymise your personal data within 30 days, except what we must keep by law.

You can ask to access, correct, export or delete your personal data, or object to how we use it, by writing to [email protected]. We answer within 30 days. If you’re in the EU, UK or another region with data-protection law, you can also complain to your local authority.

Data is sent over HTTPS, passwords are hashed, access to production systems is restricted, and every request to product data is checked against your account. No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects it.

Appsupa is not for children under 16, and we don’t knowingly collect their data.

We’ll update this page when our practices change and tell you by email about significant changes.