Privacy Policy

Information you give us. When you submit an app, we receive the store link, the app name, any note you add, whether you said you work on the app, and your email address if you choose to provide it. If you email us, we receive your message and email address.

Information collected automatically. Like any website, our hosting provider processes technical data needed to deliver pages and protect the Service, such as your IP address, browser type, the pages requested, and the time of the request. We use this only for security, abuse prevention and keeping the Service running, not to build profiles of visitors.

Information stored on your device. If you save a flow, the list of saved flows is kept in your browser's local storage. It never leaves your device and you can clear it at any time through your browser settings.

The Service does not set advertising or analytics cookies, does not use third-party tracking pixels, and does not track you across other websites. Our hosting and security provider may set strictly necessary cookies to protect the Service from abuse. Because we don't track you, we don't respond differently to Do Not Track or Global Privacy Control signals, but there is nothing to opt out of.

We use the information described above to:

• review and record the apps you submit, and email you when a recording you asked about is live;
• respond to your questions, removal requests and other messages;
• operate, secure and improve the Service, and prevent spam and abuse;
• comply with legal obligations and enforce our Terms of Service.

We don't send marketing email, and we don't use your information for automated decisions that have legal or similarly significant effects on you.

If you are in the European Economic Area or the United Kingdom, we process your information on these bases: your consent, when you give us your email to be notified (you can withdraw it at any time); our legitimate interests in running, securing and improving the Service and responding to you; and compliance with legal obligations.

We don't sell or rent personal information, and we don't share it for cross-context behavioural advertising. We share it only with:

• Service providers that host and run the Service for us under contract, currently Cloudflare (hosting, content delivery and security) and Supabase (database). They may process data only on our instructions.
• Authorities or others when required by law, or when needed to protect the rights, safety or property of us, our users or others.
• A successor in a merger, acquisition or sale of assets, subject to this policy.

When you look up an app on the submit page, our server queries Apple's or Google's public store listing for that app; your IP address is not sent to them. App icons in the library may load directly from Apple's or Google's image servers, which then receive the standard request data your browser sends.

We keep app submissions and any email you provide for as long as needed to handle the submission and notify you, and in any case no longer than 24 months, unless you ask us to delete them sooner. Hosting logs are kept by our provider for a short period for security purposes. Emails you send us are kept as long as needed to deal with your request.

Depending on where you live, including the EEA, the UK and US states such as California, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. We do not sell or share personal information as those terms are defined under California law.

To make a request, email hello@onboarding.company. We will respond within the time required by law, and we won't treat you differently for exercising your rights. You also have the right to complain to your local data protection authority.

Our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for these transfers.

We use reasonable technical and organisational measures to protect personal information, including encryption in transit and access controls on our database. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

The Service is not directed to children under 16, and we don't knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, give reasonable notice on the Service.

Questions or requests about privacy: hello@onboarding.company.