Privacy Policy

Effective and last updated: September 30, 2026

This Privacy Policy explains how Neu Software LLC ("Build Me An App", "we", "us", or "our") collects, uses, shares, and protects information when you use the Build Me An App mobile application, the website at buildmeanapp.xyz, and related services (together, the "Service"). This policy describes our data practices. We ask for separate permission before sending your content to third-party AI services.

1. Information we collect

Information you provide

• Account and profile. Your email address, display name, and account preferences. For email sign-in, we store a salted password hash rather than your password. If you choose Google or Apple sign-in, we receive the provider’s account identifier, verified email address, and name when supplied, and use them to create or sign in to your account.
• Ideas and change requests. The text you type and the transcripts of what you say when you make or change an app.
• Voice recordings. When you hold the microphone, audio is recorded on your device. With your separate AI-sharing permission, it is sent through our server to OpenAI for transcription. The mobile app deletes its temporary recording after the attempt, including when you decline. Our server deletes its temporary file after processing succeeds or fails. Processor retention is described below.
• Your apps and their contents. The apps Build Me An App generates for you, every version of them, and the data you keep inside them (for example the cards on a board or the notes in a scratchpad). Depending on the app you choose to make, this can include voluntarily entered workout records or personal budget and expense entries. We use these entries to provide and synchronize your chosen app; we do not connect to your bank or read health records from your device.
• Uploaded images. Photos you choose as app icons or splash images, and screenshots you choose to attach to support requests, are uploaded to and stored on our server until you remove them or delete the associated account.
• Imported files. Text or CSV files you choose to bring into Build Me An App become part of the idea used to build an app.
• Subscriptions. For App Store purchases, we receive signed transaction and subscription records, the selected plan, status and expiry, and an app account token that links the purchase to your account. For Google Play purchases, we receive a purchase token and a one-way account identifier. Apple or Google handles payment details; we do not receive your full card or bank details.
• Content reports. When you report generated content, we store your report, the app code and version being reported, and your account identifier so we can investigate. We do not automatically attach the entries saved inside the app.
• Support messages. Messages and screenshots submitted using Send feedback, with your account identifier, app version and device details for troubleshooting, and anything you email to [email protected].

Information collected automatically

• Account and session identifiers. Identifiers link your private apps and saved entries to your account. The mobile app stores a session credential in secure device storage. Installed web apps use an essential sign-in cookie and browser storage to keep your app available offline and synchronize changes.
• Technical logs. Our server keeps standard request logs (time, endpoint, response code, and the IP address of the request) for security and troubleshooting. Logs are used for security and troubleshooting and are rotated as storage limits are reached.

Build Me An App does not use advertising identifiers, does not run third-party analytics or advertising SDKs, and does not collect precise location. The buildmeanapp.xyz website counts page views with Umami, a cookieless analytics tool we host ourselves, which records the page, referrer, browser, device type and country without identifying you.

2. How we use information

• To build, store, run, and update the apps you ask for.
• To transcribe your voice notes into text you can review and edit.
• To keep your apps and saved entries available across launches and signed-in devices, including mini apps you add to your Home Screen.
• To operate, secure, and improve the Service, including preventing abuse.
• To respond to your requests and support messages.
• To comply with legal obligations.

3. AI processing and service providers

Build Me An App uses third-party AI providers to do its work. Only what is needed for each task is sent, when you trigger it and agree to the relevant AI-sharing prompt. Generation and voice transcription have separate permissions, remembered for your account on this device. You can decline and use your existing apps or type instead of recording. Reset future permissions in Settings → Data & privacy → AI sharing. A request already sent may finish.

These providers process data on our behalf under their own terms and privacy commitments. App-generation requests are restricted to OpenRouter endpoints with no data collection and zero data retention. Voice transcription is processed through OpenAI API services. Provider security and abuse-monitoring retention may differ from our server retention; see OpenAI’s API data controls and OpenRouter’s retention controls. Our hosting provider stores the Build Me An App database in the European Union.

Google sign-in data

Google sign-in requests only your basic identity, email address, and profile. We use your Google account identifier, verified email address, and name to sign you in and associate your apps with your account. We do not request access to Gmail, Drive, Contacts, or other Google content. We do not sell Google sign-in data, use it for advertising, or send it to our AI providers. You can remove the connection through your Google Account permissions and delete your Build Me An App account using the controls below.

4. Sharing

We do not sell your personal information. We share information only with the service providers listed above, when required by law or legal process, to protect the rights, property, or safety of Build Me An App, our users, or the public, or in connection with a merger, acquisition, or sale of assets (in which case this policy continues to apply until you are told otherwise).

Your apps are private until you explicitly publish them. Adding an app to your Home Screen does not publish it. A published link shares the app’s code, not your account’s saved entries; people using that link keep their own browser-local data. To show the app’s owner how often a published link is opened, we keep aggregate daily counts of opens and unique visitors. This uses no cookies: a visitor is counted by a one-way hash of their IP address, browser user agent and the app, mixed with a random value that we delete at the end of each day, so visitors cannot be recognised later or across apps. IP addresses are not stored, the owner sees only counts, and daily counts are deleted after 90 days.

5. Retention

• Voice recordings: temporary server files are deleted after transcription succeeds or fails. The mobile app removes temporary device recordings after the attempt or cancellation; the provider processing described above also applies.
• Your profile, apps, app versions, and app contents: kept until you delete them or delete your account.
• Server logs: rotated as storage limits are reached and retained for security and troubleshooting.
• Subscription verification records and content reports: kept with your account until account deletion. Apple and Google retain their own transaction records under their policies.
• Support email: as long as needed to resolve your request, then archived per our normal practice.

6. Your choices and rights

• Export. In the app, open Settings → Data & privacy → Export your data for a JSON copy of your profile, apps and saved app data.
• Delete apps. Open an app’s options menu in your library and choose Delete app.
• Delete your account. Open Settings → Data & privacy → Delete account, or follow the steps at buildmeanapp.xyz/delete-account. Deletion removes your profile, apps, versions, saved entries, reports and subscription-verification records from the live database. It does not cancel an App Store or Google Play subscription; cancel it in the store where you subscribed before deleting your account. Restricted backups may retain earlier copies until overwritten or expired.
• Offline copies. Apps and entries are cached on devices where you use them. Sign out of installed web apps or clear their website data to remove their cached copies; a device reconnecting after account deletion can no longer synchronize or load account data.
• Microphone. Voice is optional. You can deny the microphone permission and type instead.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. To exercise these rights, use the in-app tools or email [email protected]. We will respond within the time required by applicable law.

7. Security

Data travels over encrypted connections (HTTPS). The mobile session credential is stored in your device’s secure keystore, and browser sessions use HttpOnly cookies. Passwords are stored as salted hashes, and account access is checked before reading or changing private app data. Access to our servers is restricted to authorized personnel. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information.

8. Children

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9. International transfers

Neu Software LLC is a United States company. Our servers are hosted in the European Union. Our AI service providers may process information in the United States and other countries, depending on the provider used for your request, so your information may be processed outside your own country. We rely on our providers' contractual safeguards for such transfers.

10. Delaware disclosures

This policy is provided in accordance with the Delaware Online Privacy and Protection Act (6 Del. C. § 1205C). We do not respond to browser "Do Not Track" signals. We do not permit third parties to collect personally identifiable information about your online activities over time and across different websites when you use the Service.

11. Changes

We may update this policy. We will post the new version here and change the dates above. If a change is material, we will also notify you in the app before it takes effect.

12. Contact