Privacy Policy

Last updated: October 27, 2026

AppFounded ("we", "us") is operated by Apps Factory LLC. This policy explains what data we collect when you use appfounded.com and the AppFounded apps (the "Service"), how we use it, and the choices you have.

1. Data we collect

  • Account data: your email address, name and profile picture, and the workspaces and team members you create.
  • Data from accounts you connect: when you connect App Store Connect, Google Play, RevenueCat, Superwall or similar services, we store the access keys you provide (encrypted) and read data such as app details, downloads, sales and subscription metrics, ratings and reviews.
  • Social accounts you connect: when you connect TikTok, Instagram, Facebook or YouTube, we receive an access token and read your profile, posts and their statistics. If you ask us to, we publish content you choose to those accounts.
  • Content you create: prompts, scripts, captions, videos and other material you create or upload.
  • Usage data: pages visited, actions taken, device and browser type, and IP address, used for security and to improve the Service.
  • Billing data: handled by our payment processor (Stripe). We do not store full card numbers.

2. How we use data

  • To provide the Service: dashboards, alerts, AI answers and plans, publishing and reports for your workspace.
  • To secure the Service, prevent abuse, and keep an activity log of actions taken by you, your team and the AI.
  • To bill you and to contact you about your account.
  • To improve the Service using aggregated, de-identified data.

We do not sell your data, use it for advertising, or use data from your connected accounts to train AI models. Benchmarks shown to other users only use anonymized, aggregated data from workspaces that opted in.

3. Google and YouTube data

AppFounded's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is accessed through YouTube API Services, and by connecting YouTube you also agree to the YouTube Terms of Service and Google Privacy Policy. You can revoke access at any time from Google security settings.

3b. TikTok, Instagram and Facebook data

When you connect a social account, we only request what we need to publish the videos you choose and show their results:

  • TikTok (Login Kit, Content Posting API): your profile (display name, username, avatar, follower count) and permission to upload videos you publish from AppFounded. We read your creator settings to show the posting options TikTok allows.
  • Instagram (Instagram API with Instagram Login): your professional account profile and permission to publish Reels you choose, and their insights.
  • Facebook (Facebook Login for Pages): the Pages you manage and permission to publish Reels to the Page you connect.
  • YouTube (YouTube Data API): your channel profile and permission to upload videos you choose.

Nothing is ever posted without you pressing Publish for that platform. Access tokens are encrypted, never shown in the browser, and deleted (and revoked where the platform allows) when you disconnect the account.

4. Service providers

We share data only with providers that help us run the Service, under contracts that protect it:

  • Supabase (database and sign-in), Vercel (hosting)
  • Anthropic (AI processing; data is not used to train their models)
  • FoxData (public app store market data)
  • Stripe (payments), Resend (email)

We may also disclose data if required by law, or as part of a merger or acquisition with notice to you.

5. Security

Access keys for connected accounts are encrypted with AES-256 before storage and are only decrypted on our servers when needed. We ask for read-only access wherever the provider allows it, restrict data access per workspace, and log every action. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

6. Retention and deletion

We keep your data while your account is active. You can disconnect any account at any time, which deletes its stored keys immediately. You can delete your workspace or account from the settings page, or by emailing hello@appfounded.com; we delete your data within 30 days, except where we must keep records by law (for example, invoices).

Data deletion for Facebook, Instagram and TikTok: to delete data we received from these platforms, disconnect the account in AppFounded → Publisher → Your accounts, or email hello@appfounded.com with the subject "Data deletion". We confirm by email once deletion is complete. Full instructions: appfounded.com/data-deletion.

7. Your rights

Depending on where you live (including the EU, UK and California), you may have the right to access, correct, export or delete your data, and to object to or restrict certain processing. Email us to exercise these rights. EU and UK users may also complain to their local data protection authority.

8. International transfers

We are based in the United States and our providers may process data in the US and the EU. Where required, we use Standard Contractual Clauses for transfers.

9. Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

10. Changes and contact

We will post changes here and notify you of significant ones. Questions: hello@appfounded.com.