Privacy Policy

We collect the following categories of information:

• Account information. Your name, email address, display name, password (stored in hashed form by our authentication provider), and role within your team or organization.
• Billing information. Subscription plan, billing status, and payment-related identifiers. Full payment card details are collected and processed directly by Stripe — we do not store your card numbers.
• App configuration data. App names, bundle identifiers, descriptions, icons, branding, repository URLs, navigation domains, environment variables, and other settings you provide to configure your apps.
• Store credentials. Apple App Store Connect API keys, signing certificates and private keys, provisioning profiles, Google Play service account credentials, and push notification keys, which we store in encrypted form to perform builds, signing, distribution, and notifications you direct.
• Device & push data. Device tokens, device identifiers, platform, app version, and badge counts used to register devices and deliver push notifications.
• Usage & analytics data. Build history, logs, app store sales and download metrics retrieved on your behalf, and product analytics about how you use the Service.
• Reseller, client & affiliate data. Information you provide about your agency, clients, custom domains, referral codes, and payout (Stripe Connect) accounts.
• Technical data. IP address, browser type, device information, and similar data collected automatically when you access the Service.

We use the information we collect to:

• provide, operate, maintain, and improve the Service;
• build, sign, and distribute your native apps and deliver push notifications you configure;
• process subscriptions, payments, reseller billing, and affiliate payouts;
• authenticate users, secure accounts, and prevent fraud and abuse;
• provide customer support and respond to your requests;
• send service-related communications and, where permitted, product updates; and
• comply with legal obligations and enforce our Terms.

We do not sell your personal information. We share information only as necessary to operate the Service, including with:

• Service providers & sub-processors that host, build, and support the platform, including our cloud and infrastructure providers and our application platform.
• Payment processor (Stripe). To process subscription payments, reseller billing, and affiliate payouts.
• App store & developer platforms (Apple, Google). To register apps, upload builds, manage store listings, and send notifications using credentials you provide.
• Source code providers (e.g. GitHub). To access the repositories you connect.
• Resellers. If you are a client of a reseller, the reseller that onboarded you may access information related to your account as needed to provide their service.
• Legal & safety. When required by law, or to protect the rights, property, or safety of AppNative.io, our users, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

We take the security of your data seriously. Sensitive Store Credentials and secrets are encrypted at rest, and access is restricted to the systems and personnel that require it to operate the Service. We use industry-standard safeguards to protect information in transit and at rest. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it within a reasonable period, except where retention is required by law.

Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can update much of your information directly in your account settings. To exercise other rights, contact us using the details below. We will respond consistent with applicable law (including the GDPR and CCPA/CPRA where they apply).

When you build and distribute apps using the Service, you may collect personal information from your own end users (for example, through push notification registration or in-app purchases). With respect to that data, you are the controller and are responsible for providing your own privacy notices, obtaining required consents, and complying with applicable law. We process such data on your behalf as a processor solely to provide the Service.

We use cookies and similar technologies for authentication, to remember preferences, and to understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect functionality.

We may process and store information in the United States and other countries where we or our service providers operate. Where required, we implement appropriate safeguards for cross-border transfers of personal information.

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last updated" date above indicates when this Policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at sales@virtualhorizons.pro.