appdesigns

Privacy Policy

Last Updated: October 15, 2026

Effective Date: October 5, 2026

1. Introduction

Haider Nawaz, operating as an individual proprietor ("we," "us," or "our"), operates the appdesigns website located at appdesigns.click (the "Service").

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

Contact Information:

2. Information We Collect

2.1 Information You Provide

  • Account Information: Your email address, and your password if you sign up with one. The password is stored only as a hash by our authentication provider (Supabase), so we cannot read it.
  • Profile Information: Your name and profile picture, if you sign in with Google
  • User Content: The projects and templates you save, with the screenshots, artwork and text in them, and the images you upload to your asset library (a free account keeps up to 5, a Pro account any number). Without an account, your project is kept in your browser's own storage and is not uploaded to us.
  • Screenshots Sent by a Coding Agent: If you connect a coding agent (such as Claude Code, Codex or Cursor) to our MCP server, it uploads the screenshots you ask it to use, with the screen names and headlines it writes, to a private storage area only the Service can read. When you save the set to your account, it is copied into your private project and the uploaded files are deleted; if you never save it, they are deleted after 72 hours, by the next daily cleanup at the latest. We keep a record that the set was created (its name, its captions and a keyed hash of the IP address it came from, to enforce usage limits) for up to 62 days. We also record anonymous usage events for this feature in our analytics (for example that an agent connected, that a set was created, opened, saved or exported, and which agent it was), linked by a separate one-way hash of your network address rather than the address itself.
  • Screenshots Attached in ChatGPT: If you use the appdesigns plugin in ChatGPT, ChatGPT sends us a temporary link to each screenshot you attach for the set, with the project name, screen names and headlines it writes. We download only those screenshots, store them in the same private storage area and delete them on the same schedule as screenshots sent by a coding agent. ChatGPT also sends an anonymized user ID with each request, which OpenAI provides for rate limiting; in place of your IP address we keep a keyed hash of it to enforce usage limits, and link the anonymous usage events by a separate one-way hash of it. We do not receive your name, email address or conversation from ChatGPT, only what the plugin's requests contain.
  • Content Sent to AI Features (Pro): When you use caption ideas, the screenshot you choose is sent to OpenAI, with the text that goes with it (the captions already on the screen, your app's name and any instructions you type), to write headlines. When you translate a set, its caption text and your app's name are sent to OpenAI; the screenshots are not. The results are saved with your projects, and we store a usage record for each request (what kind of request it was, the model used, the number of tokens and its cost) to enforce the daily allowance and track what the features cost to run. AI Mode, which wrote whole sets from your screenshots until October 15, 2026, kept each generation job and its results on our servers; those records stay with your account.
  • Uploaded Font Files (Pro): Font files you upload are stored privately in Supabase Storage, readable only by your account and the Service, until you delete them or delete your account.
  • Payment Information: Polar, our merchant of record, collects your payment details, billing address and tax information and processes the payment. We never see or store your card details. We give Polar your account email and account ID so the subscription is linked to your account, and we store what Polar sends back: the subscription's IDs, plan, status and billing dates. Subscriptions bought before October 5, 2026 were sold by Paddle, and we keep the same details Paddle sent for those.
  • Feedback: The editor's Feedback button opens our feedback board, a separate web app shown inside the editor. What you post there is stored by that app.
  • Email to Us: If you email us, we keep your message and address so we can reply.

2.2 Automatically Collected Information

  • Usage Data: Templates viewed, favorites, export history
  • Analytics Data: We use Mixpanel and Google Analytics to understand how the Service is used and improve it. They collect usage events and page views (such as templates viewed, exports, and button clicks), device and browser information, and approximate location derived from your IP address. If you are signed in, your account ID, email address and name are attached to your Mixpanel events. We do not share your password or payment details with either service.
  • Performance Data: Vercel Speed Insights measures how quickly pages load, using anonymous performance data.
  • Technical Data: Browser type, device type, IP address
  • Visit, View and Like Counts: To count visitors, views of a listing or blog post, and likes, without storing who you are, we keep a keyed one-way hash of your IP address mixed with the date (for views and opens of a listing, a hash of your account ID instead when you are signed in). These hashes are deleted after one to two days. A like you give while signed out is linked to a random ID that your browser keeps; we store only a hash of it.
  • Cookies and Browser Storage: See section 7

2.3 Information from Third Parties

  • Google OAuth: Name, email, profile picture (if you sign in with Google)
  • Polar: The status, plan and billing dates of your Pro subscription (Paddle, for a subscription bought before October 5, 2026)

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process your Pro subscription
  • Send account emails (email verification, sign-in links and password resets) and emails about sets you submit to the gallery
  • Send occasional product emails about new features and offers (you can opt out anytime)
  • Enforce usage limits, such as the daily AI allowance and the free upload limit
  • Improve and personalize the Service
  • Detect and prevent fraud, abuse and security issues
  • Comply with legal obligations

We do not sell your personal information to third parties.

4. Data Storage and Security

  • Storage: Your data is stored securely on Supabase (AWS infrastructure)
  • Encryption: All data is encrypted in transit (SSL/TLS) and at rest
  • Access Controls: Strict access controls limit who can access your data
  • Retention: We retain your account data, projects, uploaded images and fonts while your account is active, until you delete them or ask us to delete your account. You can request deletion at any time.
  • Upload Limit: A free account keeps up to 5 images in its asset library. A free account that held more than 5 before September 28, 2026 keeps them until October 5, 2026; after that, its oldest uploads beyond 5 are deleted. Images already placed in a saved design are not affected.
  • Storage Limit: A free account’s saved projects hold up to 20 MB of images, Pro’s 1 GB. A free account that held more than 20 MB before October 26, 2026 keeps everything until November 2, 2026; after that, its private projects made before then are deleted, least recently edited first, until what is left fits.
  • Short-Lived Data: Screenshots uploaded by a coding agent, and the hashes used to count visits, views and likes, are deleted on the schedules described in section 2

5. Third-Party Services

We use the following third-party services, each of which receives only what it needs to do its job:

  • Supabase: Database, authentication, file storage, and account emails (verification, sign-in links and password resets)
    Supabase Privacy Policy
  • Vercel: Hosts the website and runs its server functions and scheduled cleanup jobs, so it processes every request, including your IP address. Vercel Speed Insights measures page performance.
    Vercel Privacy Notice
  • Polar: Our merchant of record (Polar Software, Inc.). Processes payments for Pro through its payment processor, handles sales tax and VAT, sends receipts and runs the billing portal where you manage your subscription
    Polar Privacy Policy
  • Paddle: Our merchant of record until October 5, 2026. Holds the payment records of the subscriptions it sold before then
    Paddle Privacy Policy
  • OpenAI:Generates the output of the Pro AI features (caption ideas and translations). Only the screenshots and text you choose to send through those features are shared, through OpenAI's API, and OpenAI processes them to return the result. Nothing is sent to OpenAI unless you use one of those features.
    OpenAI Privacy Policy
  • Google: Optional sign-in with Google, and Google Analytics for page views and usage
    Google Privacy Policy · How Google uses information from sites that use its services
  • Mixpanel: Product analytics to help us improve appdesigns
    Mixpanel Privacy Policy
  • Cloudflare Turnstile: Checks that sign-up, sign-in and verification email requests come from a person rather than a bot, using your IP address and signals from your browser
    Cloudflare Privacy Policy
  • Resend:Sends emails about sets you submit to the gallery (for example that one was approved or needs changes). It receives your email address, the set's name and the review note.
    Resend Privacy Policy
  • Brevo: Sends our occasional product emails to account holders. It receives your email address.
    Brevo Privacy Policy

These services have their own privacy policies governing their use of your information.

6. Your Rights

You have the right to:

6.1 Access and Portability

  • Request a copy of your personal data
  • Export your templates and projects

6.2 Correction

  • Change your password at any time
  • Ask us to correct inaccurate data

6.3 Deletion

  • Delete your projects, uploaded images and fonts at any time in the editor
  • Ask us to delete your account and all associated data
  • We will permanently delete your data within 30 days

6.4 Opt-Out

  • Unsubscribe from product emails at any time using the unsubscribe link in the email, or by emailing us
  • Block analytics with your browser's privacy settings or a content blocker; for Google Analytics you can also use the Google Analytics opt-out add-on

To exercise these rights, email us at hi@appdesigns.click

GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR:

  • Right to object to processing
  • Right to restrict processing
  • Right to lodge a complaint with a supervisory authority

CCPA Rights (California Users)

If you are a California resident, you have rights under CCPA:

  • Right to know what data we collect
  • Right to opt-out of data sale (we do not sell data)
  • Right to non-discrimination for exercising your rights

7. Cookies and Tracking

We use cookies and similar browser storage for:

  • Authentication: Keep you logged in
  • Sets From a Coding Agent: A short-lived cookie holds the link to a set your agent made until you save it (at most 72 hours)
  • Your Work and Preferences: Your browser's own storage keeps your project when you are not signed in, and remembers settings such as which hints and banners you have already seen
  • Analytics: Google Analytics sets cookies to count visits, and Mixpanel keeps an analytics ID in your browser's storage
  • Security: Detect suspicious activity and automated sign-ups

You can disable cookies in your browser, but this may limit functionality.

We use first-party cookies, Google Analytics and Mixpanel's tracking technologies for analytics. We do not use third-party advertising cookies.

8. Data Sharing

We do not sell or rent your personal information.

We may share your information only with:

  • Service Providers: The services listed in section 5 (Supabase, Vercel, Polar, Paddle, OpenAI, Google, Mixpanel, Cloudflare, Resend and Brevo), as needed to provide the Service
  • Legal Requirements: If required by law or to protect our rights

Your public templates (approved templates in the gallery) are visible to all users by design.

9. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

10. International Users

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending an email.

Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

This Privacy Policy is effective as of October 5, 2026 and governs your use of appdesigns.