PRIVACY POLICY

• We collect little, and only to run the Service. Your Google sign-in name and email, what you ask us to build, what your apps store, and payment records kept by our payment provider. No advertising trackers. No selling of your data — ever.
• If you use voice, your speech is processed to understand you. Audio goes to our speech supplier to turn it into text and to speak back. We don't use your voice to train anything, and we don't keep recordings beyond what the conversation needs.
• Data your app stores belongs to your app. Unless your app says otherwise, its stored records are shared among the people who use that app — makers must not present shared storage as private.
• You can delete. Deleting an app removes its site, its stored data, and its listing. Closing your account removes your personal data, except what the law makes us keep.
• We are a UK service and follow UK GDPR. You have the rights it grants — access, correction, erasure, and complaint to the ICO.

1. Who We Are

The Factory is operated by Legal name — pending incorporation ("we", "us"), the data controller for personal data described in this Policy. Contact: Email — pending incorporation.

2. What We Collect, and Why

• Account data: your name and email address from Google sign-in, and your referral code. Purpose: operating your account, credits, and communications about the Service. Legal basis: performance of our contract with you.
• Build data: the descriptions you type or speak, the apps generated from them, and your build history. Purpose: building, hosting, and letting you change your apps. Legal basis: contract.
• Voice data: if you use voice features, your microphone audio is streamed to our speech-processing supplier to transcribe your words and to generate the assistant's spoken replies. Transcripts of the conversation are processed by our AI supplier to conduct the conversation. We do not use your voice to train models, and we do not retain audio recordings beyond the operation of the conversation. Legal basis: contract (you choose to press the voice button; typing is always available instead).
• App-stored data: records that Customer Apps save through our built-in storage (for example notes, bookings, entries created by an app's visitors). We host this on behalf of the app's maker; the maker is responsible for what their app collects, as our Terms set out. Unless an app provides its own sign-in, its stored data is shared between that app's users.
• Payment data: processed by our payment provider (Stripe); we never see or store card numbers. We keep records of what you bought and your credit balance. Makers who take payouts give their bank details to Stripe directly — never to us. Legal basis: contract and legal obligation (accounting).
• Enquiries: messages you send through our contact features. Legal basis: legitimate interest in answering you.

3. What We Do NOT Do

• We do not sell or rent personal data. Ever.
• We do not run third-party advertising or advertising trackers.
• We do not use your content, your apps' data, or your voice to train AI models.
• We do not read your apps' stored data except as needed to operate, secure, or lawfully moderate the Service.

4. Cookies and Local Storage

We use no advertising cookies. We use strictly necessary browser storage: your sign-in session, your interface preference (simple or full), and, for marketplace buyers, the access code that unlocks an app you bought. These are essential to the Service working and are not used to track you across other sites.

5. Our Suppliers

We use carefully selected suppliers to run the Service: cloud hosting and databases, code hosting, deployment and web hosting, AI generation, speech processing, and payment processing. They process data only to provide their service to us. Some are outside the UK; where so, transfers rely on recognised safeguards (such as adequacy decisions or standard contractual clauses). The identity of our suppliers is confidential commercial information, disclosed where the law requires.

6. How Long We Keep Things

• Account and build data: while your account is open, then deleted within a reasonable period after closure.
• App-stored data: until deleted through the app, by the app's owner deleting the app, or by us acting under the Terms.
• Payment and transaction records: as long as tax and accounting law requires.
• Voice audio: not retained beyond the conversation's operation; transcripts persist only in your conversation history where the interface shows them.

7. Deletion — Your Hands on the Controls

Deleting an app from your account permanently removes its website, its stored data, its domain claims, and its marketplace listing. Closing your account removes your personal data except records the law obliges us to keep. You may also request deletion by contacting us.

8. Your Rights (UK GDPR)

You have the right to access your personal data, correct it, erase it, restrict or object to its processing, and receive a portable copy. Write to Email — pending incorporation. If you are unhappy with our answer, you may complain to the Information Commissioner's Office (ico.org.uk).

9. Children

Accounts require the holder to be at least 18. A parent or guardian may hold the account and supervise, per the Terms; the account data is theirs.

10. Security

Data is protected with access controls, row-level security in our databases, encrypted connections, and secrets kept outside code. No system is perfect; if a breach ever puts your rights at risk, we will notify you and the ICO as the law requires.

11. Changes

Material changes to this Policy will be announced through the Service at least 14 days before taking effect, alongside the change record we keep for our published figures.