Privacy Policy

This Privacy Policy explains how FlitUI ("FlitUI", "we", "us", or "our") collects, uses, shares, and protects information when you use our visual app-building platform, desktop editor, websites, and related services (collectively, the "Service").

1. Information We Collect

Account information

When you create an account, we collect your name, email address, password (stored hashed), and billing details. If you sign in with a third-party provider, we receive basic profile information from that provider.

Project & content data

We store the projects you build, including your visual designs, app structure (AST), assets you upload, and configuration. This content belongs to you; we process it only to operate the Service.

Connected services & credentials

To enable backend, payment, and store integrations, you may connect third-party services such as Supabase, Firebase, RevenueCat, the Apple App Store, and Google Play. Access tokens, API keys, and signing credentials (for example, Android keystores) are encrypted at rest in a secure vault and used solely to perform the actions you request.

AI feature inputs

When you use AI-powered features (such as the AI App Builder), the prompts and relevant project context you submit are sent to our AI processing providers to generate output. We do not use your private prompts or project content to train third-party foundation models.

Usage & device data

We automatically collect technical data such as IP address, browser/device type, operating system, pages viewed, feature usage, and diagnostic logs to maintain security and improve the Service. We use cookies and similar technologies for authentication, preferences, and analytics.

2. How We Use Your Information

To provide, maintain, and improve the Service and its features.
To build, preview, generate source code for, and deploy your applications.
To process payments and manage subscriptions.
To authenticate you and secure your account and connected services.
To provide customer support and respond to your requests.
To send service-related and, where permitted, marketing communications (you may opt out).
To detect, prevent, and address fraud, abuse, and security issues.
To comply with legal obligations.

3. Legal Bases for Processing

Where the GDPR or similar laws apply, we process personal data on the bases of: performance of our contract with you, your consent (which you may withdraw), our legitimate interests in operating and improving the Service, and compliance with legal obligations.

We do not sell your personal information. We share information only as follows:

Service providers / sub-processors who help us run the Service (cloud hosting, analytics, payment processing, AI processing, email delivery), under contractual confidentiality and data-protection obligations.
Integrations you authorize, where data is transmitted to the third-party service you connect (e.g., your own Supabase or Firebase project, the app stores) to perform the actions you request.
Legal & safety reasons, when required by law or to protect rights, property, or safety.
Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Third-Party Services

Apps you build and services you connect (such as Supabase, Firebase, RevenueCat, Apple, and Google) are governed by their own privacy policies. We are not responsible for the data practices of services you choose to connect or of the end-user apps you publish.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account closure, we delete or anonymize personal data within a reasonable period, except where retention is required for legal, accounting, or security purposes.

7. Security

We use industry-standard safeguards including encryption in transit (TLS) and at rest, access controls, and secure credential vaulting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights & Choices

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. You can manage most data from your account settings or by contacting us. We will not discriminate against you for exercising these rights.

9. International Data Transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email, and the "Last updated" date above will reflect the latest revision.

12. Contact Us

For privacy questions or to exercise your rights, contact us at privacy@flitui.com.

This document is provided as a general template for the FlitUI platform and does not constitute legal advice. Please review it with qualified counsel before relying on it for your business.