Privacy Policy

We collect the following categories of information:

• Account information: your email address, name, and account role. Required to create and manage your account on the The App Chicks platform.
• Client project data: if you engage us to build or maintain an application (the “Hatchery” program), we store project specifications, requirements, agent session logs, and associated metadata. We never access your production data unless explicitly granted.
• Payment information: billing and payment records, processed through third-party payment processors. We do not store full credit card numbers.
• Communication history: emails, support tickets, and chat conversations you have with us.
• Device & usage data: browser type, operating system, pages viewed, and actions taken. Used to improve the Service.

• Provide, operate, and improve the Service.
• Authenticate you and keep your session secure.
• Deliver the apps and services you engaged us to build.
• Send transactional emails (welcome, password reset, project updates).
• Respond to support requests.
• Detect and prevent abuse, fraud, or policy violations.
• Comply with legal obligations.

We do not sell your personal information. We share it only with:

• Service providers that run our infrastructure (Supabase for database and auth, Vercel and Cloudflare for hosting, Resend for email delivery, Anthropic for AI capabilities, Stripe for payments). Each is contractually required to safeguard your data.
• Sub-processors as required to deliver your specific project — always disclosed in writing at project kickoff.
• Legal authorities when required by law, subpoena, or to protect our rights.

We use industry-standard security practices including TLS in transit, encryption at rest for sensitive fields, row-level security policies at the database layer, and least-privilege access for our team. No system is perfectly secure; if we become aware of a breach that affects you, we will notify you promptly.

We retain your account and project data as long as your account is active, plus the retention period required by your engagement agreement. If you delete your account, we delete your personal information within 30 days, except where we are required to retain it for legal, accounting, or fraud-prevention purposes.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Export your data in a portable format.
• Withdraw consent for optional processing.

To exercise any of these rights, email us at the address below.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The “Last updated” date at the top indicates when the policy was last changed.