Privacy policy

What we collect

We collect only what the site needs to work. In each case the law we rely on is in brackets.

• Account: email address, display name, handle, and an avatar and bio if you add them. (Performing our contract with you.)
• About you, if you choose to answer validations: birth month and year, gender (optional), UK region, the devices you use and your interests. We use the birth month and year only to derive an age band and to confirm you are 18 or over. (Your consent, which you can withdraw by removing the details on your Profile.)
• What you post: apps, updates, pictures, comments, upvotes, follows and reports. (Performing our contract with you.)
• Validations: the questions founders ask, the answers participants give, and the reservation and completion times. (Performing our contract with you.)
• Money and rewards: for founders, the amount paid and Stripe’s identifiers for the payment; for participants, the reward ledger, redemption requests, the gift card provider’s order reference and the claim link. We never hold card details or voucher codes. (Performing our contract; keeping accounting records the law requires.)
• Usage: page views and link clicks on app pages, recorded against a visitor value that changes every day and cannot be turned back into you. No tracking cookies. (Our legitimate interest in showing founders how their app page performs.)
• Emails we send you: which notifications you have turned on, and whether you have agreed to AppDrop news. (Your consent for news; our contract for everything else.)

Who sees what

Your display name, handle, avatar, bio, apps and comments are public. Your region appears on your public profile only if you turn that on.

Founders never see who answered their validation or what any one person chose. Results are counts and shares per option, nothing else. Founders also never see your age band, gender, region, devices or interests. In this version those details are used only to decide which validations you can see.

Your birth month and year, your email address and your reward ledger are visible only to you and to AppDrop staff who need them to run the site.

Who we share data with

We use a small number of providers to run AppDrop. Each one processes data only on our instructions.

• Supabase hosts the database, sign-in and file storage.
• Stripe takes founder payments. Stripe receives your email and the amount, and handles your card under its own privacy policy.
• Our gift card provider issues participant rewards. It receives your name and email so it can deliver the card, and nothing else about you.
• Our email provider sends the notifications you have turned on and the news you have agreed to.
• Vercel serves the website.

Some of these providers store data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Agreement or an adequacy decision. We never sell data, and we never share it with advertisers.

We may disclose data where the law requires it, or to protect the safety of people using AppDrop.

How long we keep it

• Account and profile details: for as long as you have an account, then deleted within 30 days of closure.
• Apps, updates and comments: until you delete them or close your account.
• Answers to validations: the counts and shares are kept as results. The link between an answer and your account is kept while you have an account, so that one person cannot answer twice, and is removed when the account closes.
• Payment and reward records: six years after the transaction, as accounting law requires, in a form that no longer links to a live account once it closes.
• Usage records: the daily visitor value cannot identify you and is kept as aggregate counts.

Cookies

AppDrop sets cookies only to keep you signed in. They are strictly necessary, so we do not ask for consent and there is no cookie banner. We do not use advertising or tracking cookies, and we do not load third-party analytics scripts that set their own.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to how we use it, ask us to restrict it, and take it elsewhere in a usable format. Most of your data you can see and change yourself on your Profile. For anything else, write to hello@appdrop.co.uk from the address on your account and we reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first.

Changes

If we change this policy in a way that matters, we tell you by email or notification before it takes effect. The date at the top shows when it last changed.