Privacy Policy

• Account information, including name, email address, password hash, role, avatar, verification status, and account settings.
• Authentication information, including session records, Google OAuth identifiers, passkey credential identifiers, authenticator metadata, device information, user agent, and IP address metadata.
• Billing and credit information, including purchased credit packages, credit balances, credit transactions, payment intent identifiers, receipts, refund/support history, and payment status. Payment card details are handled by Stripe and are not stored by App9.
• Product usage information, including App9 Builder project activity, generated app/code activity, token usage, model usage, health-product tool usage, upload metadata, logs, and entitlement checks.
• Content you submit to App9 products, such as prompts, project files, uploaded images or documents, app configuration, secrets you choose to store in vault features, and support messages.
• Marketing information, including waitlist entries, email subscription preferences, source URLs, referrers, user agents, unsubscribe status, and consent metadata.
• Technical information, including cookies, local storage, security logs, request metadata, browser/device details, approximate location from IP address, and diagnostics needed to secure and operate the service.

• Provide, secure, maintain, and improve App9 Account, App9 Builder, billing, credits, entitlements, product access, and support.
• Authenticate users, prevent fraud and abuse, enforce usage limits, debug incidents, and protect the integrity of App9 systems.
• Process payments, issue credits, maintain transaction history, manage refunds or disputes, and comply with tax, accounting, and legal obligations.
• Deliver product functionality, including AI-assisted generation, usage reporting, project hosting, file handling, and cross-product account access.
• Send service messages, verification emails, password reset emails, team invitations, support responses, product updates, and marketing messages when permitted.
• Analyze aggregate usage and improve reliability, performance, user experience, and product quality.

App9 uses cookies, local storage, and similar technologies for authentication, session management, security, theme preferences, anti-abuse checks, and product functionality. Some App9 products may also use analytics or diagnostics to understand reliability and usage. You can control cookies through your browser settings, but disabling them may prevent sign-in, billing, or product features from working.

We share information with service providers only as needed to operate App9, process payments, send email, provide infrastructure, deliver AI/product features, host user projects, investigate abuse, or comply with law. Current provider categories are listed on our Subprocessors page.

We may also disclose information if required by law, to protect App9 and our users, in connection with a merger, acquisition, financing, or sale of assets, or with your direction or consent.

When you use AI-powered App9 features, your prompts, files, project context, outputs, and related metadata may be sent to model, hosting, or infrastructure providers to fulfill your request. Do not submit sensitive personal information, regulated health information, payment card data, credentials, or confidential third-party information unless the feature specifically supports that use and you have the right to provide it.

We keep information for as long as needed to provide App9, maintain account and billing records, comply with legal obligations, resolve disputes, enforce agreements, and protect against abuse. Some records, including transaction, security, tax, and audit records, may be retained after account closure where required or reasonably necessary.

• You may update certain account information in App9 Account or App9 Builder.
• You may unsubscribe from marketing emails using the unsubscribe link in the email.
• You may request access, correction, deletion, export, or restriction of your personal information by contacting us.
• Some deletion requests may be limited where we must keep billing, security, tax, or legal records.

We use technical and organizational safeguards designed to protect App9, including secure cookies, rate limits, access controls, encrypted transport, and provider-level security controls. No online service can guarantee absolute security.

App9 is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information to App9, contact us so we can review and delete it as appropriate.

App9 is operated from the United States and uses providers that may process information in the United States and other countries. By using App9, you understand that information may be transferred to and processed in locations outside your country.