WebToAppKit Privacy Policy

Scope and contact

This policy covers WebToAppKit at webtoappkit.com, branded WebToApp. Privacy requests: support@webtoappkit.com.

Information we collect

• Account email, display name, avatar, authentication records and profile details you provide.
• Submitted URLs, HTML/ZIP uploads, icons, descriptions, build settings, generated packages, signing material, task status and ownership records.
• Order references, plans, amounts, currencies, payment states, subscription periods and refunds. Waffo Pancake handles checkout and card details; we do not store full card numbers.
• Creator profiles, public apps, comments and ratings you choose to publish.
• Browser/device information, IP addresses, request logs, download/visit counts, security and error events, and support correspondence.

Essential session and guest identity cookies maintain sign in, protect accounts and identify work ownership. Browser storage may remember interface preferences. Blocking essential cookies can prevent features from working.

Use, storage and security

We use data to authenticate users, build and deliver apps, host uploaded sites, manage purchases, provide support, operate community features and investigate abuse. Submitted websites may be fetched for analysis and builds. Do not upload secrets or information you are not authorized to share.

We use Cloudflare Workers, databases, containers and private object storage, with HTTPS, access controls and encryption for protected secrets and private build state. Generated packages and hosted content are delivered through application links. Public profiles and apps are visible to others; unlisted links are not an authentication barrier. No storage or transmission method is completely secure.

Sharing and international processing

We do not sell personal information. Necessary data is shared with infrastructure providers such as Cloudflare, Waffo Pancake for payments, sign in providers you choose and email services used for support. These providers may process data outside your country. Websites opened by generated apps have their own privacy practices and receive network requests from those apps.

We may disclose relevant records when legally required, for payment disputes, fraud investigations or protection of users and the service. Publishing or sharing an app makes its selected content available to its audience.

Retention and deletion

Free cloud packages are available for seven days. Paid cloud builds and package backup last 365 days from the corresponding purchase. Uploaded sites have a separate seven day hosting trial and continue for an active paid hosting period. Expiry ends access, not necessarily immediate erasure of all backup or operational records.

Recipes, ownership and signing identity may remain as needed for rebuilds and continuity. Payment, entitlement, successful use and security records may remain for accounting, disputes and abuse prevention. Delete apps in My Apps or contact support for account/data deletion. Deleting an app does not automatically cancel hosting; cancel the subscription separately. We explain necessary retained records when handling requests.

Your rights and choices

Update your profile, control app visibility, export available app data, delete apps and manage subscriptions in your account. Contact support for access, correction, export, restriction or deletion of personal data, or privacy concerns. We may verify ownership. Applicable rights depend on location and are not limited by this policy.

The service is not directed at children under 13. Contact us about a child's data. We date policy updates and provide additional notice for material changes where appropriate.