Privacy Policy

appify ph is operated by Aztrabay Digital Marketing OPC ("appify ph", "we", "us" or "our"), a company in the Philippines. We act as the personal information controller for the personal information described in this policy.

This Privacy Policy applies to the entire appify ph platform, including:

• our official website www.appify.ph and its landing pages;
• the web application and user dashboard;
• the appify ph Android and iOS applications, which open the same web application inside a mobile app;
• account registration, sign-in and profile management;
• free and paid plans, credits, billing and payments;
• AI-powered features, including the AI app builder and the AI support assistant;
• applications and projects you create, and the files you upload;
• workspace, team and sharing features, the community and the affiliate program;
• third-party integrations, customer support and our communications with you;
• any new feature we add to the platform, unless it comes with its own notice.

We handle personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

Apps you build. When you use appify ph to build and publish your own application, you decide what information that application collects from its users. For that information you are responsible for providing your own privacy notice and for complying with applicable law; we store and process it on your behalf to run your application.

We collect personal information in three ways:

• Information you give us — for example when you sign up, edit your profile, build an app, pay, or contact support (Section 3).
• Information collected automatically when you use the platform (Section 4).
• Information from services you connect, such as a Facebook profile photo or a GitHub repository (Section 9), and from our payment processor (Section 10).

We do not knowingly collect sensitive personal information (such as health, religious or government ID data) unless you choose to include it in your content or support messages.

• Account details: your name, email address and password (stored only in hashed form).
• Profile details: profile photo and mobile number, if you add them in Settings → Profile.
• Payout details (affiliates only): bank name, account name and account number you enter to withdraw affiliate earnings.
• Projects and content: the prompts and instructions you write, the apps, pages, code and data you create, and the files and images you upload.
• Team and sharing: email addresses of people you invite to your workspace or to an app.
• Community content: posts, comments and photos you share in the members-only community.
• Support communications: messages, attachments and contact details you send through the support chat, the support form or email, and details of calls you book with our team.
• Feedback: answers you give in in-app questions, for example when cancelling a subscription.
• Onboarding survey: if you answer it after signing up — your role, business type, monthly revenue range, team size, current tools, biggest problem and how you heard about us — plus how long it took.
• Game scores: if you play the game while your app is building — your score, level, lines and the player name you choose. The top players' names and scores are shown to other members on the game's leaderboard.
• Voice recordings: short clips you record with the microphone button, also on the home page before you sign up. They are sent for transcription and only the resulting text is kept (Section 8).

• Sign-in and device information: IP address and browser/device type (user agent) recorded with your sign-in sessions and sign-in events.
• Approximate location: your IP address can indicate your approximate location (such as your country or city). We do not collect your precise location or GPS data.
• Usage activity: pages you open in the app and the time you are active, used to show usage, support you and improve the product.
• Product events: for example when an app is created, built or published, and payment events.
• Credit usage: what used your credits (AI builds, AI features and app services).
• Referral information: if you arrive through an affiliate link, the referral code, so the referring affiliate can be credited.
• Security data: IP-based counters used to limit abuse of sign-in, sign-up, the support form and voice input.
• Diagnostic logs: server error and activity logs, which can include your account ID and IP address, used to keep the platform running and fix problems. They are kept for a limited period by our hosting provider.

Device permissions in the mobile apps. The appify ph app asks for your permission before using the microphone, camera or photo library. The microphone is used only while you record with the voice input button; the camera and photo library only when you choose to take or attach a photo or file. You can turn these permissions off at any time in your device settings. We do not use advertising identifiers and do not track you across other companies' apps or websites.

Visitors of apps you publish. To show you visitor statistics for your published apps, the platform counts page views using the path, referrer, country, device, browser and operating system. Visitors are counted using a hash of their IP address and browser that changes daily; no tracking script or cookie is added to your app for this.

We use personal information to:

• create and secure your account and keep you signed in;
• provide the platform: build, store, host, back up and publish your apps;
• run AI features at your request;
• process subscriptions and credit purchases, issue invoices and prevent payment fraud;
• send service emails, such as sign-in and verification codes, invitations, low-credit notices, payment receipts and failed-payment notices, and call confirmations;
• answer support requests and fix problems with your apps when you ask us to;
• run the affiliate program, including tracking referrals and paying commissions;
• understand how the platform is used so we can improve it;
• protect the platform and its users against abuse, fraud and security threats;
• comply with legal, tax and accounting obligations and enforce our Terms of Service.

Our lawful bases under the Data Privacy Act are: performing our contract with you, your consent (for example when you connect a third-party account), compliance with legal obligations, and our legitimate interests in operating and securing the platform. We do not sell your personal information. We do not currently send marketing newsletters.

• You create an account with your name, email address and a password. Passwords are stored only as a one-way hash.
• Password resets and email-address changes use an 8-digit code sent to your email; codes expire after 10 minutes and are stored in hashed form.
• Sign-in sessions use a secure cookie and expire after 7 days of inactivity.
• Sign-up and sign-in are protected by rate limits, temporary lockouts and an automated bot check.
• When you open one of your apps from appify ph, we sign you into it using a single-use code that expires after 60 seconds.
• Our staff can view an account as the client sees it, only to provide support and administer the platform.

Your projects include the prompts you write, the source code and pages generated for your apps, your apps' databases and the files you upload. We store and process this content to build, run, host, back up and display your apps, and to provide support when you ask for it.

• Backups: the live data of every published app is backed up automatically once a day. How long backups are kept depends on your plan; you can view and restore them in Settings → Data Backup.
• Sharing: you control who can open your apps (public, invited people or workspace members) through Share and Publish. Published apps are reachable by anyone with the link unless you require sign-in.
• Community: posts and photos you share in the community are visible to other members, and an app you attach to a post can be previewed and copied by them.
• Uploaded files: files you upload are stored with our cloud storage provider. Some files, such as images used in your apps or profile photos, are reachable by anyone who has their link; support-form attachments are stored privately and opened only by our support staff.

Ownership of and rights in your content are governed by our Terms of Service (Section 6, "Intellectual Property"), which states that you retain ownership of content you create and grant us a licence to use it solely to provide the service.

appify ph uses artificial intelligence for the following features:

• the AI app builder, which generates and edits your apps' code, pages and data from your prompts and attachments;
• the visual editor and builder chat;
• the AI support assistant, which answers support chats first and can, when you ask, start a fix on your app;
• voice input, which transcribes what you say into text;
• smaller helpers, such as suggesting app names and summarising community apps;
• AI features you add to your own apps.

What is processed. To run these features, your inputs (prompts, chat messages, voice recordings, uploaded files and screenshots) and the relevant parts of your app (code and, where needed, data) are sent to our app-building and AI service providers, which process them with third-party AI models and return the output to you. AI outputs are stored in your project like any other content.

Model training. appify ph does not use your prompts, files, apps or data to train AI models of its own. Our AI service providers process your data to deliver the feature you requested; their handling and retention of that data are governed by their own terms.

Accuracy. AI output can be incomplete or wrong. Review generated apps and content before you rely on them. Avoid entering sensitive personal information in prompts unless your app needs it.

We also use AI internally to summarise support questions and product feedback so we can improve our help content and the product.

You can choose to connect these services. We receive only what is needed for the feature:

• Facebook: to import your profile photo for the community. We request only your public profile and store the access token Facebook gives us for that purpose.
• GitHub (paid plans): the access token and repository you enter are used to sync your app's code to that repository.
• Figma: to bring designs into the builder, if you connect it.

Your use of these services is also governed by their own privacy policies. You can stop using an integration at any time; contact support if you want us to remove a stored connection. Integrations you build into your own apps are your responsibility and governed by those services' terms.

• Payments for subscriptions and credits are processed by Stripe through its secure checkout. Earlier payments were processed by Xendit, and records of those remain.
• We never see or store your full card number. Card details are entered on the payment processor's page and stored by them. We store your customer and subscription identifiers, the card brand and last 4 digits, and your mobile number where you provide it at checkout.
• We keep a record of each payment (date, item, amount, credits and status) to show your invoices and billing history in Settings → Billing, and to meet accounting and tax obligations.
• Subscriptions renew automatically until cancelled. If a renewal payment fails, we email you and your account moves to the Free plan if it remains unpaid.
• Refunds and price changes are governed by our Terms of Service (Section 4).
• Affiliate payouts use the bank details you provide in Settings → Payouts.

Stripe's checkout may also ask for details such as your billing address or phone number, depending on your payment method and country. Stripe processes your payment information under its own privacy policy.

We do not use third-party advertising or analytics trackers (such as Google Analytics or the Meta Pixel). We use our own first-party tools and these cookies and browser storage:

• Sign-in cookie (essential): keeps you signed in, up to 7 days.
• Workspace cookie (essential): remembers which workspace you are using, up to 1 year.
• Referral visit cookie: remembers an affiliate referral until you close your browser; the referral code may also be kept in your browser's local storage until you sign up.
• App sign-in cookies (essential): used when you open your apps from appify ph, up to 1 year.
• Connection cookie: protects the Facebook connection step, 10 minutes.
• Local storage: your preferences (such as theme) and unsent drafts, kept on your device.

You can clear cookies and storage in your browser settings; the platform may not work properly without the essential ones.

We share personal information only as needed to run the platform:

• Service providers acting for us: cloud hosting, database and file storage; app-building and AI services; email delivery (including Google Workspace for our support mailbox); and payment processing (Stripe; previously Xendit). They may use the data only to provide their services to us.
• Other users, as you choose: people you invite to your workspace or apps see your name and email; community members see your community profile, posts and photo; signed-in members can see the affiliate leaderboard, which shows affiliates' names, photos and earnings. Referred sign-ups appear to their affiliate with masked names and emails.
• Legal reasons: when required by law, court order or a government authority, or to protect the rights, safety and property of appify ph, our users or the public.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

We do not sell or rent personal information.

We use technical and organisational measures to protect personal information, including:

• encrypted connections (HTTPS) between your device and the platform;
• hashed passwords and hashed one-time codes;
• secure, host-only sign-in cookies;
• rate limits, lockouts and bot checks on sign-in, sign-up and public forms;
• access checks so that each person can reach only their own workspace, apps and data, and staff-only tools are limited to authorised administrators;
• private storage for support attachments, opened only through short-lived links;
• daily backups of published apps' data.

Data is stored with cloud infrastructure providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to cause you serious harm, we will notify you and the National Privacy Commission as required by law. Keep your password confidential and tell us right away if you suspect unauthorised access.

We keep personal information only as long as needed for the purposes in this policy:

• Account, projects and content: while your account is active, until you or we delete them.
• Sign-in sessions: expire after 7 days; one-time codes after 10 minutes.
• Visitor statistics of published apps: detailed records are kept for 90 days.
• App backups: kept for the period included in your plan, shown in Settings → Data Backup.
• Payment and invoice records: kept as long as required by Philippine tax and accounting laws.
• Support conversations and requests: kept so we can follow up and improve our help, until you ask us to delete them, unless we need them for a legal claim.

When information is no longer needed, we delete or anonymise it.

You stay in control of your information:

• Edit your name, photo, mobile number, email address and password in Settings → Profile.
• Manage who can open your apps in Share and Publish, and who is in your workspace in Settings → Workspace.
• Delete apps, records and files from within your apps, and restore app data from Settings → Data Backup.
• Review your plan, payment method and invoices in Settings → Billing, and your credit usage in Settings → Usage.
• Request a copy, correction or deletion of your data at any time (Sections 17 and 18).

Ownership of the apps and content you create is described in our Terms of Service.

Our hosting, storage, AI, email and payment providers operate infrastructure in several countries, so your information may be transferred to and processed outside the Philippines. When this happens, we remain responsible for your information under the Data Privacy Act and use providers that are bound to protect it and to use it only to provide their services to us.

Under the Data Privacy Act of 2012, you have the right to:

• be informed about how your personal information is processed;
• access your personal information;
• object to processing, including processing based on consent or legitimate interest;
• correct (rectify) inaccurate or incomplete information;
• erasure or blocking of information that is outdated, false, unlawfully obtained or no longer necessary;
• data portability: obtain a copy of your information in an electronic, commonly used format;
• damages for inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your information;
• file a complaint with the National Privacy Commission (privacy.gov.ph).

Users in other countries may have similar rights under their local laws. To exercise any right, email support@fibolim.com or use the support form. We may ask you to confirm your identity before acting on a request, and we will respond within the period required by law.

You can ask us to delete your account and personal data at any time, from the website or the mobile app:

1. Go to the support form (also reachable from the account menu → Help & Privacy), choose Account and Data Request, and write "Delete my account", or email support@fibolim.com with the subject "Account deletion request".
2. Send it from, or mention, the email address of your account. We will confirm your identity before deleting anything.
3. If you have an active subscription, we cancel it as part of the deletion so you are not charged again.
4. We delete your account, profile, projects, apps and their data, uploaded files and backups, and confirm by email.

What we may keep: payment and invoice records required by tax and accounting laws, and information needed to resolve disputes, prevent fraud or comply with a legal obligation. Content you shared with others (for example community posts) may be removed or anonymised. Deletion is permanent and cannot be undone, so download anything you want to keep first.

To delete only part of your data (for example a specific app, file or support conversation) instead of your whole account, delete it within the app where possible, or tell us what to remove using the same steps.

appify ph is a business platform intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

We may update this Privacy Policy when our platform, our providers or the law change. We will post the new version on this page and update the "Last updated" date. If a change materially affects how we use your personal information, we will also notify you by email or in the app before it takes effect.

For privacy questions, requests or complaints, contact our data privacy team: