Privacy Policy

This policy explains what Flixsol Ltd(“we”) collects when you use App Dropper, why, and what control you have. We are the data controller. Registered in England and Wales, number 17358900, at 146-147 Assurance Office, St Helens Road, Swansea, United Kingdom, SA1 4DE.

What we collect

• Account details — your email address, display name, and profile picture if you sign in with Google. Used to identify you, send service email, and show who uploaded what to your teammates.
• Builds you upload— the .apk/.ipa file and everything we parse from it: app name, bundle ID, version, icon, permissions, minimum OS, and, for iOS, the provisioning profile’s device UDIDs and team name.
• Tester and install data — email addresses you invite, install counts, and feedback (including screenshots) testers submit.
• Technical data — your IP address, used to rate-limit uploads and invitations and to prevent abuse. Device push tokens if you use the mobile app.
• Billing data — if you subscribe, your Stripe customer and subscription identifiers. We never see or store your card details; those go directly to Stripe.

Why we can use it

We process account, build, and technical data to perform our contract with you. We process IP addresses and rate-limit counters under our legitimate interest in keeping the Service secure and available. We process billing data to comply with legal obligations including tax and accounting. Any analytics cookies are used only with your consent.

How long we keep it

• Build binariesare deleted automatically when their retention period expires — 7 days on the free plan, 30 days on Pro, or when you delete them. The build’s metadata record remains visible in your dashboard.
• Account data is kept while your account is open, and deleted within 30 days of you deleting it.
• Invitations expire after 7 days. Upload status records are removed after 7 days.
• Billing records are retained for 6 years to meet UK tax law.

Who else processes it

We use a small number of subprocessors, each only for what it needs:

• Google Cloud / Firebase(Ireland & USA) — authentication, database, file storage, push notifications.
• Vercel (USA) — website hosting.
• Stripe(USA & Ireland) — payment processing. Stripe is a separate controller for payment data; see their own privacy policy.
• Google (Gmail SMTP) — sending service email such as invites and expiry warnings.

Some of these are outside the UK/EEA. Those transfers rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

We do not sell your data, and we do not use your uploaded builds to train machine-learning models.

Who can see your builds

That is up to you. A share link set to public can be opened by anyone who has the link. A link set to testers only requires the viewer to be signed in as a member of that app. Treat a public link as public.

Cookies

We set only the cookies needed to keep you signed in — these are strictly necessary and require no consent. If we enable analytics, we will ask for your consent first and you can withdraw it at any time.

Your rights

Under the UK GDPR and EU GDPR you may request access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. Email support@appdropper.io and we will respond within one month.

If you are unhappy with our response you can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

Security

Data is encrypted in transit and at rest. Access to build files is controlled by server-side security rules, and administrative operations run through audited server functions. No system is perfectly secure; if a breach affects your data we will notify you and the relevant regulator as the law requires.

Changes

We will update this page when our processing changes and revise the date above. Material changes will be emailed to you.

Contact

support@appdropper.io — Flixsol Ltd, 146-147 Assurance Office, St Helens Road, Swansea, United Kingdom, SA1 4DE.