Hype Apps Privacy Policy

Version: 1.0 · Effective: November 6, 2026

Who we are. Hype Apps is run by Fluency Software Inc., a Massachusetts corporation doing business as "Hype Apps", Massachusetts, USA. It is the controller of the personal information described here. Privacy questions and requests: lazarus@hypeapps.dev; we'll give a postal address for legal notices on request.

The short version.

We don't sell or share your data, and we don't advertise to you.
No ads, trackers, analytics or crash-reporting services: not on the site, not in Shipyard or hype, not in the Hype Apps app. Apps you publish send us nothing, unless they use HAM Sync: then they send us their shared data encrypted, and we can't read it.
Your app-store keys and Google access stay on your computer.
We keep what's needed to run your account, your license and your previews, and delete it on the schedule below or when you ask.

1. What we collect, and why

What	When	Why (EU/UK legal basis)	How long
Request logs: page, IP address, browser, referring page	When you visit a page on hypeapps.dev (what the Hype Apps app loads isn't in these logs)	Security and counting visits (legitimate interests)	30 days. Our web server keeps no access log. When a request fails, its error log records the IP address and the request; those lines are deleted after 14 days.
Waitlist and idea submissions: your email and what you typed	If you submit them	To tell you about Hype Apps (consent)	Until you ask us to delete them
Account: name, email, hashed password; optionally a handle, bio, avatar	When you create an account	To run your account (contract)	Until you delete your account
Purchases: email, amount, currency, Stripe's references, your license key	When you buy	To deliver your license, handle refunds, keep tax records (contract; legal obligation)	As long as tax law requires (7 years)
License and devices: license key, a random device ID, your computer's name and platform, first and last seen	When you activate Shipyard or `hype`, and at check-ins	To apply your license's device limit (contract)	While the license exists, plus 1 year
Production app tickets: each app's bundle ID / package name and name, when its ticket was assigned, its store builds; whether it's live on the public App Store / Google Play listings	When you make a store build; a periodic check of public listings	To keep each ticket to one app and apply the EULA (contract; legitimate interests)	While the license exists, plus 1 year
AI model downloads: your license, device and which model file	When Shipyard downloads a model	To give you a download link and limit abuse (contract)	While the license exists, plus 1 year
Pairing (My Apps): an account, made the first time a computer pairs (no email unless you add one); for each device a record with its type and name (a phone is just "iPhone" or "Android phone"), the engine version, a random token kept only as a hash, first and last seen; for a computer, a hash of its install secret	When you pair a phone or computer	To show your apps on your devices (contract)	A phone's record is deleted when it unpairs or erases, and the account too when no other device uses it. Without an email, when the account goes unused for 90 days its phones are deleted; a computer's record is kept a further 90 days (or 90 days after it unpairs), so it can find its apps again, then deleted. An account's app names and keys (not their files) are kept until you ask us to delete them, so a computer that pairs again finds its apps.
Your apps' files (HAM, images, sounds), the last 5 published versions	When you publish to My Apps	To show them on your devices and to people you share with (contract)	Same as pairing
Synced app data (HAM Sync): what an app using `sync="on"` shares between its installs, encrypted in the app under the app's own key, which we never have; with each change, its size, an anonymous install ID, the app's ID and when it arrived	When the app syncs	To keep the app's shared database (contract)	We can't read it. Kept while the app uses it. Test databases are deleted 7 days after their last change; an erased database is kept 30 days so it can be restored, then deleted; an install not seen for a year is forgotten.
App data backups and older sync files: an app's database file, sent by `backup_url` or `sync_url` before HAM Sync replaced them. These aren't encrypted	Before HAM Sync: we no longer accept new ones	To restore your app's data (contract)	Kept until you delete them or ask us to. We'll tell you, and update this policy, before we delete them.
Hosted app pages: the developer name, contact email and text you confirm for your app's privacy and support pages	When you publish them from Shipyard	To host your pages (contract)	While the page is up; confirmed versions kept privately as a record
Feedback: your message, optionally your email, version, platform, an install ID, and if you include them the app's name, markup and a screenshot	When you send feedback	To fix problems (legitimate interests)	1 year
Emails: your address and what we sent	License, account and pairing emails	To deliver them (contract)	Until you ask us to delete your address. Bento, our email provider, keeps its own records of the messages it sends under its privacy policy
Marketplace (when it opens): sellers' payout details, held by Stripe	When you sell	To pay you (contract)	As tax law requires

We don't collect: your app-store credentials or Google access token; your source files, unless you publish them or attach them to feedback; your contacts, location, camera, microphone or photos; advertising IDs or hardware identifiers. The Hype Apps app sends a random ID it makes for itself; we keep it only to file backups made before HAM Sync, and hashed, to count marketplace downloads. HAM Sync uses its own anonymous install ID instead.

On your devices. Camera, photos, motion, heart rate and steps used in the Hype Apps app stay on your device unless the app you're running sends them somewhere. Shipyard's AI runs on your computer: your prompts and code aren't sent to us or to an AI company.

2. Google Play access

If you connect Google Play in Shipyard, Shipyard uses Google's permission to manage your Play Console (androidpublisher) only to upload the builds you choose and read their release status. This happens on your computer; your Google access token is stored in your computer's keychain and is never sent to us. You can disconnect in Shipyard or in your Google Account. Hype Apps' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Who else handles it

Only these service providers, only for these purposes:

Stripe: payments (it holds your card details; we don't).
DigitalOcean: our servers, database and file storage, including the AI model files.
Bento: sending email.
Apple and Google: when you publish, Shipyard and hype send your app from your computer to your own App Store Connect or Google Play account, under their policies.
Discord: if you join our community server, Discord's policy applies to what you post there.

We may also disclose information if the law requires it, to protect people from harm, or if Hype Apps is sold (we'll tell you first). We don't sell or share personal information for advertising.

4. Your choices and rights

See, correct, download or delete your data: your account page, Erase and unpair in the Hype Apps app (it deletes the phone's record, and the account when no other device uses it), or email us; an account with an email or a purchase is deleted on request at lazarus@hypeapps.dev. We answer within 30 days.
Deleting your account removes your data within 30 days. Our database backups are made daily and kept for 30 days on a rolling basis, so deleted data is gone from them within a further 30 days, except one encrypted offline copy, refreshed quarterly and kept up to 3 months. We keep purchase records only as long as the law requires.
EU and UK: you can also object, restrict processing, and complain to your data protection authority.
US states (including California): we don't sell or share personal information or use it for targeted advertising, and we honor requests from anyone, wherever they live.

5. Children

Hype Apps isn't for children under 13. Accounts and purchases are for adults or organizations such as schools; people aged 13 to 17 use Shipyard and hype under a parent, guardian, or teacher or school who accepts our terms for them. The Hype Apps app has no sign-up: pairing links the phone to the account of the computer that showed the code, with no email unless one is added.
We don't knowingly collect personal information from children under 13, as the US Children's Online Privacy Protection Act (COPPA) requires. If we learn we have, we delete it.
Parents and guardians: if you think we hold information about your child under 13, email lazarus@hypeapps.dev with the subject "Child's data", and tell us the email, license key or device involved. We'll confirm you're the parent or guardian, delete the information within 30 days, and tell you when it's done. A parent, guardian or school responsible for someone aged 13 to 17 can ask for the same.

6. Where your data is

Our servers are in the United States. If you use Hype Apps from elsewhere, your information is processed in the US.

7. Security

HTTPS everywhere, hashed passwords, signed license keys and tickets, and limited server access. If a breach affects you, we'll tell you as the law requires.

8. Apps made by other people

Apps you open in the Hype Apps app, through a shared link, the gallery or the marketplace are made by their creators, not by us. What they collect is up to their creators and covered by the creators' own privacy policies.

9. Changes

If we change this policy in a way that matters, we'll email account holders and post a notice before it takes effect. Every version is at hypeapps.dev/legal/changes.