Privacy Policy

What we store

An account record: your email address, the identifier your sign-in provider gives us, your plan, your credit balance and the counters of what you have used.

Your projects: the files of every application you generate or edit, the conversation you had while building it, any decisions you pinned with a note, and the design direction the project is locked to.

Applications you publish, and the files of the versions you published.

A record of what the service did for your account - a generation, a publish, whether it needed a repair - together with how long it took, which model answered, and what it cost in credits. This is the same record the usage view in your settings shows you.

Uploads you add to a project yourself, such as a logo or a price list.

Where it is stored

Project files and published applications are stored in Cloudflare R2. Short-lived values - caches, the record of a running build - are stored in Cloudflare Workers KV.

Account records and usage counters are stored in Google Cloud Firestore, and signing in is handled by Google Firebase Authentication. The application itself runs on Google Cloud Run in the European Union (europe-west1).

The model service that writes the code is a third-party provider, and the prompt, project files and conversation of a generation are sent to it for the duration of that generation.

What we do not do

• We do not sell your data, and we do not share it with advertisers.
• We do not put your account's identity into an application you publish. A published page carries the data of the application itself, and nothing about you.
• We do not keep your payment details: they are Paddle's, as the merchant of record.
• We do not use the content of your projects to train a model.

The applications you publish

When you publish an application, its files are served publicly at the address you are given, and the data that application collects from its own visitors is stored with the application - one set of rows per application, reachable with a token that names that application and no other.

If you export a project and host it yourself, that copy is outside this service and these answers no longer describe it.

How long we keep it

Projects, published sites and account records stay until you delete them or take them down. A published application keeps the last three versions it replaced, so a bad publish can be undone; taking the application down removes them too.

The record of what the service did for your account expires after 90 days.

Your choices

You can read what is stored about your account: your plan, your balance and your usage are on screen, and your projects are readable and downloadable from the application.

You can delete a project, take down a published application, and ask us to delete your account and everything in it. Write to the address below and we will do it, and confirm when it is done.

Cookies and measurement

Signing in uses cookies set by the sign-in provider. The platform's own pages are measured with Google Analytics, to know which parts of the product are used; that measurement is on this platform's pages only and is deliberately not present in the applications you generate, which are yours.