Privacy Policy
Our Privacy Commitment
At Appy, we are committed to transparent processing of personal data and to protecting account and analytics data collected through the service.
Information We Collect
Personal Information
- • Email address
- • First and last name
- • Profile information
- • Authentication data
Service Data
- • URLs you shorten
- • QR code preferences
- • Link analytics settings
- • Custom domains
How We Collect Data
1. Account Registration
When you create an account, we collect:
- Email address (required for account access)
- First and last name (for personalization)
- Password (encrypted and stored securely)
- OAuth data (if you sign up with Google)
2. Service Usage
When you use our URL shortening service:
- Original URLs you want to shorten
- Custom slugs and link settings
- App store URLs for different platforms
- QR code customization preferences
3. Analytics Data
When someone clicks your links, we automatically collect:
- Device type and operating system
- Geographic location (country/region)
- Referrer information
- Click timestamps
- User agent information
Note: Click analytics can include technical identifiers such as IP address, user-agent, and referrer. We use this data for security, abuse prevention, service performance, and aggregated reporting.
4. Mobile SDK Data
Enterprise customers can add the Appy SDK to their iOS and Android apps. For those apps, Appy processes the following on the customer’s behalf. The customer is the controller of this data and informs its users:
- A random install ID that the app creates on first launch and that is deleted with the app
- Platform, operating system version, device model and manufacturer, screen size, locale and time zone, and the app’s identifier, version and build
- The Appy link that opened the app or was clicked before the install, with its parameters
- On Android, the install referrer string the app store passes to the app on its first launch
- In-app events and revenue sent by the app or by the customer’s server, and a user ID if the customer sets one
- For clicks on the customer’s links, a click record with the link, its parameters, the platform and the OS version and device model the browser reports, kept for up to 24 hours
- The IP address of each request, used only transiently to match an install to a recent click and not stored; matching uses a keyed hash of the network address that changes daily and is deleted after two hours
- No advertising identifiers (IDFA or GAID)
- If the app turns tracking off, Appy stores nothing for that device
Data Security
Security Measures
We implement industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. We also apply retention schedules by data category and delete or anonymize data when it is no longer needed for service operation, legal obligations, fraud prevention, or security.
Technical Safeguards
- HTTPS encryption for all data transmission
- Bcrypt password hashing
- JWT token-based authentication
- Database encryption at rest
- Regular security audits
- Access controls and monitoring
Operational Security
- Limited employee access to data
- Regular backup procedures
- Incident response protocols
- Third-party security assessments
- Secure development practices
- Data retention policies
Your Privacy Rights
Depending on your jurisdiction (including KVKK and GDPR regions), you may have the following rights:
Access & Portability
You can request confirmation about your data and ask for a copy in a portable format.
Correction & Updates
You can correct or update inaccurate account information through account settings or by contacting us.
Deletion & Erasure
You can request deletion of your account and associated data, subject to legal, fraud, and security retention obligations. We may ask you to verify your identity before completing deletion requests.
Objection & Restriction
You can object to or request restriction of certain processing activities, and you can withdraw consent where consent is the legal basis.
Privacy Questions?
If you have questions about this Privacy Policy, international transfers, or data rights requests, contact us:
Email: [email protected]
Support: https://appy.to/support
Response Time: We respond to privacy inquiries within 30 days (or as required by local law)