Privacy Policy
Last updated: November 2026
1. Information We Collect
When you use Free App Maker by My Mind Studio, we collect the website URL you provide, your app configuration choices (name, icon, splash screen), the email address you verify with a one-time code before building, and optionally contact information you submit via our contact form. If you purchase an APK download unlock or a Play Store Pack, we keep a record of the payment (Stripe identifiers, amount, currency and status — never your card or UPI details, which go only to Stripe), the unlock attached to your verified email, or the Pack order for that app. When you verify your email, open a checkout page, or download an app or its Play Store files, we also record your IP address and your browser and device details (the user agent) — used only to protect the service, as the record of your consent if you say yes to the offers question, and, if a payment is disputed, shared with Stripe and the card issuer as evidence — and delete them after 180 days. Email verification uses a one-time code; no password is required.
When you use Free App Maker by My Mind Studio, we collect the website URL you provide, your app configuration choices (name, icon, splash screen), the email address you verify with a one-time code before building, and optionally contact information you submit via our contact form. If you purchase an APK download unlock or a Play Store Pack, we keep a record of the payment (Stripe identifiers, amount, currency and status — never your card or UPI details, which go only to Stripe), the unlock attached to your verified email, or the Pack order for that app. When you verify your email, open a checkout page, or download an app or its Play Store files, we also record your IP address and your browser and device details (the user agent) — used only to protect the service, as the record of your consent if you say yes to the offers question, and, if a payment is disputed, shared with Stripe and the card issuer as evidence — and delete them after 180 days. Email verification uses a one-time code; no password is required.
2. How We Use Your Information
We use the information you provide to build your Android app. If you open a payment page and leave without paying, we may send you one follow-up email about that purchase; it has a one-click unsubscribe, and unsubscribing never stops your download links or receipts. In the UK, the EU, the EEA and Switzerland we send it only if you answered “Yes, please” to “Want discount offers for your app from Free App Maker?” (or ticked the earlier box “Email me offers on my app”) when you verified your email in the last 180 days; that is your consent. We keep your answer to that question (yes, no or no answer, the words shown, the date, your country and time zone) as the record of your choice. To withdraw it, answer “No, thanks” the next time you are asked when you verify, use the unsubscribe link in the email, or write to hello@mymindstudio.ai. The IP address and device details described in section 1 are used only to protect the service, as the record of your consent if you say yes to the offers question, and, if a payment is disputed, are shared with Stripe and the card issuer as evidence. Contact form submissions are used to respond to your inquiries. We do not sell or rent your personal data. The analytics and advertising tools named in section 4 receive usage and conversion data to measure how the site and our own advertising perform and to help advertising platforms optimize delivery of our own ads. We do not use these tools for ad personalization or remarketing, sell this data, or use it for third parties’ marketing.
We use the information you provide to build your Android app. If you open a payment page and leave without paying, we may send you one follow-up email about that purchase; it has a one-click unsubscribe, and unsubscribing never stops your download links or receipts. In the UK, the EU, the EEA and Switzerland we send it only if you answered “Yes, please” to “Want discount offers for your app from Free App Maker?” (or ticked the earlier box “Email me offers on my app”) when you verified your email in the last 180 days; that is your consent. We keep your answer to that question (yes, no or no answer, the words shown, the date, your country and time zone) as the record of your choice. To withdraw it, answer “No, thanks” the next time you are asked when you verify, use the unsubscribe link in the email, or write to hello@mymindstudio.ai. The IP address and device details described in section 1 are used only to protect the service, as the record of your consent if you say yes to the offers question, and, if a payment is disputed, are shared with Stripe and the card issuer as evidence. Contact form submissions are used to respond to your inquiries. We do not sell or rent your personal data. The analytics and advertising tools named in section 4 receive usage and conversion data to measure how the site and our own advertising perform and to help advertising platforms optimize delivery of our own ads. We do not use these tools for ad personalization or remarketing, sell this data, or use it for third parties’ marketing.
3. Data Storage
Generated APK files are stored on our servers for up to 24 hours — or up to 7 days for customers with an active unlock, so the download link we email keeps working — and are then automatically deleted. The app signing keys we generate for paid builds, and their passwords, are kept until you ask us to delete them (hello@mymindstudio.ai), so that we can re-send them if they are lost; they are never shared. App configurations may be stored in your browser's local storage for your convenience.
Generated APK files are stored on our servers for up to 24 hours — or up to 7 days for customers with an active unlock, so the download link we email keeps working — and are then automatically deleted. The app signing keys we generate for paid builds, and their passwords, are kept until you ask us to delete them (hello@mymindstudio.ai), so that we can re-send them if they are lost; they are never shared. App configurations may be stored in your browser's local storage for your convenience.
4. Cookies & Local Storage
We use browser local storage to remember your previously built apps and preferences. Optional analytics and advertising measurement and optimization help us understand how the builder is used, which campaigns bring people here, whether those visits lead to purchases, and help advertising platforms optimize delivery of our own ads. We do not use these tools for ad personalization or remarketing. This uses Google Analytics, Google Ads measurement and the Meta pixel.
We ask everyone before optional measurement loads. The cookie banner is a non-blocking choice: you can ignore it or choose “Necessary only” and still build or buy normally, with no optional analytics or advertising tags loaded. Those tags load only after you explicitly choose “Accept all”. We also honour your browser’s Global Privacy Control signal if it is switched on. You can change an earlier acceptance using the button below, or clear this site’s data in your browser at any time. Before you choose, the open page may hold a sanitised entry source temporarily in memory so that, if you later accept on the same page, the original landing source can be recorded. The next page on this same origin may also read permitted campaign fields from the browser-provided referrer, when available, and hold only those fields in memory until you accept. We do not add tracking fields to links or retain the full referrer URL for this handoff. It is not written to browser storage or sent to us or an advertising platform unless you accept, it disappears when the page closes, and it cannot be used after 30 days.
If you choose “Accept all”, the last recognised non-direct source can be used from this browser for 30 days. After that period its source fields are no longer used or sent, and the expired browser copy is cleared on your next visit. This may include campaign tags (UTM source, medium, campaign, term and content) and platform click identifiers used by Google, Microsoft, Meta or Reddit; a Meta or Reddit click identifier alone is not treated as proof of a paid ad. When you open checkout, the allowed source fields and your consent decision are attached to that Stripe checkout; if payment completes, they are kept with its payment record so we can distinguish paid ads, organic search, referrals and unknown traffic. We also keep a limited checkout-attempt audit (source, medium and campaign only when consented, plus the measurement-status reason) even if you leave without paying, to measure where checkout stops. For an untagged search or referral we keep only a normalised public hostname or source label — never the full referrer URL, page path or search terms. Turning off optional measurement or clearing this site’s data removes the browser copy and prevents it from being attached to future checkouts. The 30-day usage limit applies only to the browser copy; it does not delete source fields already attached to a checkout or completed payment record. A checkout record can also contain a short measurement-status reason, such as declined or source not available; when optional measurement is off, this label includes no campaign identifiers. Those records are processed by the service providers in section 5.
We use browser local storage to remember your previously built apps and preferences. Optional analytics and advertising measurement and optimization help us understand how the builder is used, which campaigns bring people here, whether those visits lead to purchases, and help advertising platforms optimize delivery of our own ads. We do not use these tools for ad personalization or remarketing. This uses Google Analytics, Google Ads measurement and the Meta pixel.
We ask everyone before optional measurement loads. The cookie banner is a non-blocking choice: you can ignore it or choose “Necessary only” and still build or buy normally, with no optional analytics or advertising tags loaded. Those tags load only after you explicitly choose “Accept all”. We also honour your browser’s Global Privacy Control signal if it is switched on. You can change an earlier acceptance using the button below, or clear this site’s data in your browser at any time. Before you choose, the open page may hold a sanitised entry source temporarily in memory so that, if you later accept on the same page, the original landing source can be recorded. The next page on this same origin may also read permitted campaign fields from the browser-provided referrer, when available, and hold only those fields in memory until you accept. We do not add tracking fields to links or retain the full referrer URL for this handoff. It is not written to browser storage or sent to us or an advertising platform unless you accept, it disappears when the page closes, and it cannot be used after 30 days.
If you choose “Accept all”, the last recognised non-direct source can be used from this browser for 30 days. After that period its source fields are no longer used or sent, and the expired browser copy is cleared on your next visit. This may include campaign tags (UTM source, medium, campaign, term and content) and platform click identifiers used by Google, Microsoft, Meta or Reddit; a Meta or Reddit click identifier alone is not treated as proof of a paid ad. When you open checkout, the allowed source fields and your consent decision are attached to that Stripe checkout; if payment completes, they are kept with its payment record so we can distinguish paid ads, organic search, referrals and unknown traffic. We also keep a limited checkout-attempt audit (source, medium and campaign only when consented, plus the measurement-status reason) even if you leave without paying, to measure where checkout stops. For an untagged search or referral we keep only a normalised public hostname or source label — never the full referrer URL, page path or search terms. Turning off optional measurement or clearing this site’s data removes the browser copy and prevents it from being attached to future checkouts. The 30-day usage limit applies only to the browser copy; it does not delete source fields already attached to a checkout or completed payment record. A checkout record can also contain a short measurement-status reason, such as declined or source not available; when optional measurement is off, this label includes no campaign identifiers. Those records are processed by the service providers in section 5.
5. Third-Party Services
Netlify hosts the website, Render.com runs the backend, Supabase stores database records, and Stripe processes payments. With explicit payment-source measurement consent, the allowed source fields described in section 4 are shared with Stripe, Render and Supabase as part of the checkout and payment record. Please review their respective privacy policies.
Netlify hosts the website, Render.com runs the backend, Supabase stores database records, and Stripe processes payments. With explicit payment-source measurement consent, the allowed source fields described in section 4 are shared with Stripe, Render and Supabase as part of the checkout and payment record. Please review their respective privacy policies.
6. Security
We use HTTPS encryption for all data transmission. We implement server-side security measures including rate limiting and input validation to protect our systems and your data.
We use HTTPS encryption for all data transmission. We implement server-side security measures including rate limiting and input validation to protect our systems and your data.
7. Children's Privacy
Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.
Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.
8. Contact
Free App Maker is operated by KCF LLC through its My Mind Studio technology division. For privacy questions or deletion requests, email hello@mymindstudio.ai or use the Contact Us form on this site.
Free App Maker is operated by KCF LLC through its My Mind Studio technology division. For privacy questions or deletion requests, email hello@mymindstudio.ai or use the Contact Us form on this site.