← Back

Privacy Policy

Last updated: October 2026

Who we are

Web2App is operated by Benulal Khatiwada, who is the data controller for your personal data. Contact: benukhatiwada@gmail.com.

Data we collect

Account data: your name, email address and securely hashed password (or name and email from Google sign-in). Usage data: the website URLs, app names, package IDs and icons you submit, plus basic device and IP information for security.

How we use it

We use your data to create and secure your account, verify your email with a one-time code, provide the app-building service, prevent fraud, improve the product and provide support. Legal bases: performance of our contract with you, our legitimate interests in security and improvement, and legal obligations. We do not sell your data or use it for advertising.

Who we share it with

Service providers who help us run the service (hosting, database, AI analysis, GitHub for app builds), our Merchant of Record Paddle (who processes payments, subscriptions, tax and invoicing), professional advisers, and authorities where required by law.

Signing keys

Signing keys and Google service account keys you save stay in your own browser storage and are never uploaded to our servers. Keep your own backup.

Retention

We keep your data while your account is active and delete or anonymise it when no longer needed. You can ask us to delete your account at any time.

Your rights

Depending on your country, you may have rights to access, correct, delete, restrict or port your data, object to processing, withdraw consent, and complain to a supervisory authority. Contact us to exercise any of these — we respond within one month.

Security

Data is sent over encrypted connections and access to your account data is restricted. We apply appropriate technical and organisational measures.

Cookies

We use essential cookies/storage for sign-in and preferences only. No advertising or tracking cookies.

Changes

We may update this policy. Significant changes will be shown in the app.