Privacy Policy

• Account: your email address and a password hashed by our auth provider (we never see the plaintext).
• Credits & purchases: your credit balance and a record of top-ups. Card details are handled entirely by Stripe — we never see or store them.
• Reviews: if you're signed in, the results of your reviews (findings, scores, and your AI-assistant conversations) are saved to your account so they follow you across devices. Your actual build/source is not part of this — only the derived text.

• Upload, store, or transmit your app binary or source code.
• Run analytics, tracking, fingerprinting, ad networks, or telemetry.
• Sell or rent your personal data, or share it for advertising.

We use only strictly-necessary cookies — your signed-in session. We set no advertising or analytics cookies. Because these cookies are essential to provide the service, most jurisdictions don't require a consent banner for them.

We use a few trusted processors strictly to run the product, each bound by its own terms and data-processing agreement:

• Supabase — accounts, the credit ledger, and your saved review results.
• Stripe — payments. Card details go directly to Stripe; we never receive them.
• Anthropic (Claude) — powers the AI features. Only the relevant finding text or your question is sent — never your build or source. Anthropic does not use data submitted through its commercial API to train its models.
• Vercel — hosting and content delivery.

Our providers are based primarily in the United States. If you access Approvable from outside the US, your information may be transferred to and processed in the US.

We keep your account and reviews until you delete them or close your account. When you delete your account, we remove your data from our active systems promptly; residual copies cycle out of routine backups shortly after. We may retain limited transaction records where required for tax, accounting, or legal reasons.

Depending on where you live, you may have the right to access, correct, delete, export, or restrict use of your personal data, and to object to certain processing (GDPR), or to know about and delete your data and opt out of its "sale" (CCPA/CPRA — note we don't sell data). You can delete your account and all associated data yourself from the account menu, or email us. We won't discriminate against you for exercising these rights.

Data is encrypted in transit (TLS) and at rest by our providers. Row-level security ensures each account can only access its own data, and credit spending is enforced server-side. No system is perfectly secure; if a breach ever affects your data, we'll notify you as required by law.

Approvable isn't directed to children under 13, and you may not use it if you're under 13.

We'll update this page and the date above when we make material changes.

Vollo Ventures LLC, Minnesota, USA · support@approvable.dev