Privacy Notice

This Privacy Notice describes how Hussein Elbeheiry ("we", "us", "our") collects, uses, and protects your personal data when you use AppCard (the "Service").

1. Who we are

Hussein Elbeheiry is the data controller for the personal data processed through AppCard. If you have questions about this notice or your data, contact us through the support channels listed on your account page.

2. What data we collect

• Account data: email address, display name, and authentication credentials managed by our auth provider.
• Usage data: App Store lookups you run, generated graphics, device/IP address, browser type, and timestamps.
• Payment data: we do not collect or store card details. Payments are processed by Paddle, our Merchant of Record.
• Support data: messages and correspondence you send us.

3. How we use your data

• To create and manage your account and authenticate you.
• To provide the Service, including App Store lookups and graphic generation.
• To enforce usage limits and prevent abuse of free lookups.
• To process payments and manage memberships through Paddle.
• To respond to support requests and improve the Service.
• To maintain security and detect fraud.

4. Legal basis

We process personal data on the basis of: (a) performance of a contract with you; (b) our legitimate interests in operating and securing the Service; (c) compliance with legal obligations; and (d) consent, where required (for example for non-essential cookies or marketing communications).

5. Who we share data with

• Service providers: hosting, authentication, analytics, and support tooling providers who process data on our behalf.
• Paddle.com: our Merchant of Record for payment processing, subscription management, tax compliance, and invoicing.
• Professional advisers: legal, accounting, and other advisers when necessary.
• Authorities: when required by law or to protect our rights.

6. International transfers

AppCard operates globally. Your data may be transferred to and processed in countries outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide the Service. After account closure, we delete or anonymise your data within a reasonable period, except where we are required to keep it for legal, tax, or accounting purposes.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data; to object to processing; to data portability; and to withdraw consent. You may also have the right to complain to a supervisory authority. We aim to respond to requests within one month.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security reviews.

10. Cookies

AppCard uses essential cookies to keep you signed in and maintain your session. Analytics or marketing cookies are only used with your consent. You can manage your cookie preferences through your browser settings.

11. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available at this page, and we will indicate the date it was last updated.