Privacy Policy

Who we are

Apps Factory is a brand of ServiceChanger B.V., Lichtenvoorde, the Netherlands (KVK 97221309). We are the data controller for the apps we publish. For anything in this policy, write to support@appsfactory.nl.

Which apps this covers

This is one policy for all Apps Factory apps. Right now that means:

• VisitNote (on the App Store): speak a note, it lands in your inbox
• TideFind (coming soon): scan a seashell on the beach and learn what you found

Future Apps Factory apps with the same data practices fall under this policy too. If an app handles data in a way this policy does not describe, we update the policy or give that app its own page before release. Where an app needs specifics, it gets its own subsection below.

What we collect

Our apps work as a guest by default. We do not ask for an account before the app has done something useful for you. We collect only what a feature needs to run, and we ask at the moment we need it.

• If you use an app as a guest: the content you create in the app, stored to make the app work
• If you sign in: your email address and the app data you create
• If you contact support: your email address and what you write to us
• To stop abuse of free features: a random device ID the app creates, and counters per device and per hashed IP address. We never store your IP address itself

We do not run advertising trackers and we do not use analytics SDKs that are not listed in this policy.

AI and third-party processing

Some of our apps use AI for one clear job per app. The rules are the same across the portfolio:

• We name the vendor. Right now that is OpenAI, which we use over their API
• Nothing is sent until you choose to submit something, like sending a voice note. AI does not run in the background
• We do not train AI models on your content. OpenAI does not use data submitted through its API to train its models by default, and we do not opt in to training
• We do not keep what you submit longer than processing takes. Audio and images are not stored in a library

Beyond AI, we use Supabase to run our backend and store account and app data, and Resend to deliver email an app sends on your request. What each app sends exactly is in that app's subsection below.

AI can make mistakes. Review a result before you rely on it, and do not submit secrets or sensitive data you would not put in an email. There is a plain-language summary of all of this on our AI page.

VisitNote specifics

VisitNote records audio on your device. Nothing is uploaded until you choose to send a note. When you send:

• The recording is uploaded to OpenAI over their API, which turns it into a transcript and a structured note
• The finished note is emailed via Resend to the destination address you set in the app. That address is your choice: your own inbox or another address you control
• The audio is deleted after processing. We do not keep a library of your recordings

Your notes may contain names or client information you spoke out loud. You decide what you dictate and where the note is sent. We do not read your notes.

Purchases

Paid features are sold through the Apple App Store or Google Play. Apple and Google handle the payment and are governed by their own platform terms and privacy policies. We receive a confirmation that a purchase was made, and we never see your payment details. We use RevenueCat to check whether a subscription is active, linked to a random app user ID or, when you sign in, to your account ID.

Subprocessors

We use a small set of processors, each under a data processing agreement:

If we add a processor, we update this table before it touches your data.

Legal bases

Under the GDPR (AVG) we process your data on these bases:

• Performance of a contract: making the app do what you ask it to, like transcribing and delivering a note
• Consent: where a feature needs it, like microphone access and sending your audio to OpenAI. You can withdraw consent in the app settings
• Legitimate interest: keeping our apps secure and answering support requests

How long we keep data

• Audio recordings: deleted after processing, not stored long term
• Account data: kept while you have an account, deleted when you delete it or ask us to
• Support email: kept as long as needed to handle your request

VisitNote

We do not store VisitNote audio. OpenAI processes it to transcribe and structure your note, and does not use it for training. The note is emailed to you through Resend, and we do not store it. Our server keeps these records for a fixed time and then deletes them automatically:

• Send tokens: 1 day
• Daily abuse counters, per device and per hashed IP address: 30 days
• Send log, with the destination address only as a SHA-256 hash, never the address itself, plus status and time: 12 months
• RevenueCat purchase event IDs: 12 months
• Lifetime free-send counter, per device or per user: 24 months after the last send

How to delete your account, and what that removes and keeps, is on Delete your account and data.

International transfers

Our own infrastructure runs in the EU. Where a processor handles data outside the EU, the transfer is covered by EU approved safeguards such as standard contractual clauses. Details are in each processor's own data processing terms.

What we never do

We do not sell your data. We do not run advertising trackers. We do not read your notes. We do not train AI models on your content.

Your rights

Under the GDPR (AVG) you can ask us to show, correct, export, or delete your data, and you can object to or restrict processing. Email support@appsfactory.nl from the address you use in the app and we will handle it within 30 days. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

We may update this policy. The date above shows the current version. Meaningful changes are announced in the app.

Contact

ServiceChanger B.V. · Lichtenvoorde, the Netherlands · KVK 97221309 · support@appsfactory.nl