Legal

Privacy Policy

Last updated: April 25, 2026 · Applies to all IndieSoft apps and this website

Short version: We collect only what's needed to make each app work. We do not sell your data, share it with advertisers, or use it for any purpose beyond operating the app you're using.

1. Who we are

IndieSoft is an independent software studio and the data controller for all IndieSoft apps and the indiesoft.app website. You can reach us at hello@indiesoft.app.

When we refer to "we", "us", or "IndieSoft" in this policy, we mean the data controller responsible for your personal data.

2. What data we collect

The data we collect depends on which app you use. Across all IndieSoft apps, data generally falls into these categories:

Account data — your email address, used for authentication. No password is ever stored.
App data — content you create or enter while using the app (for example, logs, entries, settings, and preferences).
Technical data — basic information needed to keep your account secure, such as authentication tokens stored locally on your device.

We do not collect your name, phone number, location, contacts, payment details, or any device sensor data unless an app feature specifically requires it and you have been clearly informed.

3. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

Performance of a contract (Article 6(1)(b)) — processing necessary to provide the app service you have requested, including account creation and data storage.
Legitimate interests (Article 6(1)(f)) — processing necessary for our legitimate interests in maintaining, securing, and improving our apps, where these interests are not overridden by your rights.
Legal obligation (Article 6(1)(c)) — processing required to comply with applicable law.
Consent (Article 6(1)(a)) — where we rely on consent, you may withdraw it at any time by contacting us or using in-app controls.

4. How we use your data

We use your data only to:

Create and manage your account
Store and sync app data across your devices
Respond to support requests
Comply with legal obligations

We do not use your data to build advertising profiles, conduct behavioural tracking, or train AI models.

5. Data retention

We retain your personal data for as long as your account is active or as needed to provide the app service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law, regulation, or legal process, or where technically necessary for data integrity purposes.

Data you delete within an app is removed from our servers within 30 days, subject to the same exceptions.

6. How we store your data

App data is stored using Supabase, a cloud database provider. All data is encrypted in transit (TLS 1.2 or higher) and encrypted at rest. We use row-level security controls to ensure you can only access your own data.

7. International data transfers

IndieSoft is based in the United States. If you are accessing our apps from the EEA, UK, or Switzerland, your personal data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home country.

Where such transfers occur, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission, or equivalent mechanisms recognised under applicable law. You may request a copy of the applicable transfer safeguards by contacting us at hello@indiesoft.app.

8. Third-party services

As of the date of this policy, we use the following third-party service providers to operate our apps:

Supabase — database, authentication, and file storage. Supabase Privacy Policy →

As of the date of this policy, we do not use advertising SDKs, commercial tracking platforms, or social media trackers for marketing or advertising purposes in our apps or on this website.

9. Cookies and website analytics

This website (indiesoft.app) uses Vercel Web Analytics to collect anonymised, aggregated data about page visits — including page views, referrer, country, and device type. No cookies are set and no personal data is collected. Individual visitors cannot be identified.

Our apps do not use cookies.

10. Data sharing

We do not sell, rent, or share your personal data with any third party for marketing or advertising purposes. We have no commercial relationship with data brokers.

Some apps include optional sharing or collaboration features. When you use these features, other participants in the shared space can see the data you contribute to it. Your full email address is never visible to other users.

We may disclose data if required to do so by law or valid legal process. Where legally permitted, we will notify you before complying.

11. Your rights

Under the GDPR and applicable data protection law, you have the following rights:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can correct inaccurate or incomplete data directly within the app, or by contacting us.
Right to erasure — you can request deletion of your personal data. We will action this within 30 days.
Right to restriction — you can ask us to restrict processing of your data in certain circumstances.
Right to data portability — you can request your data in a structured, machine-readable format where applicable.
Right to object — you can object to processing based on legitimate interests at any time.
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
Right not to be subject to automated decision-making — we do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact us at hello@indiesoft.app. We will respond within 30 days. We may need to verify your identity before processing your request.

12. Right to lodge a complaint

If you are located in the EEA and believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu. If you are in the UK, you may contact the Information Commissioner's Office (ICO).

We encourage you to contact us first so we can address your concern directly.

13. Children

Our apps are not directed at children under 13 (or under 16 where required by local law). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

14. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top of this page. Where required by law, we will notify you of changes directly. Continued use of our apps after changes are posted constitutes your acknowledgement of the updated policy.

Questions about this policy? Contact us at hello@indiesoft.app. We will respond within the timeframe required by applicable law.