Privacy Policy

Last updated June 1, 2026

This Privacy Notice for Struklio (‘we’, ‘us’, or ‘our’) describes how and why we might access, collect, store, use, and/or share (‘process’) your personal information when you use our services (‘Services’), including when you:

Download and use the Struklio mobile app (iOS) to create, configure, and publish native mobile apps
Visit our website at struklio.com or any website of ours that links to this Privacy Notice
Contact us or engage with us in other related ways

Questions or concerns? If you do not agree with our policies and practices, please do not use our Services. If you have any questions, please contact us at info@struklio.com.

Summary of Key Points

What personal information do we process? We may process personal information depending on how you interact with Struklio, the choices you make, and the features you use.

Do we process any sensitive personal information? No. We do not process sensitive personal information such as racial or ethnic origins, religious beliefs, or health data.

Do we collect information from third parties? Limited information only. When you sign in with Apple or Google, those providers share basic identity data (such as your email address or a unique identifier) with us to authenticate your account. Stripe shares payment confirmation data with us when you subscribe. We do not purchase or obtain personal data from any other third-party sources.

How do we process your information? We process your information to provide, maintain, and improve our Services, manage your account, facilitate app deployment workflows, and ensure security and fraud prevention. We only process your information when we have a valid legal basis to do so.

With whom do we share personal information? Only with service providers necessary to operate the Services - cloud hosting, Apple for payments and app distribution. We do not sell your data.

What are your rights? Depending on your location, you may have rights regarding your personal information, including access, correction, deletion, and portability. Contact us at info@struklio.com.

What information do we collect?
How do we process your information?
What legal bases do we rely on?
When and with whom do we share your personal information?
Is your information transferred internationally?
How long do we keep your information?
How do we keep your information safe?
Do we collect information from minors?
What are your privacy rights?
Controls for Do-Not-Track features
Do we make updates to this notice?
How can you contact us?
How can you review, update, or delete your data?

1. What information do we collect?

Personal information you provide to us

We collect personal information that you voluntarily provide when you register for an account, use the Struklio builder, set up app deployment, or contact us. This may include:

Email address
Authentication credentials and tokens (including sign-in via Apple or Google)
App and project data you create (project names, screen configurations, component settings, navigation structure, and media uploads)
App icons, splash screens, and other uploaded assets
Apple Developer account identifiers and credential configuration needed for App Store submission workflows - you retain full ownership of your Apple developer account at all times; Struklio does not take ownership of or act on behalf of your account
Billing and subscription information (processed via Apple In-App Purchase)
Support communications you send to us

Information received from third parties

We receive limited personal information from third-party providers when you use their services to interact with ours:

Apple Sign-In / Google Sign-In: When you authenticate using Apple or Google, those providers share a unique identifier and, depending on your choices, your email address with us. We use this solely to create or match your Struklio account. We do not receive your Apple or Google password.
Apple In-App Purchase: When you subscribe to a Struklio plan through the App Store, Apple processes the payment. Apple shares subscription status and receipt data with us to verify and manage your access. We do not receive or store your payment card details - these remain with Apple.

Information collected automatically

When you use our Services, we automatically collect certain technical information, including:

Log and usage data: IP address, device type, operating system, app version, feature usage patterns, timestamps, and error/crash reports
Device data: Device identifiers, hardware model, and system configuration
Usage metrics: API request volumes and deployment usage counters used for service operations and billing monitoring

2. How do we process your information?

We process your personal information to:

Create and manage your Struklio account and authenticate your sessions
Deliver the core app-builder functionality and save your projects across sessions
Facilitate the App Store build, signing, and submission workflow using your own Apple developer account
Process subscription payments and manage billing
Respond to your support requests and inquiries
Send necessary service-related communications (account notifications, policy updates)
Monitor for fraud, abuse, and security incidents
Improve the reliability, performance, and features of our Services
Comply with applicable legal obligations

3. What legal bases do we rely on?

We process your personal information only when we have a valid legal basis under applicable law, including the GDPR:

Contract performance: To provide the Services you signed up for and fulfil our obligations to you
Legitimate interests: For service security, reliability, fraud prevention, and product improvement - where our interests do not override your fundamental rights and freedoms
Legal obligation: For accounting, tax, and mandatory compliance disclosures
Consent: Where legally required, such as for optional marketing communications. You may withdraw consent at any time by contacting us at info@struklio.com

We are the data controller for personal information processed in connection with the Struklio platform.

We do not sell your personal information. We share data only as necessary to provide the Services:

Cloud infrastructure: EU-based cloud infrastructure for backend hosting, storage, and compute
Website hosting: Our marketing website is hosted via a web platform provider (such as Vercel). Basic request logs and performance data may be processed by that provider in connection with serving the site.
Payment processing: Apple (App Store In-App Purchase), for subscription and billing management
App distribution: Apple, when you initiate a build or App Store submission using your own developer account
Email providers: For transactional service emails
Business transfers: In connection with any merger, acquisition, or sale of company assets, your information may be transferred as part of that transaction

Each third-party processor is engaged under contractual safeguards, including Data Processing Agreements where required by GDPR.

We may also disclose personal data when required by law, such as in response to a valid court order, subpoena, or binding request from a competent authority. Where legally permitted, we aim to narrow any disclosure to the minimum required data and notify affected users.

5. Is your information transferred internationally?

Our primary hosting is within the European Union. Some third-party service providers such as Apple may process data in the United States or other countries outside the EEA.

Where transfers outside the EEA occur, we ensure appropriate safeguards are in place, including the European Commission’s Standard Contractual Clauses (SCCs), to ensure your information receives an equivalent level of protection.

6. How long do we keep your information?

We retain personal information only for as long as necessary for the purposes described in this policy:

Account data: Retained while your account is active. Deleted within 90 days of an account deletion request, unless longer retention is legally required
Project and uploaded content: Retained while your account is active. Content you delete is removed from active systems; backup copies are purged within 30 days
Deployment records and credential configuration: Retained while needed for deployment operations and support, then deleted within 12 months of no longer being required
Support communications: Retained for up to 12 months after the case is closed
Billing and financial records: Retained for 7 years as required for accounting, tax, and legal compliance

7. How do we keep your information safe?

We implement appropriate technical and organisational security measures, including:

Encryption in transit (TLS) for all data transmitted to and from our Services
Token-based authentication and secure session management
Tenant-scoped request handling to isolate your data from other users
Restricted internal access controls
Secure credential handling - sensitive values such as Apple signing keys are not re-displayed after being saved

Despite these measures, no electronic transmission over the internet can be guaranteed to be 100% secure. We cannot promise that unauthorised third parties will never be able to defeat our security, and access to the Services is at your own risk.

8. Do we collect information from minors?

We do not knowingly collect personal information from children under the applicable minimum age in their jurisdiction. If we become aware that we have collected personal data from a minor without appropriate consent, we will delete it promptly. If you believe we have collected information from a minor, please contact us at info@struklio.com.

9. What are your privacy rights?

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have rights under applicable data protection law, including the right to:

Access your personal information and obtain a copy
Rectify inaccurate or incomplete information
Erase your personal information (‘right to be forgotten’)
Restrict processing of your personal information
Data portability - receive your data in a structured, machine-readable format
Object to processing based on legitimate interests
Withdraw consent at any time where processing is consent-based, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at info@struklio.com. We will respond in accordance with applicable data protection law.

If you are in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection authority.

Opting out of marketing

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. We may still send you service-related messages necessary for account administration.

10. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track (‘DNT’) feature. As no uniform standard for recognising DNT signals has been finalised, we do not currently respond to DNT signals. If a standard is adopted that we are required to follow, we will update this notice accordingly.

11. Do we make updates to this notice?

Yes. We may update this Privacy Notice from time to time to reflect changes to our Services, legal requirements, or infrastructure. The updated version will always be indicated by a revised date at the top of this page.

If we make material changes, we will notify you either by posting a prominent notice within the app or by sending you a direct notification. We encourage you to review this notice periodically.

12. How can you contact us?

Struklio Email: info@struklio.com

For questions about this Privacy Notice, your personal data, or to exercise your rights, please contact us at info@struklio.com.

13. How can you review, update, or delete your data?

You may have the right to request access to, correction of, or deletion of the personal information we hold about you, depending on the laws of your country. You may also have the right to withdraw consent or to request that we restrict how we process your information.

To make any such request, contact us at info@struklio.com. We will review and act on your request in accordance with applicable data protection law.