Privacy Policy

1. Owner and data controller

DigitMind Technologies LLP, Astana, Kazakhstan.
Contact: info@digit-mind.com

This Policy covers the AppListingLab website, the free tools under /tools, and the authenticated studio under /app. It supplements the Terms of Service.

2. Data we collect

Account data

• Email address, display name, and a password hash (direct registration), or your Google account email, name, and profile picture (Google sign-in). We never see or store your Google password.

Content you provide

• App screenshots and images you upload, App Store / Google Play URLs you submit for ingestion, app profile details (name, description, brand colors, audience, tone), and text you enter for generation.
• Assets the Service generates for you (screenshot sets, listing copy, icons, media), stored so you can return to them.

Usage and technical data

• Product events (pages viewed, tools used, generation actions), browser and device type, IP address, and referring pages. Analytics is first-party: events are sent to our own backend and are never shared with third-party analytics providers. We do not use session recording.
• Daily generation counters per account, kept to enforce free-plan limits.

Communications

• Messages you send us by email, and our replies.

The free tools (icon generator, image sets, screenshot resizer) process your images entirely in your browser; those files are not uploaded to our servers.

3. How we use data

• to provide the Service: accounts, generation, storage, exports;
• to run AI generation — your relevant content is sent to the processors listed below for the sole purpose of producing your assets;
• to understand and improve the product (first-party funnel analytics and error diagnostics);
• to enforce usage limits and protect the Service from abuse;
• to respond to your requests and to comply with legal obligations.

We process data on the legal bases of performance of a contract (the Service itself), our legitimate interests (analytics, security, abuse prevention), your consent where required, and compliance with legal obligations. We do not sell personal data, and we do not use your content to train AI models.

4. Processors and services we use

• OpenAI — text and vision AI generation (listing copy, screenshot planning). Receives the app context and images needed for the specific generation.
• fal.ai — image and video generation for icons and promotional media. Receives your generation prompts.
• Amazon Web Services (S3) — storage of uploaded and generated assets.
• MongoDB — application database (accounts, projects, generated copy, usage counters).
• Google — optional "Sign in with Google" authentication.
• Apple App Store / Google Play public endpoints — when you submit a store URL, we fetch the public listing metadata and screenshots of that app on your behalf.

Each provider processes data under its own privacy terms; we share only what the specific function requires.

5. Cookies

• Essential: authentication cookies (access and refresh tokens) that keep you signed in. The Service cannot function without them.
• Analytics: a random first-party identifier stored in your browser's localStorage distinguishes returning visitors for our own funnel statistics. It is never shared with third parties and is not used for advertising. No third-party analytics scripts run on this site.

6. Retention

• Account data and stored content: for the lifetime of your account, deleted upon account deletion (backup copies purge on rotation shortly after).
• Usage counters: rolling short-term windows for limit enforcement.
• Raw analytics events: automatically deleted after 90 days.

7. Sharing and international transfers

Data is shared only with the processors above, with authorities where legally required, and in the context of a business transfer (merger, acquisition) under equivalent protections. Our processors operate internationally (including the United States and the European Union); we take commercially reasonable steps to ensure transfers comply with applicable legal requirements.

8. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or a portable copy of your personal data, restrict or object to certain processing, and withdraw consent where processing is based on it. Write to info@digit-mind.com; we respond within a reasonable time and verify your identity before acting. You may also lodge a complaint with a supervisory authority where you live.

9. Children

The Service is not directed to children and may only be used by adults under applicable law. We do not knowingly collect data from anyone under 13; if you believe a minor has provided us data, contact us and we will delete it.

10. Security

Passwords are stored as salted hashes, transport is encrypted (TLS), access to production data is restricted, and API access is rate-limited. No system is perfectly secure; notify us immediately at info@digit-mind.com if you suspect a breach of your account.

11. Changes to this Policy

We may update this Policy; changes appear on this page with an updated date. Material changes are additionally announced in the product or by email where reasonably possible.