Privacy Policy

Last updated 24 October 2026

Who we are

Angelfish helps you build iPhone apps by describing them. The operator of Angelfish ("we") is the controller for your account and project data. For the people who use the apps you publish, you are the controller and we process their data on your behalf (see "Your apps' users" below). Contact us at hello@angelfish.chat.

What we collect

• Account details: your email address, sign-in records, and your settings.
• Your projects: what you ask for in the chat, the code, files, images and screenshots made for your app, and your App Store listings and privacy answers.
• Your apps' data: what your apps store on the servers we run for them (their databases, sign-ins and files), which we process for you.
• Billing: your plan, invoices and payment status. Card details go straight to Stripe; we never see or store them.
• Apple: if you connect your App Store Connect key, we store it encrypted and use it only to publish and manage your apps. Signing keys we create for your apps are encrypted so that only our signing machines can use them.
• Usage and device data: IP address, browser and device type, pages and actions in the service, and error logs, used to run and secure it.
• Messages you send us.

Please don't put sensitive personal information (for example health details or other people's data) into your requests unless your app needs it.

Why we use it, and our legal bases

• To provide the service you signed up for: building, previewing, hosting and publishing your apps, and billing you (contract).
• To keep the service secure, prevent abuse and fraud, fix problems and understand how it's used in aggregate (our legitimate interests).
• To keep records the law requires, such as tax records (legal obligation).
• To send you news or offers, only if you've agreed; you can stop at any time (consent).

We don't sell your data, we don't use it for advertising, and we don't use your projects to train AI models.

Cookies

We use the cookies needed to keep you signed in and keep the service secure. With your permission, we also use PostHog to understand visits, signups and use of Angelfish, and Meta Pixel and the Conversions API to measure advertising and find people interested in Angelfish. You can accept or reject these separately and withdraw permission using Privacy choices. Optional measurement is off until you agree. We do not include your app descriptions, messages, code, or uploaded files in these events. Session recording is off.

Who helps us

These providers process data for us under contracts that limit them to providing their service. Each handles only what its part needs.

• Anthropic: the AI that builds your app. It processes your project content as our processor and doesn't use it to train its models. Anthropic stores data in the United States; transfers there are covered by the Standard Contractual Clauses and the UK Addendum in its data processing terms, and it publishes its own list of sub-processors. It keeps a project's working history until we delete it, which we do when you delete the project.
• GitHub: stores your app's code.
• Google Cloud: runs our service and stores its database and backups, in Belgium (EU).
• Cloudflare: runs your apps' servers and updates, and stores your apps' databases, sign-ins and files (by default in Western Europe) and our own files.
• OpenRouter: your apps' AI features, when your app has them.
• Resend: sends sign-in codes and your apps' emails.
• Stripe: our billing.
• Apple: when you publish, using your own Apple account.
• Rented Mac servers in Europe: build and preview your apps.

We may also share data if the law requires it, to protect people's safety or our rights, or with a company that takes over the service (which must keep this policy's promises).

International transfers

Some providers process data outside the UK and EU, mainly in the United States. Where they do, we rely on adequacy decisions (including the UK–US data bridge) or the European Commission's Standard Contractual Clauses with the UK Addendum.

How long we keep it

• Account and project data: while your account is open. When you delete a project, we delete its agent history, code, files and app data within 30 days. When you close your account, we delete your data within 30 days of the 30-day export period ending.
• Backups are overwritten within a further 30 days.
• Logs: up to 90 days.
• Billing records: six years, as tax law requires.

Security

We encrypt data in transit, keep keys and secrets encrypted at rest and away from the code the AI writes, use providers that encrypt stored data, and limit who and what can reach your data. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, or take it elsewhere. Where we rely on consent, you can withdraw it at any time. You can export your app's code and data at any time. We reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office in the UK or your local data protection authority in the EU.

Children

Angelfish is for people aged 18 and over. If we learn we have data about a child, we delete it.

Your apps' users

When you publish an app, you decide what it collects and you're responsible for its privacy policy and for answering its users. We generate a privacy policy for each app from the answers in its listing and host it for you, but you must check it's accurate. We process your users' data only for you, as described in our Terms. If one of your users contacts us, we'll pass the request to you.

Changes

We'll update this policy when what we do changes, and tell you about important changes by email or in the service before they take effect.

Contact

hello@angelfish.chat