Privacy Policy

Last updated: 2 October 2026

1. Introduction

AppMecca is operated by UNOMENA ("we", "us", "our"). This policy explains how we collect, use, store, and protect your personal information when you use our platform and website.

We respect your privacy and are committed to protecting it. We collect only what we need to provide the Service, and we never sell your data.

2. Information we collect

Information you provide

  • Account information: your email address, and your name if you give it to us or your sign-in provider shares it. There are no passwords: you sign in with Google, GitHub or GitLab, or with a one-time code we email to you.
  • Messages you send us: by email, or through the contact and early-access forms on this website. A form sends us an email containing what you entered: on the contact form, your name, email address, the subject you chose and your message; on the early-access form, your email address and, if you add it, what you want to deploy. This website keeps no copy.
  • Your Content: application code, configuration, and data you deploy on the Service

Information collected automatically

  • Usage data: what you do in the Service — builds, deploys, commands you run in your apps, and API calls.
  • Sign-in and security records: when you sign in, and the IP address and browser or client behind each session and each recorded change to your account, groups and apps.
  • This website collects nothing automatically: it runs no analytics and sets no cookies.

Information from third parties

  • OAuth providers: when you sign in with GitHub, Google, or GitLab, we receive your name, email, and profile identifier as authorized by you
  • Linked Git accounts: if you connect a GitHub or GitLab account so that we can build from your private repositories, we keep an access token for that account, encrypted. We use it only to list your repositories, to fetch the code of the apps you deploy and, if you turn on deploy on push, to set up the webhook that tells us about your pushes.

3. How we use your information

We use your information to:

  • Provide, maintain, and improve the Service
  • Send the emails the Service needs: sign-in codes, email-address verification and team invitations
  • Respond to support requests and communications
  • Detect, prevent, and address abuse, fraud, and security issues
  • Measure how the Service is used, in aggregate — for example how many builds and deploys run — to operate and improve it

We do not use your information for advertising or sell it to third parties.

4. Data storage and security

Your data is stored on infrastructure hosted by Amazon Web Services (AWS). Each AppMecca environment runs in a single AWS region — currently us-east-2 (Ohio, United States) — across multiple availability zones. We will publish additional regions as they become available. We implement industry-standard security measures including:

  • Encryption in transit (TLS) between you and the Service, and between the Service and its databases and cache; databases, object storage, file storage and cache encrypted at rest with AES-256
  • Private networking — application hosts have no public IP address and are not directly reachable from the internet
  • Access controls and authentication for all internal systems, with an audit log of administrative actions
  • A backup of your app's database before every deploy, plus on-demand backups of your database and drives that you control

5. Data sharing

We share your information only in these circumstances:

  • Service providers: Amazon Web Services, which hosts the Service and delivers its email (Amazon SES), and Google Workspace, which hosts our email inbox. They process data on our behalf under their data-processing terms.
  • This website shares nothing with third parties: it serves its own fonts and runs no analytics.
  • Legal requirements: when required by law, regulation, or legal process
  • Safety: to protect the rights, safety, and property of our users and the public
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with prior notice

We do not share Your Content (application code and data) with anyone. You decide who can reach your apps: a new app is private to your group until you publish it, and everyone in your group can see and operate the group's apps.

6. Your rights

You have the right to:

  • Access your personal information held by us
  • Correct inaccurate or incomplete information
  • Delete your account and associated data
  • Export your data in a portable format
  • Object to processing of your data in certain circumstances
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at info@appmecca.com.

7. Cookies and analytics

In the Service (the dashboard and API), we use only the cookies it needs to work: to sign you in and keep you signed in, and to remember which branch of an app you were viewing. No tracking cookies, no advertising cookies.

This website sets no cookies and runs no analytics. If that ever changes, we will update this policy and ask for your consent first.

8. Data retention

  • Account data: kept while your account is open, and deleted within 30 days of closing it.
  • Your Content: deleted within 30 days of closing your account, or of asking us to delete it. When you delete an app yourself, we stop it and delete its database at once. Its stored files and backups, including a final backup of its database taken just before deletion so that a mistake can be undone, stay until you close your account or ask us to delete them.
  • Backups we keep to recover the platform itself: up to 35 days for databases and 90 days for file storage. Deleted data leaves them on that schedule.
  • Logs: the logs your apps write, and the platform's own logs: 365 days.
  • Deploy records and commands you run in your apps: 30 days after they finish. Build records, with their build logs, are kept while the app exists.
  • Log lines and container metrics copied into our database for the dashboard: 7 days.
  • Email delivery records (the recipient's address, a message ID and the delivery status — never the content): 90 days.
  • Sign-in and security records: kept while your account is open; records of changes made to your apps are kept for as long as we run the Service.
  • Messages you send us: as long as we need them to answer you.
  • Billing records: once paid plans begin, kept for 7 years, as tax and accounting rules require.

9. International transfers

Your data may be processed in countries other than your own, including the United States (where AWS infrastructure is located). We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

10. Children's privacy

The Service is not directed to individuals under 18. We do not knowingly collect information from children. If you believe we have inadvertently collected such information, contact us and we will promptly delete it.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or through the Service at least 14 days before they take effect.

12. Contact

For privacy-related questions or requests, contact us at:

13. Data Protection Officer

UNOMENA's Data Protection Officer can be reached at info@appmecca.com.