Everything we have
put in writing
15 documents. Each one carries a version number and an effective date, and every change is recorded at the bottom of this page.
Reviewing one of our apps?
These are the five URLs submitted with an app listing. The first one answers Apple, Google and Shopify separately, in each platform’s own vocabulary.
- App Store DisclosuresApple, Google and Shopify answered separately
- Privacy PolicyThe privacy URL submitted with every app
- Delete Your AccountGoogle Play’s Delete Account URL
- End User License AgreementCarries Apple’s required minimum terms
- SupportThe Support URL on every store listing
Privacy and your data
What we do with information about people, and how you get it back or get it deleted.
Privacy Policy
What personal information we handle and why. How long we keep it, who else sees it, and how you get it back or deleted.
- Apple 5.1.1(i)
- Apple 5.1.2(i)
- Google Play User Data
- Shopify
- GDPR Art. 13 and 14
- CCPA and CPRA
Cookie Policy
Which cookies and similar technologies this website and our apps use. The list is short on purpose.
- ePrivacy Directive
- CPRA
- Google Play ads policy
Subprocessors
Every third party that processes personal information on our behalf, what it does, and where it runs.
- GDPR Art. 28(2)
- Shopify protected customer data
- Merchant diligence
Delete Your Account
How to delete an account and everything attached to it, from the web, without reinstalling anything.
- Google Play account deletion
- Apple 5.1.1(v)
Privacy Rights Request
Ask for a copy of your data, a correction, a deletion, or an opt out, and appeal if we say no.
- CPRA
- Virginia, Colorado, Connecticut, Texas and peers
- GDPR Art. 15 to 22
Agreements
The contracts. What we owe you, what you owe us, and what happens when something goes wrong.
Terms of Service
The agreement covering this website and any subscription bought directly from us.
- Apple 3.1.2
- Google Play Payments
- Shopify Partner Program Agreement
End User License Agreement
The license covering our mobile applications, including the minimum terms Apple requires.
- Apple Schedule 1 minimum terms
- Apple 3.1.2
Acceptable Use Policy
What you may not do with our software, and what happens if you do it anyway.
- Shopify Acceptable Use
- Google Play
- Apple 1.x
Data Processing Addendum
Our processor obligations when we handle personal information on behalf of a business customer or a merchant.
- GDPR Art. 28
- UK GDPR
- Shopify protected customer data
Billing and Refunds
How subscriptions renew, how to cancel one, and who issues a refund depending on where you bought it.
- Apple 3.1.1
- Google Play Payments
- Consumer protection law
How we operate
How the company runs, and the answers reviewers and buyers ask for.
Security
How we protect data, how we respond to an incident, and how to report a vulnerability.
- GDPR Art. 32
- Shopify
- Business buyer diligence
App Store Disclosures
Answers to what Apple, Google and Shopify each ask at review, in one place, with links into the detail.
- Apple App Review
- Google Play Console
- Shopify App Store
Copyright and DMCA
How to report copyright infringement and how to file a counter notice.
- 17 U.S.C. 512
- Apple 5.2
Accessibility
What we build to, where we currently fall short, and how to report a barrier.
- WCAG 2.2 AA
- ADA exposure
- Procurement
Per application supplements
One per application, covering what that application collects and which device permissions it asks for. The general policy still applies, and a supplement controls where the two differ.
Spinbin Terms of Service and Privacy
What Spinbin collects, which device permissions it asks for, and the terms you agree to when you use it to list records on eBay.
- Apple 5.1.1(i)
- Apple 5.1.2(i)
- Apple 5.1.1(v)
- Apple Schedule 1 minimum terms
- Google Play User Data
- Google Play trader declaration
- eBay API License Agreement 4.2
- Discogs API Terms of Use
- ROSCA and state automatic renewal law
What has changed, and when
Platforms have started asking when a policy last changed. This is the answer. When a document changes materially, we say so here and give notice before it takes effect.
- First publication of the full library at version 1.0.
- Privacy Policy 1.1. Adds Section 18 on connectors, APIs and AI assistants. A connection is off until you turn it on. We never send data to an AI provider on our own initiative. Anything reaching the assistant you chose is held under that provider’s terms rather than ours. Section 6 now covers models we train ourselves, not only models trained for anyone else. The Subprocessors page explains why an assistant you connect is not a subprocessor. Nothing here reduces your privacy.
- Privacy Policy 1.2. Section 18 now covers automation platforms such as Zapier, not only AI assistants. A connector of that kind is a route rather than a destination. What reaches it can go on to whichever other service you pointed it at, each with its own terms. The section also describes connections that send a message out when something happens, as well as those that ask us for data. The Subprocessors page makes the same widening. Nothing here reduces your privacy.
- Subprocessors 1.1 and Privacy Policy 1.3, with the first per application supplement. Four providers join the subprocessor list. OpenAI identifies an item from photographs and drafts a listing description. Discogs receives search terms and no personal information. Sentry receives crash reports with the collection of personal information switched off. The entries for Vercel, Apple and Google widen to name hosting of our web applications, push notifications and the two sign in services. The Subprocessors page now says separately what the one AI provider receives and what happens to it. Section 17 of the Privacy Policy lists the published supplements instead of only promising them, and the Spinbin supplement is the first. App Store Disclosures 1.1 adds a section for Apple guideline 5.1.2(i). It names the one application that shares data with an AI service, what is sent, and what happens to it afterward. Section 6 of that page now links the supplement rather than offering to send it on request. Nothing here reduces your privacy.
- Privacy Policy 1.4 and Spinbin supplement 1.1, both for Apple App Review. Section 5 of the policy carries an outright promise now. Every third party we share personal information with gives it the same or equal protection as this policy. That covers service providers, analytics tools, software kits, and any parent or related company. The Spinbin supplement says that the application asks permission before the first photo is sent to OpenAI. It gives the path for withdrawing that permission, and the path for removing photos already stored. It also states how long OpenAI keeps what we send, which is up to 30 days, read off their own published terms. Nothing here reduces your privacy.
- Spinbin supplement 1.2 adds Terms of Service for Spinbin, as Sections 9 to 24. They cover plans, credit packs, the eBay connection and AI drafts. The page is now the Terms of Service link for the Google Play trader declaration as well as the privacy link. Subprocessors 1.2 removes a provider that is no longer used, which reduces where data goes. End User License Agreement 1.1 adds the telephone number and email address Apple asks a developer to publish. Billing and Refunds 1.1 notes that an application may set extra rules for one-time purchases on its own page. Nothing here reduces your privacy.
Something here unclear?
These documents are written to be read, not to be survived. If a section does not make sense, or you think something in it is wrong, tell us and we will fix the wording. That has happened before and the documents got better for it.
Native Code LLC is based in Las Vegas, Nevada. These documents are governed by Nevada law, and we answer within one business day.