Privacy Policy
Last updated 12 August 2026
Drafted for FreeAppDrop's actual data practices, not generic filler — but it hasn't had a lawyer's review. Get one before processing EU/UK personal data at meaningful scale.
Who we are
FreeAppDrop ("we", "us") operates freeappdrop.com, a marketplace connecting indie iOS developers with people looking for free or discounted apps. We are the data controller for the personal data described below. You can reach us via the contact page or hello@freeappdrop.com.
What we collect
Account details you provide (email, display name), activity on FreeAppDrop (apps viewed, codes claimed, apps saved, developers followed, notification preferences), and basic technical data (device type, referrer, a hashed IP address used only for abuse detection — we never store your raw IP). If you become a developer, we also hold your app listings, promotion details, and — via Stripe — your subscription status; we never see or store your card details ourselves.
Why we're allowed to use it
Most processing relies on performance of a contract — we can't run a claim system without recording who claimed what. Abuse detection and basic product analytics rely on our legitimate interest in keeping the platform working and fair, balanced against your privacy. Marketing-style emails (as opposed to transactional ones like claim confirmations) only go out if you've opted in, which you can withdraw at any time from account settings.
How we use it
To operate the claim system (recording who claimed which code, once, so codes can't be double-claimed), to send transactional emails you've opted into (claim confirmations, offers ending soon, updates from developers you follow), and to give developers aggregate analytics on their own promotions — never a claiming user's personal identity.
Who we share it with
We don't sell personal data, and developers only ever see aggregate claim counts for their own promotions, never who claimed them. We use a small number of processors to run the service: Supabase (database and authentication), Stripe (developer subscription billing), and an email provider (transactional email delivery). Each only receives what it needs to do its job, under its own data processing terms.
International transfers
Some processors above may store or process data outside the UK/EEA (for example, in the US). Where that happens, we rely on the processor's own adequacy mechanisms (such as Standard Contractual Clauses) to keep the transfer lawful.
How long we keep it
We keep account and claim data for as long as your account is active, plus a limited period afterward for fraud prevention and legal record-keeping. If you delete your account, we remove or anonymize personal data within a reasonable period, except where we're required to retain it (for example, billing records for tax purposes).
Your rights
If UK/EU data protection law applies to you, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where we rely on it. To exercise any of these, contact us via the contact page. If you're not satisfied with our response, you can complain to your local data protection authority (in the UK, the ICO).
Children
FreeAppDrop isn't directed at children under 16, and we don't knowingly collect their personal data.
Security
We use industry-standard measures to protect your data — encrypted connections, row-level access controls on our database, and least-privilege access for anyone working on FreeAppDrop. No system is perfectly secure, but we take reasonable steps to keep yours safe.
Cookies
See our separate Cookie Policy for details on the cookies we use to keep you signed in and remember preferences.
Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected here with an updated date.