Privacy Policy

Effective date: 2026-05-29. App: AppAiCity. Operator: SoftAuto (Canada). Contact: support@appaicity.com.

This policy explains what data AppAiCity ("the App", "we") collects, why we collect it, how it is stored, who it is shared with, and how you can review or delete it.

1. Data we collect

Account data — email address, username, display name, optional avatar, locale, platform tag. Collected when you register or sign in.
App content — the apps you add to your city, theme selection, custom subtitle, favorites, layout drafts. Stored on our server so they sync across your devices.
AI assistant input — only the prompts and context you explicitly send to the in-app AI assistant. Sent to the third-party model provider (DeepSeek) over HTTPS only when you opt in to an AI feature; never sent in the background.
Verification codes — 6-digit codes sent to your email via Resend to confirm ownership of your address. Codes expire after 5 minutes and are not stored after they are consumed.
Diagnostics — minimal server-side logs (timestamps, anonymised request paths, error stack traces) for stability and abuse prevention. Not used for advertising.

We do not collect: precise location, contacts, microphone, camera, SMS, call logs, health data, or the list of apps already installed on your device. We do not use advertising identifiers.

2. How we use data

To authenticate you and keep you signed in.
To sync your city layout, themes, and saved drafts across devices.
To send the email verification code you requested.
To diagnose crashes and prevent abuse of our service.
To generate AI responses, only for the request you submitted.

3. Who we share data with

Resend (transactional email provider) — your email address only, so we can deliver the verification code.
DeepSeek (AI model provider) — only the AI prompt and context you choose to send.
Hosting provider (Vultr) — operates the server that stores the data described above.

We do not sell or rent your data, and we do not share it with advertisers.

4. How we store and protect data

All network traffic is encrypted with HTTPS/TLS. Passwords are stored with BCrypt one-way hashing — we cannot read them. Authentication uses signed JWT tokens with limited lifetime.

5. Data retention

We keep your account data for as long as your account exists. When you delete your account (see Section 6), all account-linked data is removed from our active database immediately. Backups and operational logs are rotated and overwritten within 30 days.

6. Your rights (access, correction, deletion)

You can:

Delete your account in the app: open Profile → Settings → Delete account. This permanently removes your account, your apps, drafts, parental config, chat messages, and avatar.
Request a copy or correction by emailing support@appaicity.com. We respond within 30 days.
Withdraw consent for the AI assistant by simply not using the AI feature; no AI requests are sent without your explicit action.

7. Children

The App is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please contact support@appaicity.com and we will delete it.

8. International transfer

Our servers are located in North America. By using the App you consent to the processing of your data in this region.

9. Changes to this policy

If we materially change this policy, we will update the effective date above and, where required, notify you in the app or by email before the change takes effect.

10. Contact

Privacy questions and deletion requests: support@appaicity.com.