MYDAPPR / Privacy Policy
Privacy
Policy.
At mydappr, privacy is fundamental to everything we build. This policy covers how we handle data across all our products and services.
THE FULL PICTURE
Read at your own pace.
Jump to a section, search the full document, or print a complete copy for later.
privacy@mydappr.io15 sections
Privacy Overview
At mydappr, privacy is fundamental to everything we build. This policy covers how we handle data across all our products and services.
Effective date: October 8, 2026
Last updated: October 8, 2026
Highlights
- Unified privacy standards across all mydappr products
- Transparent data collection and usage practices
- User control and data ownership by design
- Designed to meet GDPR, CCPA and other applicable privacy laws
- Ongoing security reviews and updates
This policy applies to all mydappr services:
- All current and future Mydappr products and services
Data We Collect
We collect only the data necessary to provide our services. The specific data varies by product, but here's what we may collect:
Categories
Account & Profile Information
- Email address (when provided)
- Username or display name (if you create one)
- Profile information (bio, skills, preferences)
- Authentication tokens and session data
- Service-specific profiles (freelancer info, saved tools, etc.)
Usage & Interaction Data
- Features you use across our products
- Search queries and filters
- Content you create, save, or interact with
- Communication preferences
- Performance metrics and error logs
Technical Information
- IP address and approximate location
- Browser type and device information
- Operating system and version
- Referral sources
- Session duration and frequency
Product-Specific Data
- Authentication methods and security preferences
- Tool interests and discovery patterns
- Skills, work history, and project details
How We Use Your Data
Every piece of data serves a specific purpose in improving your experience across mydappr products:
Purposes
Service Delivery
Providing core functionality across all our platforms - authentication, discovery, matching, and transactions.
Data used
- Account information
- Usage patterns
- Service preferences
- Technical data
Personalization
Customizing your experience based on your preferences and usage patterns, where applicable.
Data used
- Interaction history
- Saved preferences
- Profile settings
- Usage analytics
Security & Compliance
Protecting accounts, preventing fraud, and meeting legal obligations across all services.
Data used
- Authentication data
- Security logs
- IP addresses
- Access patterns
Product Improvement
Enhancing our services based on aggregated usage data and user feedback.
Data used
- Feature usage
- Error reports
- Performance metrics
- User feedback
Your Privacy Rights
You have complete control over your data across all mydappr services. Your rights include:
Rights
Access Your Data
Request a complete export of all data we have about you across any mydappr product.
Action: Email privacy@mydappr.io or use in-product export tools
Correct Information
Update or correct any personal information in your profiles across our services.
Action: Edit directly in your account settings or contact support
Delete Your Data
Request deletion of your account and data from any or all mydappr services.
Action: Submit deletion request to privacy@mydappr.io
Data Portability
Export your data in standard formats to transfer to other services.
Action: Use export features or contact support for assistance
Withdraw Consent
Revoke consent for data processing or communications at any time.
Action: Update preferences in account settings
Product-Specific Practices
While our privacy principles apply universally, here are product-specific details:
Products
Authentication & Security
Practices
- Minimal data collection for authentication
- Passwordless options available
- Session data encrypted in transit
- No tracking across external sites
Tools & Discovery
Practices
- Anonymous browsing by default
- Tool interaction data for recommendations
- Community contributions are public
- Saved tools linked to your profile
Skills Marketplace
Practices
- Profile visibility controls
- Skill verification data handling
- Transaction history for disputes
- Communication logs for quality assurance
Data Security
We use technical and organisational measures designed to protect data across all mydappr services:
Measures
- Encryption in transit (HTTPS/TLS) and at rest through our hosting and database providers
- Security reviews and testing as part of our development process
- Hosting with established cloud providers that operate secure, resilient data centres
- Access controls and monitoring
- Documented incident response procedures
- Practices informed by recognised industry guidance
Security Incident Reporting
Content: Report security concerns to security@mydappr.io. We review every report and prioritise it by severity.
Response: We work to fix serious vulnerabilities as quickly as possible and notify affected users where required by law.
International Data
mydappr serves people in many countries and aims to apply consistent data protection standards wherever we operate:
Data Transfers
Your data may be processed in different countries where mydappr operates.
Safeguards
- Standard contractual clauses or another approved transfer mechanism where the law requires one
- Service providers bound by data protection obligations
- Encryption in transit for data transfers
Regional Compliance
Regions
European Union (GDPR)
Status: Rights supported
Specifics: Access, correction, deletion, restriction, portability and objection rights
California (CCPA)
Status: Rights supported
Specifics: Do not sell policy, data access rights, opt-out mechanisms
Other Regions
Status: Consistent standards
Specifics: We apply the same core privacy practices wherever you are
Children's Privacy
We take children's privacy seriously across all mydappr services:
Age Requirements
Our services are not directed to children under 16.
- Users must be 16+ to create accounts
- We don't knowingly collect data from children
- Parental consent required for users under 18 in some regions
If We Discover Underage Users
- Immediate suspension of account access
- Notification to provided guardian contact
- Data deletion upon verification
- Restoration only with proper consent
Reporting: Report underage users to privacy@mydappr.io
Policy Updates
We review and update our privacy practices as our services and the law change:
How We Handle Changes
- Periodic privacy reviews
- Updates for new features or regulations
- The date at the top of this policy shows the latest version
- Advance notice of material changes where required by law
How We'll Notify You
Methods
- Updating the date at the top of this policy
- Email or in-product notice for material changes, where appropriate
- Previous versions available on request
Your Options
Content: Continued use after notification constitutes acceptance. You may export your data and close your account if you disagree with changes.
Contact & Questions
We're here to help with any privacy concerns or questions:
Contacts
Privacy Team
Email: privacy@mydappr.io
Response: We aim to reply within a few business days
For: Privacy questions, data requests and GDPR or CCPA enquiries
Security Team
Email: security@mydappr.io
Response: Prioritised by severity
For: Security concerns and vulnerability reports
Additional Resources
Links
Terms of Service
Our terms governing use of mydappr services
Cookie Policy
Detailed information about our cookie usage
Data Retention
We keep your data only as long as necessary to provide our services and comply with legal obligations.
Periods
Category: Account Data
Type: Active accounts
Period: Duration of account + 30 days
Reason: Service continuity
Type: Deleted accounts
Period: 30 days after deletion
Reason: Recovery window
Type: Authentication logs
Period: 90 days
Reason: Security monitoring
Category: Usage Data
Type: Analytics data
Period: 12 months
Reason: Service improvement
Type: Performance logs
Period: 30 days
Reason: Debugging
Type: Search history
Period: 6 months
Reason: Personalization
Category: Legal & Compliance
Type: Transaction records
Period: 7 years
Reason: Tax compliance
Type: Consent records
Period: Duration of processing + 3 years
Reason: GDPR compliance
Type: Data deletion requests
Period: 3 years
Reason: Audit trail
Exceptions: We may retain data longer if required by law, legal proceedings, or legitimate business interests.
Legal Basis for Processing
Under GDPR, we process your data based on the following legal grounds:
Bases
Consent
You've given explicit consent for specific purposes
Examples
- Marketing emails
- Profile sharing between products
You can withdraw consent at any time in your account settings, with the unsubscribe link in our emails, or by contacting privacy@mydappr.io
Contract
Processing is necessary to fulfill our agreement with you
Examples
- Account creation
- Service delivery
- Payment processing
Cannot be withdrawn while using our services
Legitimate Interest
We have a legitimate business reason that doesn't override your rights
Examples
- Security monitoring
- Fraud prevention
- Product improvement
- Website analytics
You can object to this processing, and you can turn off website analytics at any time in Cookie preferences
Legal Obligation
We're required by law to process this data
Examples
- Tax records
- Court orders
- Regulatory compliance
Cannot be withdrawn due to legal requirements
Data Breach Response
While we work hard to prevent breaches, transparency is key if one occurs:
Our Response Process
Time: As soon as we become aware
Action: Contain the incident and begin investigating
Time: Promptly
Action: Assess the impact and identify affected users
Time: Within 72 hours where required by law
Action: Notify the relevant data protection authority
Time: Without undue delay
Action: Notify affected users if there is a high risk to them
What We'll Tell You
- Nature of the breach and data affected
- Potential consequences and risks
- Measures we've taken to address it
- Steps you can take to protect yourself
- Contact information for questions
How We Prevent Breaches
Measures
- Security reviews and testing as part of development
- Security awareness across our team
- Encryption at rest and in transit
- Access controls and monitoring
- Documented incident response procedures