Apprtur Privacy Policy

Last updated: November 8, 2026 · Applies to Apprtur, provided by Studio014 Incorporated, a corporation incorporated under the laws of the Province of Alberta, Canada ("Studio014," "we," "us")

Summary (not part of the policy): We collect what we need to run your builds and bill you. We do not sell your information, and we do not use your source code for any purpose other than building your app. Card numbers are handled by Stripe, not by us.

This Privacy Policy explains how Studio014 collects, uses, discloses and protects personal information in connection with the Apprtur build service, Windows application, command-line tool and related services (the "Service"). It forms part of, and should be read with, the Terms of Service. Capitalized terms not defined here have the meanings given in the Terms. We handle personal information in accordance with the Personal Information Protection Act (Alberta), the Personal Information Protection and Electronic Documents Act (Canada) and other privacy law that applies to us.

1. Information We Collect

Category	What	Source
Account	Email address, optional display name, plan and membership status, sign-in confirmation codes, and a hashed access token (we do not store the token itself).	You
Apple credentials	Your App Store Connect key identifier, issuer identifier and private key (stored encrypted), and your team identifier.	You
Repository access	An optional read-only repository access token (stored encrypted), and the addresses of the repositories you build.	You
Devices	The name and unique device identifier (UDID) of each device you register for installation, which is also registered with Apple.	You and your device
Build data	For each Build: repository address, branch, commit, project and scheme settings, start and end time, duration, status and build log. Logs may contain file names, line numbers, error messages and excerpts of your code.	You and the Service
Your source code and build output	Source code fetched from your repository for a Build, and the resulting application package. See section 5 for how they are kept and destroyed.	You
Usage and billing	Build Minutes consumed, balances, credit purchases and ledger entries, and Stripe customer and subscription identifiers. We do not receive or store your card number.	You, the Service and Stripe
Technical	Standard server and security logs, such as IP address, request time and error information, and the version of the Client you use.	Your device
Communications	Messages you send to us.	You

We do not use advertising or cross-site tracking technologies, and the Service does not collect analytics about your behaviour beyond what is described above.

2. How We Use Information

We use personal information only for the following purposes:

to create and secure your account and to authenticate you;
to run Builds, sign and deliver or submit your Application, register your devices, and communicate with Apple on your behalf, as you direct;
to meter usage, process payments and administer plans, credit and membership approvals;
to operate, maintain, secure and troubleshoot the Service, prevent abuse and fraud, and enforce the Terms;
to send you service messages, such as sign-in codes, receipts, membership decisions and notices of change;
to respond to your requests and to comply with legal obligations.

We do not sell personal information, we do not use Your Content to train machine-learning models, and we do not use it for any purpose other than providing the Service to you.

Where the law requires a legal basis for processing, we rely on the performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and your consent where we ask for it.

3. Consent

By creating an account and accepting this policy, you consent to the collection, use and disclosure of your information as described here. You may withdraw consent at any time by closing your account or by writing to us, subject to legal and contractual restrictions. Withdrawing consent may mean that we can no longer provide the Service. You confirm that you have all authority necessary to provide us with any personal information of other persons that is contained in Your Content or provided for your devices.

4. Disclosure to Others

We disclose personal information only as follows:

Apple, when we call the App Store Connect interface, register your devices, sign your Application, or submit a Build at your direction.
Your repository host (for example GitHub), which receives requests from our build machines to fetch your code, using any access token you provided.
Stripe, which processes payments and holds your payment details under its own privacy policy.
Cloudflare, which provides temporary storage for build output and hosts our website.
Our email delivery provider, which sends service messages to you.
Professional advisers, regulators and authorities, where required by law, legal process or to protect rights, safety or security.
A successor, in connection with a merger, financing, acquisition or sale of assets, subject to this policy.

These providers act on our behalf or on yours, as described, and are permitted to use personal information only as necessary for that purpose and under their own terms. We do not otherwise disclose your source code, credentials or build output to any person.

5. Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, and then delete or de-identify it. We apply two standards.

Sensitive information. Your source code, build output, build logs, Apple credentials, repository tokens and any copy of them made for a Build are kept only while we need them to perform the Service, to meter and support your account and to keep it secure, and are then destroyed. Credentials sent to a build machine for a Build are removed when that Build ends. Installable build output is deleted when you confirm receipt, and in any event within sixty (60) minutes. All sensitive information we hold for you is destroyed when your account is closed, except for routine backups and where the law requires otherwise. You may remove stored credentials at any time.
Other information. Account details, plan and billing records, usage and metering records, device records, the repository address, branch, status and duration of each Build, and server and security logs are kept for as long as reasonably necessary for billing, tax, accounting, security, support and legal purposes, and may then be deleted or de-identified at our discretion. We do not commit to a minimum or a fixed period, and we retain financial records for as long as the law requires.

Deleted information may remain in routine backups until they are overwritten in the ordinary course, and is not restored to the Service other than to recover from a failure.

6. Security

We protect personal information with safeguards appropriate to its sensitivity, including encryption of Apple credentials and repository tokens at rest, encrypted transmission, storage of access tokens only as hashes, access controls, build machines that accept no inbound connections from the internet, and removal of per-Build credentials when a Build ends. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for the security of your own devices and account, and for revoking any Credential you believe is compromised. You may revoke your App Store Connect API key at any time in App Store Connect.

7. Where Information Is Processed

We operate from Canada, and our service providers, including Apple, Stripe and Cloudflare, may process information in Canada, the United States and other countries. When information is processed outside Canada, it may be subject to the laws of that country, including laws permitting its courts, law-enforcement and security authorities to access it.

8. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of the personal information we hold about you, and may ask questions or make a complaint about our practices. To do so, write to us at the address in section 11. We shall respond within the time that the law requires, and may need to verify your identity. We may decline a request in the cases that the law permits, in which case we shall explain why. If you are not satisfied, you may complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada. If you are in a jurisdiction with additional rights, such as the European Economic Area, the United Kingdom or certain U.S. states, we shall honour those rights to the extent they apply to us.

9. Children

The Service is intended for persons eighteen (18) years of age or older. We do not knowingly collect personal information from anyone under that age, and will delete it if we learn that we have.

10. Changes to This Policy

We may update this policy from time to time. For a material change we shall give you notice by email or in the Service, and the Service may ask you to accept the revised policy the next time you sign in. The "Last updated" date above shows when it was last revised.

11. Contact

Privacy questions, requests and complaints may be sent to our privacy contact at info@studio014.com.