Privacy policy
Last updated 18 October 2026 TODO Adam: review before relying on this; not legal advice
HelloPack turns your app screenshots and a short description into localized store screenshots and listing text. This page explains, in plain language, what we collect, why, who helps us process it, how long we keep it, and what you can ask us to do.
Who we are
HelloPack is the controller of your personal data. Contact: [email protected]. TODO Adam: legal name of the business (person or company) and postal address. Required in the EU; left blank on purpose.
What we collect
- Your email address: to sign you in with a one-time link, link your orders to you and send you your downloads.
- What you upload: screenshots, captions/headlines and the app details you type or paste (name, features, colours, fonts, tone).
- What we generate for you: translated captions, rendered screenshots and store listing text (descriptions, keywords).
- Payments: handled by Stripe. We never see or store your card number. We keep a minimal record of each payment: date, plan, amount, currency, the email it was paid with and Stripe's reference. We also keep your agreement to start delivery right away, which is needed for the EU right of withdrawal.
- Technical data: a sign-in cookie (only for keeping you signed in; no advertising or tracking cookies), plus the IP address recorded when you agree to the payment terms. Server logs may briefly contain IP addresses. TODO Adam: confirm log retention on the server
Why we use it (legal basis)
- Providing the service you asked for: performance of a contract (GDPR Art. 6(1)(b)).
- Payment and tax records: legal obligation (Art. 6(1)(c)).
- Keeping the service secure and preventing abuse, such as rate limits on sign-in links: legitimate interest (Art. 6(1)(f)).
We don't sell your data, use it for advertising, or use your uploads to train AI models.
Who processes it for us
| Processor | What for | Data |
|---|---|---|
| Stripe | Payments and invoices | Email, payment details, amount |
| Resend | Sending sign-in and download emails | Email address, email content |
| Google (Gemini API) | Reading headlines from screenshots, translating captions, writing listing text | Your screenshots, captions and app details |
| netcup (server hosting, Germany) | Running HelloPack and storing files | Everything above |
Some processors (Stripe, Resend, Google) may process data outside the EU, for example in the USA, under Standard Contractual Clauses or the EU–US Data Privacy Framework. TODO Adam: confirm the DPA with each processor and their transfer mechanism; confirm the server location and Gemini's paid-tier data terms
How long we keep it
- Screenshot sets (uploads, rendered images, download links) are deleted automatically 7 days after you create them.
- Apps and listing text stay until you delete them or your account.
- Your account (email, sessions) stays until you delete it. Sign-in links expire after 15 minutes and sessions after 30 days.
- Payment records stay as long as tax law requires, even after you delete your account. TODO Adam: confirm the period for your tax residence (e.g. 5 years in Poland, 10 in Germany)
- AI responses: to avoid paying twice for identical requests, we may cache AI responses on our server. TODO Adam: decide the cache retention; it is not yet purged on account deletion
Your rights
You can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent. You can do two of these yourself on your Account page:
- Download my data gives you a JSON file of your account, apps and orders.
- Delete my account removes your account, apps, screenshot sets and sessions straight away. Only the minimal payment records described above are kept.
For anything else, email [email protected]. We reply within one month. You can also complain to your data protection authority (in Poland: UODO, uodo.gov.pl). TODO Adam: name the lead authority for your place of establishment
Children
HelloPack is a tool for app developers and isn't meant for children under 16.
Changes
If we change this policy in a way that matters, we'll update the date above and, for big changes, email account holders.