Privacy Policy

• Enquiry and intake information: your name, email address, company, your web application's URL, your app name, and the icon and details you upload to the intake form.
• Project communications: emails and messages exchanged while we deliver your project.
• Payment information: processed by our payment provider. We receive confirmation that a payment succeeded and the last four digits of the card. We never see or store your full card number.
• Technical information: standard server logs (IP address, user agent, pages requested), retained for security and abuse prevention.

We do not run advertising trackers on this site.

To build and submit your app we need access to your Apple Developer and Google Play accounts, and to your web application. This access is used ONLY to build, sign, submit and release your app.

We do not read, copy, export or retain your end users' data. We do not need it and we do not want it.

You can revoke our access at any time, from your own developer accounts, and we immediately lose all ability to act on your behalf. We ask you to do exactly that once your project is complete.

• To deliver the Service you purchased
• To communicate with you about your project
• To process payment and issue receipts
• To meet our legal and accounting obligations

Our lawful bases are: performance of a contract with you, and our legitimate interest in operating and securing the service.

We do not sell or rent your personal information. We share it only with the providers needed to run the service, and only as far as necessary:

• Our payment provider, to take payment
• Our hosting and infrastructure providers
• Apple and Google, when submitting your app on your behalf
• Our email provider, to communicate with you

We may also disclose information where we are legally required to.

• Project files, source code and intake materials: retained for 12 months after delivery so we can support you, then deleted on request or at the end of that period.
• Invoices and payment records: retained for 7 years, because UK tax law requires it.
• Enquiries that do not become projects: deleted within 12 months.

You can ask us to delete your data at any time. Where we are legally required to keep something (invoices), we will tell you so rather than quietly retaining it.

We use infrastructure that is SOC 2 Type 2, ISO 27001:2022 and GDPR compliant. Those certifications are held by our infrastructure providers, not by Kraftwire directly, and we say so plainly rather than implying otherwise.

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to your systems is limited to the people working on your project.

Under UK GDPR you have the right to access, correct, delete, restrict or object to our processing of your personal data, and the right to data portability.

To exercise any of them, email kwnative@kraftwire.com. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

This site uses essential cookies and browser local storage for interface preferences, such as your light or dark theme choice.

The site loads Google Tag Manager, which may set analytics cookies. If you do not want them, you can block cookies in your browser; the site works without them.

Our providers may process data outside the UK. Where they do, transfers are covered by adequacy decisions or standard contractual clauses.

The Service is not intended for anyone under 16, and we do not knowingly collect information from children.

We may update this policy. Material changes will be communicated by email or on this site.

For privacy questions or data requests, contact us at kwnative@kraftwire.com.