Privacy Policy - Ningal App Generator

Last updated: October 2026

1. Who We Are

The controller of your personal data is Ningal Software ("we", "us"), a sole trader business with tax ID (NIF) 40306092H, Avda. Tarragona 10, 43881 Cunit (Tarragona), Spain. Email: info@ningal.com.

2. Data We Process

Account data: name, email address and password (stored only as a secure hash).
Billing data: your plan and subscription status. Card details are handled by our payment processor; we never receive them.
Content you provide: app descriptions, modification requests, custom icons and texts, and the apps generated for you.
Technical data: IP address, browser information, server logs and usage history.
Sign-up source: the campaign or website that brought you to us when you created your account (for example, an ad), taken from the parameters of the link you followed or, if it has none, from the website you came from (only its name, never the page). If that link was in an app made with Ningal App Generator, it also says which app it was.

Account data is required to use the Service; without it we cannot provide it. Please do not include other people's personal data in your prompts. Data you enter into the apps you generate stays on your device.

3. Purposes and Legal Bases

Providing the Service and support: performance of the contract (Art. 6(1)(b) GDPR).
Payments and billing records: performance of the contract and legal obligations (Art. 6(1)(b) and (c) GDPR).
Security and prevention of fraud and abuse: our legitimate interest in protecting the Service (Art. 6(1)(f) GDPR).
Cookieless website analytics: our legitimate interest in improving the website (Art. 6(1)(f) GDPR).
Knowing which of our advertising campaigns, which websites and which apps made with Ningal App Generator bring customers (sign-up source): our legitimate interest (Art. 6(1)(f) GDPR). It is not shared with advertising platforms or with the owner of the app.
Emails about products similar to those you use: our legitimate interest (Art. 21.2 Spanish Law 34/2002). You can opt out from any of these emails.
Newsletter: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not sell your data or use it to train AI models. No decisions with legal or similarly significant effects are made about you by automated means.

4. Recipients

We use service providers that process data on our behalf, only for the purposes above:

Hosting and backup providers (European Union).
AI providers that generate the code and images of your apps from your prompts and app code, under zero data retention for code generation (United States).
Payment processing (Stripe).
Security, anti-fraud and email validation services (United States and European Union).
Cookieless website analytics (Singapore).

We may also disclose data when required by law. Transfers outside the European Economic Area are protected by the European Commission's Standard Contractual Clauses or, where applicable, the EU-U.S. Data Privacy Framework.

5. Retention

Account and apps: while your account is active. Deleting your account from your profile erases it immediately, together with its apps, and cancels any subscription.
Deleted apps: erased permanently after 30 days.
Backups: up to 30 days.
Server logs: up to 14 days.
Billing records: as required by tax and accounting law (generally up to 6 years).
Newsletter: until you unsubscribe.

6. Your Rights

You can access, rectify and erase your data, restrict or object to its processing, request its portability and withdraw your consent at any time by writing to info@ningal.com. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Cookies

We only use cookies and local storage that are strictly necessary for the Service to work (session, security and preferences). We do not use advertising or tracking cookies.

8. Children

The Service is not intended for children under 14.

9. Changes

We will publish any update on this page and, if the changes are significant, notify you by email.