Privacy policy
Last updated 11 August 2026
In one paragraph. We keep your email address, your credit balance and a record of what you spent it on. Your app descriptions are sent to an AI provider to build your app. We don't sell anything to anyone, we don't run advertising trackers, and we never see your card details.
This policy explains how Korel, the operator of applao, handles personal information. Korel is the data controller. Contact us at support@usekorel.com.
1. What we collect
- Your email address — so you can sign in and so we can send sign-in links and service messages. If you use "Continue with Google" we receive your email address and whether Google has verified it; we do not receive your Google password.
- Your credit balance and history — what you bought, what you spent, and on which app, so the balance is auditable and refunds work.
- Your connected computers — a name (such as your computer's name), when it connected and when it was last used, so you can see and revoke access.
- What you ask applao to build — your descriptions, feedback, and any files or links you attach as reference material.
- Basic technical logs — such as error records, kept to keep the service working and secure.
We never see or store your card details. Payment is handled entirely by Paddle.
2. Why we may use it
- To provide applao: sign you in, build your apps, and keep your credits correct. (Performance of our contract with you.)
- To take payment and meet tax and accounting obligations. (Contract and legal obligation.)
- To keep the service secure and prevent abuse of free credits. (Legitimate interests.)
- To reply when you contact support. (Contract and legitimate interests.)
We do not use your information for advertising, and we do not sell or rent it to anybody.
3. Who else is involved
To run applao we rely on a small number of processors, each handling only what they need:
- Anthropic — generates your applications from your descriptions.
- Supabase — stores accounts, balances and history.
- Vercel — hosts this website and our API.
- Resend — sends your sign-in and service emails.
- Paddle.com Market Ltd — takes payment as merchant of record; they are a controller in their own right for payment data.
- Google — only if you choose "Continue with Google".
Some of these providers operate outside the UK and EEA. Where that happens, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.
4. Your app descriptions and AI
What you type into applao, and any reference files you attach, are sent to our AI provider so your application can be built. We do not use your descriptions or your generated apps to train AI models, and our provider is contractually bound not to train on data submitted through our API.
Please don't paste other people's personal information, passwords or secrets into descriptions or attachments — you don't need to, and applao doesn't need them to design an app.
5. Where your apps live
When you use applao on your own computer, the applications it builds are stored on that computer. If you publish an app to a public link, the published files are copied to our hosting so that link works — delete it any time and we remove the copy.
6. How long we keep things
- Account and credit history: while your account is open, then up to 7 years for the financial records tax law requires.
- Sign-in links: deleted as soon as they are used, and in any case within an hour.
- Reference files you upload: kept with the app they belong to, and deleted when you delete it.
- Technical logs: typically 30 days.
7. Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or object to our use of it. Email support@usekorel.com and we will respond within one month, free of charge.
If you are unhappy with how we handled your information you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority.
8. Cookies
applao uses only the cookies it needs to work: one that keeps you signed in, and a short-lived one used during Google sign-in to prevent a security attack. There are no advertising or analytics cookies, so there is no consent banner to click.
9. Children
applao is not intended for children under 16. If you believe a child has given us personal information, tell us and we will delete it.
10. Changes
If we change this policy in a way that matters, we will email you or tell you in the product before it takes effect.
Contact
Korel — support@usekorel.com.