Privacy Policy
Last updated October 28, 2026
Programmable Apps is operated by Programmable, LLC, 3607 10th St NW, Washington, DC 20010, USA ("we", "us"). This policy explains what we process when you use Programmable Apps, and when someone opens a link to an app made on it, and the rights everyone has. Questions: [email protected].
The short version
- We keep your apps: their layout, which services each panel calls, and your share settings. We don't keep the data a panel shows unless you save a snapshot.
- When someone opens your link, the panels run on their account and show their data. Your keys are never used for them.
- Your saved keys are used on our side only for the calls your own panels make, and are never shown to anyone.
- We don't use advertising cookies or trackers, we don't sell personal information, and we don't use anyone's data to train AI models.
Our two roles
For your account (sign-in, settings, security), we decide how data is used and are responsible for it. When your panels call services for you, we act for you as your service provider (or processor) under the Terms and, once you accept it, our DPA. You decide what your apps show and who can open them.
If you opened someone's link
If you opened a link to an app made on Programmable Apps, the app ran on your own account and showed your own data; the person who made it doesn't see it. They can see that the link was opened and, if you were signed in, by which account. Questions about a link: ask the person who sent it, or write to [email protected].
What we collect and keep
- Account: your email, name (optional) and sign-in records. Sign-in is handled by our shared Programmable sign-in service, which runs on our own servers; we never see your password. The account itself is covered by the Programmable account privacy policy.
- Apps: each app's title, description, panels and layout, and the words of any template.
- Share links and domains: who a link is for, its expiry and limits, a one-way hash of its password, a count of opens, and the domains you add.
- Your connections: stored encrypted in a secrets vault on our servers and read only to make a call your own panel asked for. We never return them.
Notice at collection (California and other states)
The categories of personal information we collect, where they come from, why, how long we keep them and who receives them. We don't collect sensitive personal information other than credentials, and we use those only to provide the Service.
| Category | Examples | Source | Purpose | Kept for | Disclosed to |
|---|---|---|---|---|---|
| Identifiers | Name, email, account ID, IP address | You; your browser | Running your account, security | While your account is open, then 30 days | Our service providers |
| Your apps | Each app's title, description, panels (which service and method each panel calls), layout and template words | You | Running and showing your apps | Until you delete the app or close your account | People you share the app with see its title, description and layout |
| Share links | Who a link is limited to, its password (stored only as a one-way hash), expiry and view limit, and a count of opens | You | Letting the right people open your link | Until you delete the link or close your account | No one |
| Link opens | When a link was opened, and by which signed-in account if any | People who open your links | Showing you who opened your link; abuse prevention | 90 days | You, as the link's owner |
| Panel results | What a connected service returned when a panel ran | The services you connected | Showing the panel to the person who ran it | Not kept after the page is shown, unless you save a snapshot | No one |
| Custom domains | The domains you add and whether you proved you control them | You | Serving your app on your domain | Until you remove the domain | Cloudflare, which serves the domain |
| Internet activity | Sign-ins, requests to our servers, server error reports | Your browser | Security, abuse prevention, fixing problems | Up to 90 days; error reports 30 days | Cloudflare, Sentry (service providers) |
Who else processes data
- Our service providers: OVHcloud (our servers, database, secrets vault and sign-in service; United States), Cloudflare (network, TLS and bot protection), and Sentry (server error reports). Our DPA lists them.
- AI model providers, only when you describe an app in words and we need help choosing panels, receiving only your description. Where you bring your own key, the provider you chose.
- The services you connect: those services receive the calls your panels make, under your agreement with them.
- Authorities, when the law requires it, and a buyer or successor if our business is sold or merged (bound by this policy).
Where data is processed
Our servers are in the United States and all processing happens there. If you use the Service from the European Union, the European Economic Area or the United Kingdom, your data is transferred to the United States; we rely on standard contractual clauses (available on request) for that transfer. Our legal bases are performance of our contract with you (running the Service) and our legitimate interests in keeping it secure and improving it.
Retention and security
Retention for each category is in the table above. Account records are deleted within 30 days of closing an account. Data is encrypted in transit; saved credentials and passwords are encrypted or hashed at rest; access to production systems is limited to the people who run them. No system is perfectly secure; if a breach affects your personal information, we'll tell you as the law requires.
Deleting your account
Delete an app or a link in the app at any time; a deleted link stops working at once. To delete your account, email [email protected] from your account's address; we delete your account records within 30 days. Because the Programmable account is shared across Programmable apps, deleting it also ends your access to those.
Your rights
Depending on where you live (including the EU, EEA and UK, and US states such as California, Colorado, Connecticut, Oregon, Texas and Virginia), you may have the right to know what personal information we hold about you and get a copy, to have it corrected or deleted, to object to or restrict some processing, to opt out of its sale (we don't sell it) and of targeted advertising (we do none), and not to be treated differently for using these rights. How to ask: email [email protected]; we verify requests by confirming control of your email address or phone number, reply within 45 days (or 30 in the EU and UK), and tell you if we need more time. If we decline, you can appeal by replying, and you may complain to your supervisory authority or state attorney general. Global Privacy Control and Do Not Track: we have no advertising trackers, so there is nothing for these signals to turn off.
Children
Programmable Apps isn't directed at anyone under 18. We don't knowingly collect information about children; if you think we have, email [email protected] and we'll delete it.
Changes
We'll post changes here with a new date and, for material ones, email account owners before they apply.