Privacy

For anything about your data, write to support@uarpie.app.

What we keep, and why

• Your email address, to sign you in (we email you a link or a code; there is no password) and to tell you about your apps and your bill.
• Your apps: the files you deploy and their settings, to build and run them. Settings are locked with a key held by Amazon Web Services that never leaves it. Build logs are deleted after 30 days.
• How your apps run: the time, memory and data each request uses, and the lines your app writes to its log, to count your plan's use and help you fix problems. Kept for 90 days. Your account's total use for each month is kept for about 13 months, so you can look back at what you used.
• Calls to outside services from apps nobody has kept yet, or that we have stopped from calling out: which app, the name and port of the service, when, and how much data moved. Kept for 30 days and used only to look into abuse. We never record what was sent. See acceptable use.
• Reports of errors in Uarpie itself: what failed, where in our code, and which request it was, whose address can name the app involved. They go to Sentry, which we use to find and fix problems. This website and your dashboard also send Sentry a report when something fails in your browser, and timing measurements from about one page view in ten.
• Payments are handled by Stripe. We never see or store your card number.
• Domains you buy through us: the name, address, phone number and email address a registration needs, locked like your settings and sent to Amazon Web Services, which registers the domain. Kept while the app the domain is for exists.
• Messages you send us, by email or through the contact form or your dashboard, so we can reply.

We use cookies only to keep you signed in and to let your devices open your private apps. We use no advertising or tracking cookies. Your dashboard also keeps your email address and the list of your apps in your browser, so it opens at once; both are cleared when you sign out.

The people who use your apps

When people use an app hosted on Uarpie, the app's owner decides what it collects about them. We store and process that information only to run the app.

When someone opens a private app after signing in through Uarpie, we tell the app who they are: their name if they have given one, their email address, an id that is the same in every app they use on Uarpie, and whether they own the app or were invited to it. The app can then greet them without a sign-in of its own.

When an owner offers an app in other languages, the words on its pages are sent to Anthropic, which translates them with its Claude models.

Who else handles it

• Amazon Web Services runs your apps, stores their data, sends our email and registers the domains you buy.
• Vercel runs this website and your dashboard.
• Stripe takes payments.
• Sentry receives error reports and timing measurements, from Uarpie itself and from your browser.
• Google holds our email inbox: what you send to support@uarpie.app, and copies of the messages sent through the contact form or your dashboard.
• Anthropic translates the pages of apps whose owners offer other languages.

Your account, and your apps with their databases and files, are stored in the United States by Amazon Web Services. The other companies above may also store data in the United States. We rely on the safeguards they offer for data sent outside the UK.

How long we keep it

Your account stays while you have it. An app nobody keeps is deleted 7 days after it was put online.

When an app is deleted, its database, files, source and build logs are removed within the hour. A few copies take longer to go:

• the old copies we keep for undoing mistakes go within about 30 days;
• its database stays in our backups for up to 7 days;
• a copy of its build logs, and the records of its calls to outside services, stay until their 30 days are up;
• the records of how it ran stay until their 90 days are up.

When an app deletes or replaces a file, we keep the old copy for 30 days. If something is deleted by mistake, write to us within 30 days and we can put it back.

Each app's database is copied before every deploy that runs its migrations, and every day on paid plans. These copies are kept for 30 days. Our database backups, which include every app's database, are kept for 7 days, so deleted data can remain in a backup for up to 7 days.

Messages you send us are kept so we can answer them and follow up later. Ask, and we will delete them.

When someone asks for a sign-in code, on a private app's own page, on our page for opening a phone app, or in the Uarpie app on a phone, the address they typed is kept with the code and deleted about a day after the code runs out. If they sign in with it, their address is kept as part of their sign-in.

Your rights

You can delete any of your apps yourself, from your dashboard. You can also ask to see the information we hold about you, to correct it, to have it deleted, or to get a copy to take elsewhere. We do these by hand: write to support@uarpie.app and we will do it within a month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this page in a way that matters, we will email everyone with an account.