How we look after your information

Last updated 24 September 2026

This policy explains what information ShipYrd.AI collects, why, who it goes to, how long we keep it and the choices you have. We've tried to write it plainly. If anything is unclear, email support@shipyrd.ai.

Who we are

ShipYrd.AI is run by SHIPYRD.AI LTD, a company registered in England and Wales (company number 17255074), registered office 126 Great Lime Road, Newcastle upon Tyne, NE12 6RU, United Kingdom. We are the controller of the information described here, except for information collected by apps that our users build, which is explained in its own section below.

What we collect

Your account. Your email address and your password (stored only in scrambled form, so we can't read it). For two-step verification: the secret your authenticator app uses and your recovery codes.
What you make. The ideas you describe, the designs we draw or you choose, your app's plan, its files and every version, the changes you ask for, and pictures you add for your apps.
Payments. Your plan, your credit balance and a record of every credit you're given or use. Card details are taken by our payment provider, Stripe; we never see or store them.
Technical information. Your IP address, your browser's description of itself, the pages you request and any errors, in our server logs. We use these to keep the service running and secure, including limiting how often some things can be done from one address.
Messages. Emails we send you (such as confirmation links and sign-in codes) and anything you send us.

We don't use advertising, we don't track you across other websites, and we don't sell information to anyone.

Why we use it, and our lawful bases

To provide the service you signed up for: your account, designing and building apps, sharing them and charging credits (the contract between us).
To keep it safe and working: security, preventing abuse and fraud, fixing faults and understanding what the service costs to run (our legitimate interests, which we balance against yours).
To keep financial records that the law requires of us (legal obligation).
To send you emails you asked for, such as notices when your app receives new entries. You can switch these off at any time.

Who we share it with

We use a small number of providers who act on our instructions and may use the information only to provide their service to us:

Microsoft Azure: hosts the service, its database and the pictures in apps in the United Kingdom, sends our emails and keeps our server logs.
Anthropic: its AI reads your idea, your plan, your app's files and the changes you ask for, to plan, build and change your app.
OpenAI: draws design images from a short description based on your idea.
Stripe: takes payments and manages subscriptions.

Anthropic, OpenAI and Stripe are based in the United States, so information sent to them leaves the UK. We rely on safeguards recognised by UK law for those transfers, such as the UK–US data bridge or approved contract terms. Under the business terms we use them on, our AI providers don't use what we send them to train their models.

We may also disclose information when the law requires it, or to protect people from harm.

Apps you share, and the people who use them

When you share an app, anyone with its link can use it. If your app collects information (a booking, a sign-up, a message), those entries are stored by us so that you can read them. For that information, you are the controller and we process it on your behalf, under the data processing terms in our terms. People using your app should know who you are and what you do with what they enter.

If you are using an app someone made with ShipYrd.AI:

What you enter into the app is kept for its maker. Ask them if you want it changed or removed; we'll help them do that.
Your browser keeps a random identifier so the app can tell your entries from other people's. It isn't linked to your name or to any account.
If you add a picture, your browser makes it smaller before sending it, which also removes details hidden inside photos, such as where they were taken. The app's maker can see it, and so can anyone the app shows it to or who has its address.
If the app asks you to sign in, you give it your email address and we email you a code. The app's maker can see which email addresses have signed in, and which entries are yours, and can remove you. You stay signed in on that device for up to 30 days, or until you sign out.
Some apps keep things only in your own browser. That information never reaches us or the maker.
An app can ask where you are only through your browser's own permission prompt, and only when you agree.
We count how often a shared app is opened, not who opens it.

If someone copies a shared app, they get the app itself, never the information people entered into it.

Cookies and browser storage

We use only what the service needs to work, so we don't ask for cookie consent:

a sign-in cookie that keeps you signed in for up to 14 days;
if you choose "remember this device" when signing in, a cookie that skips the verification code on that device for 14 days;
a security cookie that protects our forms from being submitted by other websites;
a cookie our hosting uses to send your requests to the same server;
on our front page, the idea you type is kept in your browser until you've signed up, so it's waiting for you, and then removed.

How long we keep it

Your account and projects: while your account is open. We keep the latest ten versions of each app.
Entries your app has collected: until you delete them, or your account is closed.
Server logs: 30 days.
Payment and credit records: six years, because the law requires financial records to be kept.

When you delete your account, its projects, apps, shared links and collected entries are deleted straight away. What remains in server logs goes within 30 days; payment and credit records stay for as long as the law requires.

Your rights

You can ask us for a copy of your information, to correct it, to delete it or your account, to restrict or object to how we use it, or to have it in a form you can take elsewhere. You can download your apps and your apps' entries yourself at any time, and delete your account yourself from your account page ("Delete account"). For anything else, email support@shipyrd.ai from your account's address; we'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.

Keeping it secure

Every account needs two-step verification. Everything travels encrypted, passwords are stored scrambled, and the apps people build run sealed off from our site and from the internet, so their code can't reach your account or send information anywhere.

Age

ShipYrd.AI accounts are for people aged 18 or over.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change matters to how we use your information, we'll email account holders before it takes effect.