Privacy Policy — Lops

This policy explains how Lops (lops.app and the Lops iPhone app) collects, uses and protects your personal data, in line with Saudi Arabia's Personal Data Protection Law and its regulations.

Who we are

The controller of your data is RiseTech Information Technology Co. (LLC), commercial registration (Unified National Number) 7055425073, Riyadh, Kingdom of Saudi Arabia. For anything about your data: support@lops.app.

What we collect

Account data: with Sign in with Apple, your account identifier, and your email and name if you share them. With a website account, your email, your name if you give it, your password stored as a one-way hash that cannot be read, and your country.
Your content: your messages to Lops and the files and images you attach, the apps it builds for you (code, settings and their databases), the Knowledge you write, and the keys you add to your apps (stored encrypted).
Payments: your purchases and credits. Card details are entered on Moyasar's or Apple's page directly; we never see or store them.
Technical data: IP address and sign-in times to protect accounts and prevent abuse, and aggregate visit statistics through Cloudflare Web Analytics without cookies.
Reports: the report text, the contact given (if any), and the IP address.

Why we use it

To provide the service: building, running and publishing your apps, and managing your account, credits and payments (performing our contract with you).
To send service messages such as password resets and domain renewal reminders.
To protect the platform and its users and review reports (legitimate interest).
To meet legal obligations, such as keeping payment records.

We do not sell your data, use it for advertising, or use your content to train AI models.

Your consent to AI processing

Before your first message we ask you to agree that your messages and attachments are sent to our AI provider for processing. Nothing is sent before you agree, and you can withdraw at any time by deleting your account or writing to us.

Who processes your data for us

Anthropic (United States): the AI models that process your requests.
HostHatch (Sweden): our servers, which hold your account and our database and run build and preview sessions.
Cloudflare (global network): hosting the website and published apps with their databases and files, and backups.
Twilio SendGrid (United States): sending email.
Moyasar (Saudi Arabia) and Apple: payment processing.
Namecheap: registering domains you buy.

They process data on our instructions, only for the service, with appropriate safeguards.

Transfers outside Saudi Arabia

As listed above, some of your data is processed and stored outside Saudi Arabia (the United States, Sweden and Cloudflare's network). We transfer only what the service needs, with appropriate safeguards, in line with the Personal Data Protection Law and the regulation on transferring data outside the Kingdom.

How long we keep it

We keep your data while your account exists. When you delete an app or your account in Settings, the data is removed from our live systems at once and stays in backups for at most 30 days before it is deleted. Payment records are kept as long as the law requires.

Your rights

You have the right to know how we process your data, to get a copy, to correct it, to ask us to delete it, and to withdraw your consent. Write to support@lops.app and we will answer within 30 days. You may also complain to the Saudi Data & AI Authority (SDAIA).

Security

We use encrypted connections (HTTPS), encryption for keys and passwords, isolated build sessions, limited access, and daily backups.

Your apps' users

Apps you publish are yours: you are the controller of the data they collect from their users and responsible for informing them and following the law. We host and process that data on your behalf only.

Children

Lops is not meant for people under 18, and we do not knowingly collect their data.

Changes

If we change this policy in a meaningful way, we will tell you in the product or by email before it takes effect.

RiseTech Information Technology Co. (LLC), commercial registration (Unified National Number) 7055425073, Riyadh, Kingdom of Saudi Arabia