Privacy Policy

Last updated: October 7, 2026

This policy explains what data Endito collects and why. The controller is David Havlín, Beňadická 15, 851 06 Bratislava, Slovakia (Company ID (IČO) 53696298, Tax ID (DIČ) 1127205090). Contact: support@endito.app.

Data we collect

• Account: name, email and account ID from Apple, Google or GitHub sign-in.
• Content: projects, store listings, images, screenshots and pages you create or upload.
• Billing: plan, subscription status and Stripe customer ID. We never see card details.
• Diagnostics: crash and error reports (device, OS, app version, error details) and basic server logs.
• Website stats: anonymous daily counts of visits and downloads per source, like Google or Reddit. No cookies, no IP addresses, nothing that identifies you.
• How you found Endito, if you answer that question in the app.

App Store Connect and Google Play keys stay on your Mac in the macOS Keychain. We do not store them on our servers.

How we use it

To sign you in, run the features you use, host pages you publish, enforce plan limits, handle billing and support, and fix bugs. We do not sell your data and we do not use it for ads. Legal bases (GDPR): contract, legitimate interest (security and fixing bugs) and legal obligation (tax and accounting).

Service providers

We share data only with providers that help us run Endito:

• Convex: app database and backend (account, workspace and project data).
• Cloudflare R2: file storage for images, screenshots and published assets.
• Cloudflare Web Analytics: anonymous website stats without cookies.
• OpenAI: AI text and image features, only the content you send to them.
• Stripe (Link): checkout, payments, tax and invoices (merchant of record).
• Sentry: crash and error reports from the website and desktop app.
• Apple, Google and GitHub: sign-in.
• Vercel: website hosting and delivery.

Some providers are in the United States. Transfers are covered by standard contractual clauses or similar safeguards.

Public content

Privacy, Terms and Support pages you publish are public on an endito.app subdomain. Drafts stay private to your workspace.

Retention

We keep your data while your account is active. When you delete a project or your account, we remove its content from active systems. Backups expire on their normal schedule. We keep billing records as long as tax law requires. Error reports are kept for up to 90 days.

Your rights

You can export your data or delete your account at any time in the app under Settings. You also have the right to access, correct, delete, restrict or object to processing, and to data portability. Email support@endito.app for any request. You can also complain to your local data protection authority.

Cookies

The website uses only essential cookies for sign-in and checkout. No ad or tracking cookies. Website stats use no cookies.

Changes

We will update this page and the date above when this policy changes.