Mobile Privacy Notice

This notice explains how BuildingPP OÜ (“Bilt”, “we”, “us”) collects, uses and protects personal data when you use the Bilt Mobile app for iOS (the “App”). The App is a companion to the Bilt platform: it lets you open live previews of the applications you build with Bilt on your own device. This notice covers the App only. Everything else — your Bilt account on the web, billing, marketing, our websites — is covered by the Bilt Privacy Policy at bilt.me/privacy, which should be read together with this notice. Capitalised terms not defined here have the meaning given in the Bilt Terms of Service.

1. Who we are

BuildingPP OÜ is the controller of the personal data described in this notice.

• Company: BuildingPP OÜ (registry code 17224732)
• Address: Laulupeo tn 3-2, Tallinn, 10121, Estonia
• Privacy contact: [email protected]

We have not appointed a Data Protection Officer, as we are not required to do so.

2. Signing in

You need a Bilt account to use the App — there is nothing to browse without one, and the App has no sign-up: accounts are created on the web. Sign-in is handled by our authentication provider, Clerk, inside the App: your credentials, any second factor, and any social sign-in you use are processed by Clerk on our behalf. After sign-in the App holds a short-lived session token in your device's secure keychain, and caches your basic profile (name, email address, avatar) so the account screen can show it. The legal basis is Article 6(1)(b) GDPR — this processing is necessary to give you access to your own workspace.

3. What the App shows you

To do its job, the App fetches from Bilt's servers: the list of apps in your workspaces, your workspace list, the status of a preview while it is being prepared, and small screenshot thumbnails of your own apps' interfaces. These are your own project data, retrieved over an authenticated, encrypted connection — the same data you see at app.bilt.me, handled under the Bilt Privacy Policy. The App does not collect any of this from your device; it displays it.

If you are in a team workspace, other members of that workspace can see your name and avatar through the platform, as on the web.

4. Running previews on your device

The App's core feature is running a preview of an application built with Bilt directly on your device. Two things follow that you should understand:

• The code that runs is the application's, not ours. A preview is the app you (or a collaborator in your team workspace) built. It runs inside Bilt Mobile with the capabilities of the App itself.
• The permission prompts are for the preview, not for us. iOS may ask you to grant the camera, microphone, photo library, location or motion access — these requests come from the previewed application's own features. Bilt Mobile itself uses none of these; it asks for nothing beyond your sign-in. If you grant a permission, it is the previewed application that gains access, and whatever that application then does with the data is determined by the application and its author. Deny any permission and the rest of the App keeps working. You can change any permission at any time in iOS Settings.

For applications built by our customers, the customer — not Bilt — determines what their application collects and why; for data a previewed application handles, we act, if at all, as described in the Bilt Privacy Policy and the applicable data-processing terms.

Preview code is delivered to the App over an encrypted connection exclusively from Bilt's preview infrastructure, and the preview session itself runs in Bilt's build environment as described in the Bilt Privacy Policy.

5. Optional analytics — off by default

The App has one analytics setting, Share anonymous analytics, in your account screen. It is off by default, and nothing is collected until you turn it on — the analytics component is not even initialised before then.

If you turn it on, the App sends us a small set of technical reliability events: that an app launch started, succeeded, failed, was cancelled or timed out; how long it took; and workspace switches (whether to a personal or a team workspace, and how many workspaces you have). Each launch is tagged with a random one-off identifier so its events can be tied together, plus the platform (“ios”) and environment. These events deliberately contain no app names, no app content, no workspace names, and no account details — we cannot tell from them which app you launched or who you are.

Two things the events cannot avoid: our analytics endpoint receives your device's IP address when the events arrive, as with any internet request, and the analytics library keeps a random, anonymous identifier on your device so events from the same installation group together. That identifier is not connected to your Bilt account. The events land in the same analytics system we use for our web product; the retention period is the product-analytics period stated in the Bilt Privacy Policy (13 months).

The legal basis is your consent (Article 6(1)(a) GDPR). Turn the setting off at any time: collection stops and the anonymous identifier on your device is reset. Withdrawal does not affect what was collected before it.

That is the whole of the App's telemetry. The App contains no advertising, no ad or tracking SDKs, no cross-app tracking, no crash reporter, and no session recording, and it does not use the iOS advertising identifier.

6. What the App stores on your device

The App keeps no other local records. Its diagnostic logging stays on the device (the iOS system log) and is written to exclude tokens and preview credentials.

7. Who receives data, and where

The App talks only to: Bilt's own servers (app list, workspaces, previews, screenshots), Clerk (sign-in), and — only if you enabled it — our analytics endpoint. The providers behind these (including Clerk and PostHog, and the infrastructure our preview environment runs on), their locations, and the safeguards for any transfer outside the EEA are listed in the “Who we share personal data with” and international-transfers sections of the Bilt Privacy Policy; the same entries and the same safeguards apply here. We do not sell your personal data, and the App shares nothing with anyone else.

8. Your rights, and deleting your account

You have the rights described in the Bilt Privacy Policy — access, correction, erasure, restriction, objection, portability, and withdrawal of consent — and the same contact for all of them: [email protected]. You can also complain to a supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), and you may also complain to the authority in your country of residence — in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

In the App itself you can: turn analytics off (Section 5), sign out, and delete your account. Deleting your account from the account screen closes your Bilt account with immediate effect — the deletion is performed on our servers, not just on the device — and your account data is then handled as described in the retention section of the Bilt Privacy Policy. To view or correct your profile details, or to request a copy of your data, use the web app or write to [email protected]; the App does not have those screens.

The analytics events described in Section 5 carry no account identifier, so we cannot connect them to you in order to act on a request about them. If you can give us information that identifies those events, we will act on it (Article 11(2) GDPR). Turning the setting off stops any further collection and resets the identifier on your device.

9. Children

The App is not directed to children. As set out in the Bilt Terms of Service, you must be at least 18, or have the consent of your legal guardian, to use Bilt.

10. Changes to this notice

We may update this notice from time to time, and we will do so before the App's data practices change. We will post the updated version and update the “Last updated” date above; where changes are material we will notify you by email or in the App.

11. Contact

• Company: BuildingPP OÜ (registry code 17224732)
• Address: Laulupeo tn 3-2, Tallinn, 10121, Estonia
• Privacy enquiries and rights requests: [email protected]
• General support: [email protected]
• United Kingdom: we are in the process of appointing a UK representative under Article 27 UK GDPR. Until the appointment is complete, please contact us directly about UK matters at [email protected]; we will update this notice with the representative's name and address once appointed.