Privacy Policy

Account data. When you sign up we collect your email address and (optionally) your name. We use Supabase Auth, which stores password hashes — we never see or store your password in plain text.

Payment data. Purchases go through LemonSqueezy (our merchant of record). We receive your LemonSqueezy customer ID and order ID. Credit card details are handled by LemonSqueezy and never touch our servers.

Content you give us. App Store URLs you paste, app names, descriptions you upload, and any screenshots you submit. We use this to generate output you can download.

App Store Connect / Google Play credentials. If you choose to enable publishing, you upload an API key (Apple) or a service account JSON (Google). We store these encrypted at rest using AES-256-GCM. We only use them to perform the actions you explicitly trigger.

Support tickets. Messages you send through the Support page, plus any context you include. Admins can read these.

Visit analytics. Page visits to the marketing site and app. We do not store your raw IP address. We hash it with a daily-rotated salt to count unique visitors, and we read country / region from your hosting platform's geo headers. Bots and asset requests are filtered out.

• Your credit card or bank details (handled by LemonSqueezy)
• Your raw IP address — we only keep daily-hashed visitor IDs
• Third-party cookies for advertising
• Any personal data about your app's end users

• To generate the screenshots and metadata you request
• To publish to App Store Connect or Google Play when you explicitly trigger it
• To bill you and handle refunds
• To respond to support tickets
• To send you operational emails (generation ready, publish succeeded, etc.)
• To monitor system health and improve the service (aggregate analytics only)

We do not sell your data. We do not share it with advertisers.

We send transactional emails (welcome, receipt, generation ready, publish status) via our email provider. You can adjust which notifications you receive in Settings → Notifications. We do not send marketing emails unless you opt in.

• Generations + ZIPs: kept as long as your account is active so you can re-download them.
• Page visit analytics: auto-purged after 90 days.
• Support tickets: retained while your account is active.
• Payment records: kept for as long as required by tax and accounting law (typically 7 years).
• App Store / Play credentials: kept while your account is active; deleted when you remove them in Settings or delete your account.

You can:

• Export your generations and ASO bundles at any time (Downloads page)
• Delete individual generations from the dashboard
• Delete your account by emailing us — this removes all your data
• Disable any email notification in Settings → Notifications
• Update or delete your publishing credentials in Settings → Publishing keys

If you're in the EU/UK and want a formal data export or deletion under GDPR, email privacy@screenmint.app and we'll respond within 30 days.

We use Supabase's managed PostgreSQL with row-level security policies, encrypt sensitive credentials at rest with AES-256-GCM, and require HTTPS for all client connections. Service-role keys are stored only in server-side environment variables. No system is perfectly secure — we recommend using a unique password for ScreenMint and reporting any concerns to security@screenmint.app.

ScreenMint is for app developers. It is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from minors. If we learn we have, we will delete the account.

If we materially change this policy, we'll update the “last updated” date above and notify active accounts by email at least 14 days before the change takes effect.

Questions about this policy? Email support@screenmint.app.