Privacy policy
Last updated September 29, 2026
This explains what Otto collects, why, and what you can do about it. We don’t sell your data.
What we collect
Your email address and name from sign-in; the descriptions, messages and files you give us to build your apps; the apps’ code; your billing status and history (card details are held by Stripe, never by us); basic technical logs such as errors and request times; and, if you accept analytics cookies, how you use the site (pages visited and steps such as starting a checkout).
Why we use it
To build, run and preview your apps; to take payment and keep your balance right; to keep the service secure and fix problems; and to email you about your account. We don’t use your apps or messages to train AI models.
Who processes it for us
Supabase (accounts and database), Cloudflare (hosting and app previews), Stripe (payments), AI model providers reached through our model gateway (to write your app’s code; they receive your descriptions and code for that purpose only), Expo (when you build an app for the stores), PostHog (product analytics), and Google Analytics (site traffic). Both set cookies only if you accept them. Each processes data only to provide their service to us.
Cookies and analytics
We use PostHog and Google Analytics to understand how people find and use Otto and where they get stuck. The first time you visit we ask. Until you choose, PostHog stores and sends nothing, and Google Analytics sets no cookies and receives only anonymous, cookie-free signals. If you accept, both set cookies and record the pages you visit and the steps you take, and PostHog may record your session, with anything you type into forms hidden. If you decline, we only count visits without cookies or anything that identifies you. We don’t use either for advertising. Signed-in usage is linked to your account id, never your email. To change your choice, clear this site’s cookies and you’ll be asked again.
How long we keep it
For as long as your account exists. When you delete your account we delete your apps and messages within 30 days, except billing records we must keep by law.
Your rights
You can ask for a copy of your data, to correct it, or to delete it, by writing to support@ottocraft.app. Depending on where you live you may have further rights, including complaining to your data protection authority.
Changes
If we change this policy in a way that matters, we’ll tell you before it takes effect.