Privacy Policy
Effective Date: August 5th, 2026
1. Introduction
Apptopia, Inc. ("Apptopia," "we," "us," or "our") provides competitive intelligence and performance estimates for mobile applications to help business clients make data-driven decisions. This Privacy Policy explains how Apptopia collects, uses, discloses, and otherwise processes personal information in connection with our apptopia.com website, our software development kit incorporated by our partners into their applications, our marketing and sales activities (including in-person events, trade shows, and conferences), and other contexts where this Privacy Policy is posted or referenced (collectively, the "Services"). It also describes choices available to you with respect to our processing. When used in this Privacy Policy, "personal information" or "information" means data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Your use of the Services is subject to our Terms of Use.
This Privacy Policy does not apply to:
- The practices of third parties we do not control.
- Information collected in context of job applications or employment with us.
- Information that has been anonymized or, to the extent permitted by law, deidentified.
Additional disclosures and rights may apply if you reside in certain regions:
For our contact details, see the Contact Us section below.
2. Collection
We collect the following categories of personal information about consumers:
- Device identifiers, including mobile advertising identifiers ("MAIDs"), IP addresses, and pseudonymous identifiers. MAIDs are user-resettable identifiers generated by mobile device operating systems, such as Apple’s IDFA or Android’s AAID. IP addresses are numerical labels assigned to devices connected to the internet. Pseudonymous identifiers are device- or user-level identifiers generated by us or third parties.
- Contact identifiers, including name, email address, postal address, and phone number.
- Internet or other network activity information, including app name, usage frequency dates and times of access, session start and end timestamps, pages or screens visited, and similar engagement information.
- Non-precise geolocation data, country- or region-level location information derived from your use of our the Services.
- Professional related information, including employer/business name, job title, position, and other professional profile details.
- Inferences drawn from any of the above categories of personal information.
3. Sources
We collect personal information from the following sources:
- Directly from you when you:
- visit our websites and submit forms, request a demo, or otherwise engage with us through apptopia.com; or
- interact with us by phone, email, or in person at events, trade shows, and conferences.
- Automatically from your device when you use our websites or when you interact with our emails. This information is collected through tracking technologies deployed by us and third parties. See Tracking Technologies.
- Through our software development kit when it is incorporated by our partners into their apps and you use those apps. See Our App Technologies.
- From third parties, including:
- Commercial data partners and licensors that provide data to us pursuant to written agreements;
- Vendors that provide us with analytics, security, fraud prevention, or similar services; and
- Publicly available sources, including app store pages and other public sources.
- Where we generate or derive based on the personal information collected from the sources described above.
4. Tracking Technologies
This section describes the types of tracking technologies incorporated into our websites or emails that automatically collect personal information when you interact with those online services.
- Cookies. Cookies are browser‑based text files that are placed on your browser when you visit a website, open or click on an email, Cookies may be session cookies (which expire when you close your browser) or persistent cookies (which remain until they expire or are deleted). Cookies may also be first‑party cookies (served directly by us) or third‑party cookies (served by third parties we work with).
- Pixels. Pixels (also known as web beacons) are code embedded in a website, email, or app. Pixels may include image pixels (such as one‑pixel transparent images) or JavaScript pixels. Pixels are often used in conjunction with cookies. When you access a service containing a pixel, the pixel may allow us or third parties to collect information from your browser or device, including by placing or reading cookies.
- App technologies. App technologies are technologies embedded directly in mobile or other applications, such as software development kits (SDKs). These technologies may allow us or third parties to collect information from your device. We offer a software development kit to our partners. We offer a software development kit to our partners that may be integrated into their applications. For more information, see Our App Technologies.
To learn about the choices available to you regarding our use of tracking technologies, see Your Privacy Choices.
5. Our App Technologies
Our app technologies are software components that third‑party developers may choose to incorporate into their own applications ("App Technologies"). The App Technologies enable us to collect certain information when users interact with certain partner applications.
When a user installs or uses a partner application, the App Technologies may collect information from the user’s device or application environment. The specific information collected may vary depending on the configuration of the App Technologies and the partner application in which it is integrated.
We make the App Technologies available to partners pursuant to written agreements that govern the collection, use, and sharing of information. Our partners are responsible for providing appropriate notice to their users and, where required by law, obtaining any necessary consents, honoring user opt‑out rights, and providing required disclosures regarding any financial incentives associated with their applications.
We process information collected through the App Technologies in accordance with our agreements with our partners and this Privacy Policy.
6. Purposes for Collection and Use
We collect and use personal information for the following purposes:
- Model development and analytics. We collect and use information to improve our services and better understand how mobile applications perform. We analyze usage patterns and engagement signals across applications, regions, and time periods to create broad, high-level insights.
- Operation of our website and Services. We collect and use information to operate, maintain, and support our websites and other Services, including troubleshooting, performance monitoring, and quality assurance.
- Communications. We collect and use information to communicate with you, including responding to inquiries, providing service‑related notices, and sending transactional or business‑related communications.
- Security, compliance, and enforcement. We collect and use information to protect the security and integrity of our systems and data, prevent or investigate fraud or misuse, enforce our terms and policies, and comply with applicable legal and contractual obligations.
- At your direction or with appropriate authorization. We collect and use information where you instruct us to do so or where we provide notice and obtain consent as required by applicable law.
- Non-personal information. We may anonymize or deidentify information so it is no longer considered personal information under applicable law. Where we deidentify information, we commit to maintaining and using the deidentified information in deidentified form and not attempt to reidentify it. We may use non-personal information for any purpose permitted by law.
Use of Artificial Intelligence. We use automated tools, including artificial intelligence and machine learning technologies, to support the purposes described above, such as analytics, research, model development, and service improvement. These technologies may be applied to personal information, aggregated information, or deidentified information, as permitted by law, and are not used to make significant decisions about individual consumers.
See Your Privacy Choices to exercise choice around our collection and use.
7. Disclosure
We disclose the information we collect for the purposes described in this Privacy Policy and to the categories of recipients described below:
- Service providers and similar vendors. We disclose information to service providers and similar vendors that process information on our behalf to support our business and Services, such as website hosting, cloud infrastructure, payment processing, data analytics, security and fraud prevention, customer support, and technical operations. Where required by law, we contractually restrict service providers from using personal information for purposes other than performing services for us, although we may permit service providers to use non‑personal information for any purpose permitted by applicable law. In some cases, vendors that provide services such as security, fraud prevention, or compliance may process information for their own purposes and in accordance with their own privacy policies, including as independent controllers, to the extent permitted by applicable law.
- Partners that integrate our App Technologies. We may disclose information to partners that integrate the App Technologies into their apps or otherwise work with us pursuant to written agreements. These disclosures occur in connection with operating, supporting, or enforcing our agreements and services.
- Affiliates. We may disclose information to our affiliates and related entities for purposes consistent with this Privacy Policy, including where they act as service providers or support our internal business operations.
- Public disclosures. We disclose information you choose to make public through the Services, such as information you voluntarily post in public‑facing areas. Please consider carefully before making information public, as information you share publicly may be accessible by others and may not be removable, subject to applicable law.
- Corporate transactions. We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of some or all of our business or assets, including as part of due diligence or negotiations.
- Security, compliance, and enforcement disclosure. We disclose information to comply with applicable law, lawful requests, or legal process; to respond to requests from public or governmental authorities; and to protect the rights, property, safety, and security of Apptopia, our Services, users, partners, or others.
- Recipients at your direction or with your consent. We disclose information where you direct us to do so or where we provide notice and obtain consent.
To learn about the choices available to you regarding our disclosure of your information, see Your Privacy Choices.
8. Third Parties
Our Services may link to, or be incorporated into, websites and online services controlled by third parties. For example, our App Technologies may be integrated by partners in their apps. In addition, we may integrate technologies into our Services, including those described in Tracking Technologies, that are controlled by third parties. Except where third parties act as our service providers processing information on our behalf, such third parties independently determine the purposes and means of processing your information and process information in accordance with their own privacy policies and terms. We encourage you to review the privacy policies of any third‑party websites, services, or applications you interact with, including those that integrate our App Technologies.
9. Your Privacy Choices
This section describes the choices available to you regarding your information.
- Region-Specific Choice. Additional disclosures and rights may apply if you reside in certain regions. For details, please see:
- U.S. State-Specific Disclosures
- EEA Disclosures
- Emails. You may opt out of receiving marketing emails from us by changing your communication preferences in your account settings (if you have an account), following the unsubscribe instructions included in our marketing emails, or emailing us at the address listed in the Contact Us section with "UNSUBSCRIBE" in the subject line. Please note that you cannot opt out of transactional or service‑related communications.
- App Technologies. If you interact with a third‑party application that integrates the App Technologies, any choices regarding the collection and use of information through the App Technologies must be exercised through the app operated by the partner that provides that application, including through that partner’s privacy settings, notices, or communications. Apptopia does not control, and is not responsible for, the privacy practices or choice mechanisms offered by third‑party partners. We encourage you to review the partner’s privacy policy and settings to understand and manage your choices. Unlike cookies, certain app‑based technologies cannot be controlled through browser settings. You can reset or limit use of your device’s advertising identifier through your device settings. See your device documentation for details.
- Tracking technologies in our websites. You may be able to limit certain data collection through your browser or device settings. The availability and effectiveness of these controls depend on your browser, device, and operating system.
- Cookies and pixels. You may be able to manage cookies through your browser settings. When you manage cookies, pixels or similar technologies associated with those cookies may also be affected. If you use multiple browsers or devices, you will need to configure your settings separately for each. If you delete or reset your cookies, you may need to reconfigure your preferences. Your ability to limit cookies is subject to your browser’s settings and limitations.
- Third party opt-out tools. Some third parties we work with offer their own opt-out tools related to information collected through cookies and pixels. To opt out of your information being used by Google Analytics, visit https://tools.google.com/dlpage/gaoptout. We are not responsible for the effectiveness of their tools.
- Industry opt-out tools for targeted advertising. Some third parties we work with follow the Digital Advertising Alliance's Self-Regulatory Principles for Online Behavioral Advertising, which offers its own opt-outs tools for targeted advertising. For details, visit https://youradchoices.com/control. We are not responsible for the effectiveness of these tools.
10. Children
Our Services are not directed to children under 16 years old, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe we have collected information from children in violation of applicable law, contact us as set out in the Contact Us section below.
11. Security
We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect personal information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Please note that transmission via the internet is not completely secure and we cannot guarantee the security of personal information about you.
12. Retention
We retain personal information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. Where personal information is no longer required for the purposes for which it was collected, we will securely delete or anonymize it.
For additional details on how long we retain different categories of personal information, please refer to our Retention Policy.
13. International Transfers
We are based in the U.S. and all personal information we collect is stored and processed on servers located in the U.S. If you are located outside the U.S., including the EEA, Switzerland, or UK, please be aware that your personal information will be transferred to and processed in the U.S. or another country where we operate when you use the service.
Where applicable data protection law requires us to ensure appropriate safeguards are in place for such transfers, we will rely on one or more of the following mechanisms:
- the EU-U.S. Data Privacy Framework, including where applicable the UK Extension;
- Standard Contractual Clauses approved by the European Commission, supplemented by any additional safeguards required by applicable law; or
- the UK International Data Transfer Agreement or Addendum, as applicable to transfers of UK personal data.
The specific safeguard relied upon will depend on the circumstances of the transfer. To request a copy of the applicable safeguards, or for further information about how we protect your personal information when it is transferred internationally, please contact us at privacy@apptopia.com.
14. Changes to this Privacy Policy
We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Your continued use of our Services indicates your consent to the Privacy Policy then posted. If the changes are material, we may provide additional notice to you, such as through email or prominent notice on the Services.
15. Contact Us
The controller under this Privacy Policy is:
Apptopia, Inc.
Attn: Privacy
132 Lincoln St, 3rd Floor, Boston, MA 02111
If you are located in the EEA, you may also contact our EU representative at eurep@apptopia.com, or write to: Lewis Silkin Ireland. Fitzwilliam Court, Office Suite 502-505, 2 Leeson Close, Dublin, D02 YW24.
If you are located in the UK, you may also contact our UK representative at ukrep@apptopia.com, or write to: Lewis Silkin (N.I) LLP. 32-38 Linenhall Street, Belfast, BT2 8BG.
You may also contact our Data Protection Officer at dpo@apptopia.com, or write to: Lewis Silkin LLP. Arbor, 255 Blackfriars Rd, London SE1 9AX.
If you have questions about this Privacy Policy or experience difficulty accessing this Privacy Policy, you may contact us using the postal or email address above.
Requests to exercise privacy rights must be submitted using the designated methods described in the applicable sections of this Privacy Policy. The contact details in this section should not be used to submit rights requests except where a specific section of this Privacy Policy expressly permits submission by email or postal mail, or where required under applicable law.
16. U.S. State-Specific Disclosures
This section applies to residents of California or any other U.S. state that has enacted a comprehensive state privacy law (each, a "Covered State"). For purposes of this Privacy Policy, Covered States include Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. This section does not apply to residents of other states except as expressly provided herein.
Notice at Collection
Our data practices are as follows:
- Collection. In the past 12 months, we have collected the categories of personal information set out in the Collection section above.
- Sources. The categories of sources from which we collect personal information are set out in the Sources section above.
- Purpose. The specific purposes (including business and commercial purposes) for collecting and using personal information are set out in the Purposes for Collection and Use section above.
- Disclosure. The categories of persons to whom personal information is disclosed, including service providers for business purposes, are set out in the Disclosure section above. We disclose the categories of personal information listed in the Collection section above to service providers for business purposes.
- Sales, Shares, and Targeted Advertising. Some of our disclosures of personal information to third parties may be considered a sale or share for cross-context behavioral advertising purposes under applicable law. We also may process your personal information for purposes of targeted advertising as defined by applicable law. We do not sell or share the personal information of consumers we know are under 16 years old.
- Profiling. We do not process personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.
- Sensitive Data. To the extent any personal information we collect is considered sensitive personal information under California law, we collect, use, and disclose sensitive personal information only for the permissible business purposes for sensitive personal information under the CCPA or without the purpose of inferring characteristics about consumers.
- Retention. The criteria used to determine the period of time we retain your personal information is set out in the Retention section above.
Rights
This section sets out your rights. See Exercising Rights below for details on how to exercise your rights.
- Verifiable Requests.
For California residents, you have the right to:
- Know what personal information we have collected about you, specifically have the right to know the categories of sources from which personal information was collected, the business or commercial purposes for collecting, selling, or sharing personal information, the categories of personal information that we sold, shared, or disclosed for a business purpose, the categories of third parties to whom we disclosed personal information, and the specific pieces of personal information we have collected about you;
- Correct inaccurate personal information we maintain about you; and
- Delete personal information that we have collected from you.
For Covered State Residents, you have the right to:
- Confirm whether or not we are processing your personal information, and in some regions, confirm the categories of personal information we have processed;
- Access your personal information;
- Correct inaccuracies in your personal information;
- Delete your personal information;
- Obtain a copy of your personal information that you previously provided to us in a portable and readily usable format
If you are a Minnesota or Oregon resident, you also have the right to obtain a list of the specific third parties to which we have disclosed personal data.
If you are a Delaware or Maryland resident, you also have the right to obtain a list of categories of third parties to which we have disclosed personal data.
If you are a Connecticut or Rhode Island resident, you also have the right to obtain a list of the specific third parties to which we have sold personal information.
- Opt-Out of Sales, Shares, and Targeted Advertising. You have the right to opt-out of us selling or sharing for cross-contextual advertising purposes your personal information to third parties, or processing your personal information for targeted advertising purposes.
- Revocation of Consent. You have the right to revoke consent previously given to us that we rely on to process your personal information. If you withdraw consent, you may not be able to receive certain services dependent on that consent.
- Nondiscrimination. You have the right not to be discriminated against for exercising any of your rights.
- Appeals. You have the right to appeal our decision in response to your requests.
- Authorized Agents. You may exercise your rights through an authorized agent.
Exercising Rights
This section sets out how to exercise your rights. Note that rights relating to personal information we process on behalf of a business client as a processor or controller must be exercised through that client.
- Verifiable Requests. Verifiable requests require us to verify your identity before fulfilling them. To exercise any of these rights, submit a request through our form https://apptopia.com/en/consumer-privacy-rights/ (specifying the rights you wish to exercise) or call our toll-free number at (855) 277-8674. We will confirm receipt of and respond to your request consistent with applicable law. To verify your identity, we may require you to confirm receipt of an email sent to an email address that matches our records, provide us with details relating to your history with us, or provide additional information. If we cannot verify your identity, we may deny your request in accordance with applicable law.
- Sales, Shares, and Targeted Advertising. You may opt out of our sale, sharing, and use of your personal information for targeted advertising using the options described below. How your request is applied depends on how we process your information.
- You may submit a request through "Your Privacy Choices" in the footer of our website or use a recognized browser-based opt-out preference signal, such as Global Privacy Control. We will treat such a signal as a request to opt out for that browser and, if you are logged into your account when you submit the request or we maintain a pseudonymous profile associated with the browser or device from which you submit the request, we will apply the opt-out more broadly across our systems where feasible. Because this signal operates at the browser level, it may not apply to information we maintain about you in other contexts (such as account or contact information), unless we link that browser or device to you as described above. Also, if you use a different browser or device, or reset cookies, you will need to re-enable your preferences.
- You may also submit a request through our webform here or your account settings. When you submit a request in this way, we will apply your opt-out to the information associated with your account or contact identifiers you provide. However, this type of request may not automatically apply to information collected through tracking technologies on browsers or devices that are not linked to you.
- Consent. To revoke consent, write us at the email or postal address set out in the Contact Us section above (specifying the consent you wish to withdraw). If you withdraw consent, you may not be able to receive certain services related to that consent.
- Authorized Agents. Authorized agents must submit requests through the specific methods designated herein. Except where prohibited by law, we will require written and signed proof of the agent’s permission.
- Appeals. To appeal, write us at the email or postal address set out in Contact Us and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia.
- Limitations. Your rights are subject to exceptions and our data retention practices. To the extent permitted by law, rights requests must be exercised through the applicable designated method specified herein.
Additional California Disclosures
- Shine the Light. If you are a California resident and have an established business relationship with us, you have the right to request a list of the categories of personal information (as defined by Shine the Light) disclosed by us to third parties for their own direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of such third parties. To exercise this right, write us at the email or postal address set out in the Contact Us section above and specify that you are making a "California Shine the Light Request." We will respond to requests received in accordance with Shine the Light.
- Do Not Track. We do not respond to Do Not Track signals.
Additional Connecticut Disclosures
Large Language Models. We do not collect or use personal data to train large language models. However, when we sell personal data to third parties, they may use the data to train their own large language models. See their privacy policies for details.
Disclosures for Nevada
For Nevada residents, you have the right to opt-out of sales of your personal information to third parties. To exercise your right, follow the opt-out process in Exercising Rights above.
17. EEA, Switzerland, and the UK
Data Practices
This Privacy Notice is intended to meet the requirements of privacy laws of the European Economic Area ("EEA"), Switzerland, and the United Kingdom ("UK"), in particular the EU’s General Data Protection Regulation and the UK GDPR (collectively, the "GDPR").
Apptopia, Inc. is the data controller responsible for your personal information.
Lawful Basis for Processing
If you are located in the EEA, Switzerland, or UK, we provide information about the lawful bases on which we process your personal information. Under Article 6 GDPR, these bases include:
- Consent. Where you have given us clear consent to process your personal information for specific purposes, including consent to the use of cookies and similar tracking technologies on our website and consent to the collection and processing of your information through our SDK technologies. You may withdraw your consent at any time by contacting us using the details set out in the Contact Us section above.
- Performance of a contract. Where processing is necessary for the performance of a contract with you, or in order to take steps at your request prior to entering into a contract. This includes processing necessary to operate and maintain our website and Services, to respond to your inquiries, and to fulfill our obligations under our Terms of Use.
- Legitimate interests. Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights. This includes analytics, security, fraud prevention, and service improvements.
- Legal obligation. Where processing is necessary to comply with a legal obligation to which we are subject.
We do not intentionally collect special category data (as defined in Article 9 GDPR). If any demographic information we collect is considered special category data in your jurisdiction, the lawful basis for that processing is your explicit consent (Article 9(2)(a) GDPR).
Your Rights
If you are located in the EEA, Switzerland or UK, you have the following rights under the GDPR in relation to your personal information:
- Right of access. You have the right to request a copy of the personal information we hold about you.
- Right to rectification. You have the right to request that we correct any inaccurate personal information we hold about you.
- Right to erasure. You have the right to request that we delete your personal information in certain circumstances.
- Right to restriction of processing. You have the right to request that we restrict the processing of your personal information in certain circumstances.
- Right to data portability. You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
- Right to object. You have the right to object to processing of your personal information where we rely on legitimate interests as our lawful basis.
- Right to withdraw consent. Where we rely on consent as the lawful basis for processing, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority. For users in the UK, this is the Information Commissioner’s Office (ICO) at ico.org.uk. For users in the EEA, this is the data protection authority in your country of residence.
- Right to complain to us. You have the right to complain to us about any alleged breach of GDPR.
To exercise any of these rights, submit a request through our form here or write us at the email or postal address set out in the Contact Us section above (specifying the rights you wish to exercise).
Where we process personal data on behalf of a business client acting as controller, requests to exercise these rights must be submitted directly to that client.
Complaints
If you have any issues with our compliance, you may contact our Data Protection Officer at dpo@apptopia.com, or write to: Lewis Silkin LLP. Arbor, 255 Blackfriars Rd, London SE1 9AX.
You also have the right to lodge a complaint with the data protection regulator in your jurisdiction.
Never miss an insight. Get quality content sent to your inbox every week.
Privacy Policy
Effective Date: August 5th, 2026
1. Introduction
Apptopia, Inc. ("Apptopia," "we," "us," or "our") provides competitive intelligence and performance estimates for mobile applications to help business clients make data-driven decisions. This Privacy Policy explains how Apptopia collects, uses, discloses, and otherwise processes personal information in connection with our apptopia.com website, our software development kit incorporated by our partners into their applications, our marketing and sales activities (including in-person events, trade shows, and conferences), and other contexts where this Privacy Policy is posted or referenced (collectively, the "Services"). It also describes choices available to you with respect to our processing. When used in this Privacy Policy, "personal information" or "information" means data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Your use of the Services is subject to our Terms of Use.
This Privacy Policy does not apply to:
- The practices of third parties we do not control.
- Information collected in context of job applications or employment with us.
- Information that has been anonymized or, to the extent permitted by law, deidentified.
Additional disclosures and rights may apply if you reside in certain regions:
For our contact details, see the Contact Us section below.
2. Collection
We collect the following categories of personal information about consumers:
- Device identifiers, including mobile advertising identifiers ("MAIDs"), IP addresses, and pseudonymous identifiers. MAIDs are user-resettable identifiers generated by mobile device operating systems, such as Apple’s IDFA or Android’s AAID. IP addresses are numerical labels assigned to devices connected to the internet. Pseudonymous identifiers are device- or user-level identifiers generated by us or third parties.
- Contact identifiers, including name, email address, postal address, and phone number.
- Internet or other network activity information, including app name, usage frequency dates and times of access, session start and end timestamps, pages or screens visited, and similar engagement information.
- Non-precise geolocation data, country- or region-level location information derived from your use of our the Services.
- Professional related information, including employer/business name, job title, position, and other professional profile details.
- Inferences drawn from any of the above categories of personal information.
3. Sources
We collect personal information from the following sources:
- Directly from you when you:
- visit our websites and submit forms, request a demo, or otherwise engage with us through apptopia.com; or
- interact with us by phone, email, or in person at events, trade shows, and conferences.
- Automatically from your device when you use our websites or when you interact with our emails. This information is collected through tracking technologies deployed by us and third parties. See Tracking Technologies.
- Through our software development kit when it is incorporated by our partners into their apps and you use those apps. See Our App Technologies.
- From third parties, including:
- Commercial data partners and licensors that provide data to us pursuant to written agreements;
- Vendors that provide us with analytics, security, fraud prevention, or similar services; and
- Publicly available sources, including app store pages and other public sources.
- Where we generate or derive based on the personal information collected from the sources described above.
4. Tracking Technologies
This section describes the types of tracking technologies incorporated into our websites or emails that automatically collect personal information when you interact with those online services.
- Cookies. Cookies are browser‑based text files that are placed on your browser when you visit a website, open or click on an email, Cookies may be session cookies (which expire when you close your browser) or persistent cookies (which remain until they expire or are deleted). Cookies may also be first‑party cookies (served directly by us) or third‑party cookies (served by third parties we work with).
- Pixels. Pixels (also known as web beacons) are code embedded in a website, email, or app. Pixels may include image pixels (such as one‑pixel transparent images) or JavaScript pixels. Pixels are often used in conjunction with cookies. When you access a service containing a pixel, the pixel may allow us or third parties to collect information from your browser or device, including by placing or reading cookies.
- App technologies. App technologies are technologies embedded directly in mobile or other applications, such as software development kits (SDKs). These technologies may allow us or third parties to collect information from your device. We offer a software development kit to our partners. We offer a software development kit to our partners that may be integrated into their applications. For more information, see Our App Technologies.
To learn about the choices available to you regarding our use of tracking technologies, see Your Privacy Choices.
5. Our App Technologies
Our app technologies are software components that third‑party developers may choose to incorporate into their own applications ("App Technologies"). The App Technologies enable us to collect certain information when users interact with certain partner applications.
When a user installs or uses a partner application, the App Technologies may collect information from the user’s device or application environment. The specific information collected may vary depending on the configuration of the App Technologies and the partner application in which it is integrated.
We make the App Technologies available to partners pursuant to written agreements that govern the collection, use, and sharing of information. Our partners are responsible for providing appropriate notice to their users and, where required by law, obtaining any necessary consents, honoring user opt‑out rights, and providing required disclosures regarding any financial incentives associated with their applications.
We process information collected through the App Technologies in accordance with our agreements with our partners and this Privacy Policy.
6. Purposes for Collection and Use
We collect and use personal information for the following purposes:
- Model development and analytics. We collect and use information to improve our services and better understand how mobile applications perform. We analyze usage patterns and engagement signals across applications, regions, and time periods to create broad, high-level insights.
- Operation of our website and Services. We collect and use information to operate, maintain, and support our websites and other Services, including troubleshooting, performance monitoring, and quality assurance.
- Communications. We collect and use information to communicate with you, including responding to inquiries, providing service‑related notices, and sending transactional or business‑related communications.
- Security, compliance, and enforcement. We collect and use information to protect the security and integrity of our systems and data, prevent or investigate fraud or misuse, enforce our terms and policies, and comply with applicable legal and contractual obligations.
- At your direction or with appropriate authorization. We collect and use information where you instruct us to do so or where we provide notice and obtain consent as required by applicable law.
- Non-personal information. We may anonymize or deidentify information so it is no longer considered personal information under applicable law. Where we deidentify information, we commit to maintaining and using the deidentified information in deidentified form and not attempt to reidentify it. We may use non-personal information for any purpose permitted by law.
Use of Artificial Intelligence. We use automated tools, including artificial intelligence and machine learning technologies, to support the purposes described above, such as analytics, research, model development, and service improvement. These technologies may be applied to personal information, aggregated information, or deidentified information, as permitted by law, and are not used to make significant decisions about individual consumers.
See Your Privacy Choices to exercise choice around our collection and use.
7. Disclosure
We disclose the information we collect for the purposes described in this Privacy Policy and to the categories of recipients described below:
- Service providers and similar vendors. We disclose information to service providers and similar vendors that process information on our behalf to support our business and Services, such as website hosting, cloud infrastructure, payment processing, data analytics, security and fraud prevention, customer support, and technical operations. Where required by law, we contractually restrict service providers from using personal information for purposes other than performing services for us, although we may permit service providers to use non‑personal information for any purpose permitted by applicable law. In some cases, vendors that provide services such as security, fraud prevention, or compliance may process information for their own purposes and in accordance with their own privacy policies, including as independent controllers, to the extent permitted by applicable law.
- Partners that integrate our App Technologies. We may disclose information to partners that integrate the App Technologies into their apps or otherwise work with us pursuant to written agreements. These disclosures occur in connection with operating, supporting, or enforcing our agreements and services.
- Affiliates. We may disclose information to our affiliates and related entities for purposes consistent with this Privacy Policy, including where they act as service providers or support our internal business operations.
- Public disclosures. We disclose information you choose to make public through the Services, such as information you voluntarily post in public‑facing areas. Please consider carefully before making information public, as information you share publicly may be accessible by others and may not be removable, subject to applicable law.
- Corporate transactions. We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of some or all of our business or assets, including as part of due diligence or negotiations.
- Security, compliance, and enforcement disclosure. We disclose information to comply with applicable law, lawful requests, or legal process; to respond to requests from public or governmental authorities; and to protect the rights, property, safety, and security of Apptopia, our Services, users, partners, or others.
- Recipients at your direction or with your consent. We disclose information where you direct us to do so or where we provide notice and obtain consent.
To learn about the choices available to you regarding our disclosure of your information, see Your Privacy Choices.
8. Third Parties
Our Services may link to, or be incorporated into, websites and online services controlled by third parties. For example, our App Technologies may be integrated by partners in their apps. In addition, we may integrate technologies into our Services, including those described in Tracking Technologies, that are controlled by third parties. Except where third parties act as our service providers processing information on our behalf, such third parties independently determine the purposes and means of processing your information and process information in accordance with their own privacy policies and terms. We encourage you to review the privacy policies of any third‑party websites, services, or applications you interact with, including those that integrate our App Technologies.
9. Your Privacy Choices
This section describes the choices available to you regarding your information.
- Region-Specific Choice. Additional disclosures and rights may apply if you reside in certain regions. For details, please see:
- U.S. State-Specific Disclosures
- EEA Disclosures
- Emails. You may opt out of receiving marketing emails from us by changing your communication preferences in your account settings (if you have an account), following the unsubscribe instructions included in our marketing emails, or emailing us at the address listed in the Contact Us section with "UNSUBSCRIBE" in the subject line. Please note that you cannot opt out of transactional or service‑related communications.
- App Technologies. If you interact with a third‑party application that integrates the App Technologies, any choices regarding the collection and use of information through the App Technologies must be exercised through the app operated by the partner that provides that application, including through that partner’s privacy settings, notices, or communications. Apptopia does not control, and is not responsible for, the privacy practices or choice mechanisms offered by third‑party partners. We encourage you to review the partner’s privacy policy and settings to understand and manage your choices. Unlike cookies, certain app‑based technologies cannot be controlled through browser settings. You can reset or limit use of your device’s advertising identifier through your device settings. See your device documentation for details.
- Tracking technologies in our websites. You may be able to limit certain data collection through your browser or device settings. The availability and effectiveness of these controls depend on your browser, device, and operating system.
- Cookies and pixels. You may be able to manage cookies through your browser settings. When you manage cookies, pixels or similar technologies associated with those cookies may also be affected. If you use multiple browsers or devices, you will need to configure your settings separately for each. If you delete or reset your cookies, you may need to reconfigure your preferences. Your ability to limit cookies is subject to your browser’s settings and limitations.
- Third party opt-out tools. Some third parties we work with offer their own opt-out tools related to information collected through cookies and pixels. To opt out of your information being used by Google Analytics, visit https://tools.google.com/dlpage/gaoptout. We are not responsible for the effectiveness of their tools.
- Industry opt-out tools for targeted advertising. Some third parties we work with follow the Digital Advertising Alliance's Self-Regulatory Principles for Online Behavioral Advertising, which offers its own opt-outs tools for targeted advertising. For details, visit https://youradchoices.com/control. We are not responsible for the effectiveness of these tools.
10. Children
Our Services are not directed to children under 16 years old, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe we have collected information from children in violation of applicable law, contact us as set out in the Contact Us section below.
11. Security
We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect personal information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Please note that transmission via the internet is not completely secure and we cannot guarantee the security of personal information about you.
12. Retention
We retain personal information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. Where personal information is no longer required for the purposes for which it was collected, we will securely delete or anonymize it.
For additional details on how long we retain different categories of personal information, please refer to our Retention Policy.
13. International Transfers
We are based in the U.S. and all personal information we collect is stored and processed on servers located in the U.S. If you are located outside the U.S., including the EEA, Switzerland, or UK, please be aware that your personal information will be transferred to and processed in the U.S. or another country where we operate when you use the service.
Where applicable data protection law requires us to ensure appropriate safeguards are in place for such transfers, we will rely on one or more of the following mechanisms:
- the EU-U.S. Data Privacy Framework, including where applicable the UK Extension;
- Standard Contractual Clauses approved by the European Commission, supplemented by any additional safeguards required by applicable law; or
- the UK International Data Transfer Agreement or Addendum, as applicable to transfers of UK personal data.
The specific safeguard relied upon will depend on the circumstances of the transfer. To request a copy of the applicable safeguards, or for further information about how we protect your personal information when it is transferred internationally, please contact us at privacy@apptopia.com.
14. Changes to this Privacy Policy
We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Your continued use of our Services indicates your consent to the Privacy Policy then posted. If the changes are material, we may provide additional notice to you, such as through email or prominent notice on the Services.
15. Contact Us
The controller under this Privacy Policy is:
Apptopia, Inc.
Attn: Privacy
132 Lincoln St, 3rd Floor, Boston, MA 02111
If you are located in the EEA, you may also contact our EU representative at eurep@apptopia.com, or write to: Lewis Silkin Ireland. Fitzwilliam Court, Office Suite 502-505, 2 Leeson Close, Dublin, D02 YW24.
If you are located in the UK, you may also contact our UK representative at ukrep@apptopia.com, or write to: Lewis Silkin (N.I) LLP. 32-38 Linenhall Street, Belfast, BT2 8BG.
You may also contact our Data Protection Officer at dpo@apptopia.com, or write to: Lewis Silkin LLP. Arbor, 255 Blackfriars Rd, London SE1 9AX.
If you have questions about this Privacy Policy or experience difficulty accessing this Privacy Policy, you may contact us using the postal or email address above.
Requests to exercise privacy rights must be submitted using the designated methods described in the applicable sections of this Privacy Policy. The contact details in this section should not be used to submit rights requests except where a specific section of this Privacy Policy expressly permits submission by email or postal mail, or where required under applicable law.
16. U.S. State-Specific Disclosures
This section applies to residents of California or any other U.S. state that has enacted a comprehensive state privacy law (each, a "Covered State"). For purposes of this Privacy Policy, Covered States include Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. This section does not apply to residents of other states except as expressly provided herein.
Notice at Collection
Our data practices are as follows:
- Collection. In the past 12 months, we have collected the categories of personal information set out in the Collection section above.
- Sources. The categories of sources from which we collect personal information are set out in the Sources section above.
- Purpose. The specific purposes (including business and commercial purposes) for collecting and using personal information are set out in the Purposes for Collection and Use section above.
- Disclosure. The categories of persons to whom personal information is disclosed, including service providers for business purposes, are set out in the Disclosure section above. We disclose the categories of personal information listed in the Collection section above to service providers for business purposes.
- Sales, Shares, and Targeted Advertising. Some of our disclosures of personal information to third parties may be considered a sale or share for cross-context behavioral advertising purposes under applicable law. We also may process your personal information for purposes of targeted advertising as defined by applicable law. We do not sell or share the personal information of consumers we know are under 16 years old.
- Profiling. We do not process personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.
- Sensitive Data. To the extent any personal information we collect is considered sensitive personal information under California law, we collect, use, and disclose sensitive personal information only for the permissible business purposes for sensitive personal information under the CCPA or without the purpose of inferring characteristics about consumers.
- Retention. The criteria used to determine the period of time we retain your personal information is set out in the Retention section above.
Rights
This section sets out your rights. See Exercising Rights below for details on how to exercise your rights.
- Verifiable Requests.
For California residents, you have the right to:
- Know what personal information we have collected about you, specifically have the right to know the categories of sources from which personal information was collected, the business or commercial purposes for collecting, selling, or sharing personal information, the categories of personal information that we sold, shared, or disclosed for a business purpose, the categories of third parties to whom we disclosed personal information, and the specific pieces of personal information we have collected about you;
- Correct inaccurate personal information we maintain about you; and
- Delete personal information that we have collected from you.
For Covered State Residents, you have the right to:
- Confirm whether or not we are processing your personal information, and in some regions, confirm the categories of personal information we have processed;
- Access your personal information;
- Correct inaccuracies in your personal information;
- Delete your personal information;
- Obtain a copy of your personal information that you previously provided to us in a portable and readily usable format
If you are a Minnesota or Oregon resident, you also have the right to obtain a list of the specific third parties to which we have disclosed personal data.
If you are a Delaware or Maryland resident, you also have the right to obtain a list of categories of third parties to which we have disclosed personal data.
If you are a Connecticut or Rhode Island resident, you also have the right to obtain a list of the specific third parties to which we have sold personal information.
- Opt-Out of Sales, Shares, and Targeted Advertising. You have the right to opt-out of us selling or sharing for cross-contextual advertising purposes your personal information to third parties, or processing your personal information for targeted advertising purposes.
- Revocation of Consent. You have the right to revoke consent previously given to us that we rely on to process your personal information. If you withdraw consent, you may not be able to receive certain services dependent on that consent.
- Nondiscrimination. You have the right not to be discriminated against for exercising any of your rights.
- Appeals. You have the right to appeal our decision in response to your requests.
- Authorized Agents. You may exercise your rights through an authorized agent.
Exercising Rights
This section sets out how to exercise your rights. Note that rights relating to personal information we process on behalf of a business client as a processor or controller must be exercised through that client.
- Verifiable Requests. Verifiable requests require us to verify your identity before fulfilling them. To exercise any of these rights, submit a request through our form https://apptopia.com/en/consumer-privacy-rights/ (specifying the rights you wish to exercise) or call our toll-free number at (855) 277-8674. We will confirm receipt of and respond to your request consistent with applicable law. To verify your identity, we may require you to confirm receipt of an email sent to an email address that matches our records, provide us with details relating to your history with us, or provide additional information. If we cannot verify your identity, we may deny your request in accordance with applicable law.
- Sales, Shares, and Targeted Advertising. You may opt out of our sale, sharing, and use of your personal information for targeted advertising using the options described below. How your request is applied depends on how we process your information.
- You may submit a request through "Your Privacy Choices" in the footer of our website or use a recognized browser-based opt-out preference signal, such as Global Privacy Control. We will treat such a signal as a request to opt out for that browser and, if you are logged into your account when you submit the request or we maintain a pseudonymous profile associated with the browser or device from which you submit the request, we will apply the opt-out more broadly across our systems where feasible. Because this signal operates at the browser level, it may not apply to information we maintain about you in other contexts (such as account or contact information), unless we link that browser or device to you as described above. Also, if you use a different browser or device, or reset cookies, you will need to re-enable your preferences.
- You may also submit a request through our webform here or your account settings. When you submit a request in this way, we will apply your opt-out to the information associated with your account or contact identifiers you provide. However, this type of request may not automatically apply to information collected through tracking technologies on browsers or devices that are not linked to you.
- Consent. To revoke consent, write us at the email or postal address set out in the Contact Us section above (specifying the consent you wish to withdraw). If you withdraw consent, you may not be able to receive certain services related to that consent.
- Authorized Agents. Authorized agents must submit requests through the specific methods designated herein. Except where prohibited by law, we will require written and signed proof of the agent’s permission.
- Appeals. To appeal, write us at the email or postal address set out in Contact Us and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia.
- Limitations. Your rights are subject to exceptions and our data retention practices. To the extent permitted by law, rights requests must be exercised through the applicable designated method specified herein.
Additional California Disclosures
- Shine the Light. If you are a California resident and have an established business relationship with us, you have the right to request a list of the categories of personal information (as defined by Shine the Light) disclosed by us to third parties for their own direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of such third parties. To exercise this right, write us at the email or postal address set out in the Contact Us section above and specify that you are making a "California Shine the Light Request." We will respond to requests received in accordance with Shine the Light.
- Do Not Track. We do not respond to Do Not Track signals.
Additional Connecticut Disclosures
Large Language Models. We do not collect or use personal data to train large language models. However, when we sell personal data to third parties, they may use the data to train their own large language models. See their privacy policies for details.
Disclosures for Nevada
For Nevada residents, you have the right to opt-out of sales of your personal information to third parties. To exercise your right, follow the opt-out process in Exercising Rights above.
17. EEA, Switzerland, and the UK
Data Practices
This Privacy Notice is intended to meet the requirements of privacy laws of the European Economic Area ("EEA"), Switzerland, and the United Kingdom ("UK"), in particular the EU’s General Data Protection Regulation and the UK GDPR (collectively, the "GDPR").
Apptopia, Inc. is the data controller responsible for your personal information.
Lawful Basis for Processing
If you are located in the EEA, Switzerland, or UK, we provide information about the lawful bases on which we process your personal information. Under Article 6 GDPR, these bases include:
- Consent. Where you have given us clear consent to process your personal information for specific purposes, including consent to the use of cookies and similar tracking technologies on our website and consent to the collection and processing of your information through our SDK technologies. You may withdraw your consent at any time by contacting us using the details set out in the Contact Us section above.
- Performance of a contract. Where processing is necessary for the performance of a contract with you, or in order to take steps at your request prior to entering into a contract. This includes processing necessary to operate and maintain our website and Services, to respond to your inquiries, and to fulfill our obligations under our Terms of Use.
- Legitimate interests. Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights. This includes analytics, security, fraud prevention, and service improvements.
- Legal obligation. Where processing is necessary to comply with a legal obligation to which we are subject.
We do not intentionally collect special category data (as defined in Article 9 GDPR). If any demographic information we collect is considered special category data in your jurisdiction, the lawful basis for that processing is your explicit consent (Article 9(2)(a) GDPR).
Your Rights
If you are located in the EEA, Switzerland or UK, you have the following rights under the GDPR in relation to your personal information:
- Right of access. You have the right to request a copy of the personal information we hold about you.
- Right to rectification. You have the right to request that we correct any inaccurate personal information we hold about you.
- Right to erasure. You have the right to request that we delete your personal information in certain circumstances.
- Right to restriction of processing. You have the right to request that we restrict the processing of your personal information in certain circumstances.
- Right to data portability. You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
- Right to object. You have the right to object to processing of your personal information where we rely on legitimate interests as our lawful basis.
- Right to withdraw consent. Where we rely on consent as the lawful basis for processing, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority. For users in the UK, this is the Information Commissioner’s Office (ICO) at ico.org.uk. For users in the EEA, this is the data protection authority in your country of residence.
- Right to complain to us. You have the right to complain to us about any alleged breach of GDPR.
To exercise any of these rights, submit a request through our form here or write us at the email or postal address set out in the Contact Us section above (specifying the rights you wish to exercise).
Where we process personal data on behalf of a business client acting as controller, requests to exercise these rights must be submitted directly to that client.
Complaints
If you have any issues with our compliance, you may contact our Data Protection Officer at dpo@apptopia.com, or write to: Lewis Silkin LLP. Arbor, 255 Blackfriars Rd, London SE1 9AX.
You also have the right to lodge a complaint with the data protection regulator in your jurisdiction.