GDPR Compliance
Last updated: March 20, 2026
1. Data Controller
The data controller for the App Club service is:
Public Organization "Mobile App Digital Development Foundation"
Registry code: 46065713
Address: Ukraine, 49001, Dnipropetrovsk region, Dnipro, Korolenko St., 3, Office 625
Email: [email protected]
2. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
Consent (Art. 6(1)(a)): When you register for an account, you consent to the processing of your data as described in our Privacy Policy, including sharing data with third-party advertising partners.
Contract performance (Art. 6(1)(b)): Processing necessary to provide the App Club service — hosting your landing pages, generating legal documents, and managing your projects.
Legitimate interests (Art. 6(1)(f)): Analytics and service improvement, fraud prevention, and security.
3. Your Rights Under GDPR
As a data subject in the EU/EEA, you have the following rights:
Right of access (Art. 15) — You can request a copy of all personal data we hold about you.
Right to rectification (Art. 16) — You can ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17) — You can request deletion of your personal data ("right to be forgotten"). You can initiate account deletion from your profile settings or by contacting us.
Right to restrict processing (Art. 18) — You can ask us to limit how we use your data.
Right to data portability (Art. 20) — You can request your data in a structured, machine-readable format.
Right to object (Art. 21) — You can object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent (Art. 7(3)) — You can withdraw consent at any time without affecting the lawfulness of prior processing.
4. How to Exercise Your Rights
To exercise any of these rights, email us at [email protected] with the subject line "GDPR Request". We will respond within 30 days as required by GDPR.
You also have the right to lodge a complaint with a supervisory authority in your EU/EEA member state.
5. Data Processing and Transfers
Your data may be processed on servers located outside the EU/EEA. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay, as required by GDPR Articles 33 and 34.
7. Data Protection Impact Assessments
We conduct Data Protection Impact Assessments (DPIAs) where processing operations are likely to result in a high risk to the rights and freedoms of individuals, in accordance with GDPR Article 35.
8. Contact
For any GDPR-related inquiries:
Email: [email protected]
Address: Ukraine, 49001, Dnipro, Korolenko St., 3, Office 625
Phone: +380 97 827 22 06