Privacy Policy
Last updated: July 5, 2026This Privacy Policy explains how A&K Worldwide Enterprises FZCO ("BuildMyApp", "we", "us") collects, uses, and protects personal data when you visit buildmyappnow.io or use any of our mobile applications and web platforms, including Biolyze, Biolyze Pro, Sokommerce, Juvento, Kündigo, AppUp, PulseTrade, Amiona, and Dola (together, the "Services").
We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and, where applicable, the Kenya Data Protection Act 2019.
1. Data Controller
A&K Worldwide Enterprises FZCO
Dubai World Trade Centre Free Zone
Dubai, United Arab Emirates
Email: info@buildmyappnow.io
2. Data We Collect
On our website
- Contact and application data — name, email address, and project details you submit through our application or contact forms.
- Usage data — pages visited, approximate location (country level), device and browser type, collected through privacy-friendly analytics.
- Communication data — the content of emails or WhatsApp messages you send us.
In our apps
- Account data — email address, name, and authentication identifiers (e.g. Sign in with Apple or Google).
- Content you provide — depending on the app, this may include uploaded documents (e.g. lab reports in Biolyze, termination letters in Kündigo), shop and product information (Sokommerce), care-related entries (Amiona), or wallet addresses (Dola).
- Health data (Biolyze / Biolyze Pro) — blood test values and derived health metrics. This is special-category data under Art. 9 GDPR and is processed only with your explicit consent, solely to provide the analysis features you request. You can withdraw consent and delete this data at any time in the app.
- Payment data — subscriptions are processed by Apple App Store, Google Play, or Stripe; M-PESA payments are processed by IntaSend. We never receive or store your full card or mobile-money credentials. We receive transaction confirmations and subscription status.
- Technical data — device model, OS version, app version, crash logs, and pseudonymous identifiers used for app functionality and stability.
3. Purposes and Legal Bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the Services you request, including AI-powered analysis features | Art. 6(1)(b) — performance of a contract; Art. 9(2)(a) — explicit consent for health data |
| Processing payments and managing subscriptions | Art. 6(1)(b) — performance of a contract |
| Responding to inquiries and project applications | Art. 6(1)(b), Art. 6(1)(f) — legitimate interest |
| App stability, security, and fraud prevention | Art. 6(1)(f) — legitimate interest |
| Analytics and product improvement | Art. 6(1)(f) — legitimate interest, or Art. 6(1)(a) — consent where required |
| Legal compliance (tax, accounting, anti-fraud) | Art. 6(1)(c) — legal obligation |
4. Service Providers
We use a small number of carefully selected processors to run the Services:
- Google Firebase / Google Cloud — authentication, databases, push notifications, crash reporting (EU data centers where available).
- Supabase — databases and file storage for selected platforms.
- Anthropic — AI processing for analysis features (e.g. document and lab-report analysis). Content is transmitted server-side for processing and is not used to train models.
- RevenueCat — subscription management.
- Apple, Google, Stripe, IntaSend (M-PESA) — payment processing.
- Vercel / Railway — hosting infrastructure.
- Resend — transactional email delivery.
All processors are bound by data processing agreements. Where data is transferred outside the EEA or UAE, we rely on adequacy decisions or EU Standard Contractual Clauses.
5. Data Retention
We keep personal data only as long as needed for the purposes above: account data for the life of your account plus up to 30 days after deletion; health data until you delete it or your account; payment records as required by tax law (typically 5–10 years); website inquiries for up to 24 months.
6. Your Rights
You have the right to access, rectify, delete, and receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time with future effect. You can delete your account and associated data directly in each app (Settings → Delete Account) or by emailing info@buildmyappnow.io. You also have the right to lodge a complaint with a supervisory authority — in the EU, your local data protection authority; in the UAE, the UAE Data Office.
7. Children
Our Services are not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has provided us personal data, contact us and we will delete it.
8. Security
All data is encrypted in transit (TLS) and at rest. Access is limited to team members who need it to operate the Services. Health data in Biolyze is additionally protected by app-level access controls.
9. Changes
We may update this policy as our Services evolve. The current version is always available at this address, and material changes will be announced in the relevant app or by email.
10. Contact
For any privacy question or request: info@buildmyappnow.io