Privacy Policy

Last updated October 8, 2026

This Privacy Policy explains how cabano (“cabano,” “we,” “us,” or “our”) collects, uses, and shares information when you use cabano, our AI platform for building and publishing mobile apps (the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

Information you provide

• Account information — such as your name and email address, collected when you sign up or sign in through our identity provider.
• Prompts and content — the messages, instructions, files, and images you submit to generate and edit apps, and the app code and assets generated for you.
• Payment information — when you subscribe to a paid plan, our payment processor collects your billing details. We do not store full payment card numbers.
• Communications — information you provide when you contact support or otherwise correspond with us.
• Connected AI assistants — if you connect cabano to ChatGPT, the requests ChatGPT sends on your behalf and a record of the connection, as described in Section 4.
• Slack — if you use the cabano app for Slack, the messages you send it, basic details about your Slack account and workspace, and a record of the connection, as described in Section 5.

Information collected automatically

• Usage data — actions you take in the Service, features you use, generation activity, and credit consumption.
• Device & log data — IP address, browser type, device identifiers, timestamps, and error logs.
• Cookies & similar technologies — used to keep you signed in, remember preferences, understand how the Service is used, attribute advertising visits, and measure whether those visits lead to registration or product activation.

2. How we use information

• to provide, operate, secure, and maintain the Service;
• to generate, preview, and help you publish apps at your direction;
• to process payments, manage subscriptions, and track credit usage;
• to communicate with you about your account, updates, and support requests;
• to monitor, debug, and improve the Service and develop new features;
• to measure and improve the effectiveness of our advertising;
• to detect, prevent, and address fraud, abuse, and security issues; and
• to comply with legal obligations and enforce our Terms of Service.

3. AI processing

To generate apps, your prompts and related content are processed by our systems and by third-party AI model providers that power the Service. These providers process your content to return generated output to us. We do not sell your prompts or generated content, and we do not use them to train third-party foundation models except as permitted by the applicable provider’s terms and by this Policy.

4. Using cabano in ChatGPT

You can connect your cabano account to ChatGPT, OpenAI’s AI assistant, so that ChatGPT can build and change apps in your account during a conversation. This section explains what is exchanged when you do.

Connecting

You start the connection in ChatGPT and approve it on a cabano page while signed in to your cabano account. The approval screen lists what ChatGPT will be able to do: read your apps and their build progress, create apps and request changes using your cabano credits, and start iPhone simulator previews of your apps. You can also decline. We never receive your ChatGPT password, and ChatGPT never receives your cabano password or your Google or Apple sign-in credentials.

Information we receive from ChatGPT

• Your requests — app names, app descriptions, and change requests that ChatGPT writes from your conversation and sends to cabano, along with identifiers ChatGPT uses to avoid duplicate requests. We receive only what ChatGPT includes in these requests, not your full ChatGPT conversation history.
• Technical context — ChatGPT may attach information such as your language setting, approximate location, and anonymized ChatGPT identifiers to its requests. We do not use this information to identify you, and we do not store it.

Information we send to ChatGPT

To answer the requests you make in ChatGPT, cabano returns:

• your cabano account name, email address, plan, and remaining credits;
• the names, identifiers, and build status of your apps, summaries of what each build created or changed, and links to your apps in cabano; and
• screenshots of your app running in an iPhone simulator.

ChatGPT shows this information to you and may use it to answer your questions in the conversation. Once it reaches ChatGPT, it is handled by OpenAI under OpenAI’s own terms and privacy policy, which we do not control. Please review OpenAI’s Privacy Policy to understand how OpenAI handles it.

How we use and store it

Apps you build through ChatGPT are generated, stored, and billed like apps built directly in cabano: your requests are processed as described in Section 3 and use your plan’s credits. We store a record of the connection (your account, the connected client, the permissions you granted, and when access was granted and last renewed), the access tokens that let ChatGPT act for you (stored only in hashed form), and a record of each build requested through ChatGPT (the request, its status, and the resulting app version). Unfinished authorization requests expire within minutes and are deleted automatically; expired tokens are deleted automatically.

Disconnecting

You can revoke ChatGPT’s access at any time from Connections in your cabano account settings; removing cabano from ChatGPT also stops ChatGPT from using the connection. Revoking access immediately stops ChatGPT from reading or changing your apps, although a build you already requested may still finish. Revoking access does not delete apps you built through ChatGPT; you can delete those in cabano or ask us to delete your account as described in Section 9.

5. Using cabano in Slack

The cabano app for Slack lets you build and change apps by sending direct messages to cabano in a Slack workspace. Each conversation thread with the app is one app: your first message creates it, and your replies in that thread change it. This section explains what is exchanged when you use it.

Installing and connecting

Someone with permission to add apps to a Slack workspace installs cabano through Slack’s own approval screen, which lists the permissions the app requests. cabano asks only for permissions for its own bot user; it never receives permission to read or post as any person in Slack. Installing the app does not connect anyone’s cabano account. Each person connects separately: when you first message the app or open its Home tab, it gives you a one-time link that expires after 30 minutes. Opening that link while signed in to cabano shows the Slack account, the workspace, and the cabano account that will be connected, and you can approve or cancel. We never receive your Slack password, and Slack never receives your cabano password or your Google or Apple sign-in credentials.

Information we receive from Slack

• Workspace details — the workspace’s name and identifier, the Slack user ID of the person who installed the app, the permissions granted, and the access token that lets cabano’s bot post in that workspace.
• Your Slack account — your Slack user ID and the display name or real name on your Slack profile, so the connection screen and your cabano settings can show which Slack account is connected.
• Your messages to cabano — the text of the direct messages you send the app, along with the conversation, thread, and message identifiers that keep each thread tied to its app. cabano receives only messages sent in its own direct-message conversations. It cannot read channels, conversations between people, or your workspace’s message history, and mentioning cabano in a channel does not send that message to us. If you attach files or images, cabano does not download or use them.

Information we send to Slack

To answer your messages, cabano posts in your direct-message conversation with the app and shows information on the app’s Home tab, which only you can see:

• build progress and results, including your apps’ names, icons, and version numbers, summaries of what each build created or changed, and links to your apps in cabano;
• screenshots of your app running in an iPhone simulator, when you ask for a preview;
• the email address of the cabano account you connected and the names of your most recently updated apps; and
• notices about your plan or credits when a build can’t start.

Once posted, this information is stored by Slack and governed by your workspace’s agreements with Slack and its settings, including message retention and the access that workspace owners and administrators have to messages, which we do not control. Disconnecting or removing cabano does not delete messages it has already posted. Please review Slack’s Privacy Policy to understand how Slack handles it.

How we use and store it

Apps you build through Slack are generated, stored, and billed like apps built directly in cabano: your messages are used as build instructions, processed as described in Section 3, and use your plan’s credits. We store each workspace installation (with its access token encrypted), the connection between your Slack account and your cabano account, which Slack thread belongs to which app, and a record of each build requested from Slack (your message, its status, and the resulting app version). Unused connection links expire after 30 minutes and are deleted automatically.

We use information received from Slack only to provide the cabano app for Slack to you. We do not use it, including your messages, to train or fine-tune AI models; we do not sell it; and we do not share it with advertising or analytics providers.

Disconnecting and removing the app

You can disconnect your Slack account at any time from Connections in your cabano account settings or with Disconnect on the app’s Home tab in Slack. Disconnecting immediately deletes the connection between your Slack account and your cabano account, so your messages stop building apps, although a build you already requested may still finish and post its result. Removing cabano from a workspace, or revoking its access, deletes that workspace’s installation and access token, every connection to it, and the records tying its Slack threads to apps. Neither deletes apps you built through Slack, or the messages that built them, which stay in your cabano account; you can delete those apps in cabano or ask us to delete your account as described in Section 9.

6. How we share information

We share information only as described below. We do not sell your personal information.

• Service providers — vendors that host our infrastructure, provide authentication, process payments, deliver AI model inference, and support analytics and communications, acting on our behalf under contractual protections.
• Analytics & advertising providers — Google Analytics and Meta receive limited device, browser, advertising-attribution, registration, and activation data so we can measure use of the Service and the effectiveness of our advertising. Account identifiers sent for advertising measurement are normalized and cryptographically hashed before transmission.
• OpenAI (ChatGPT), at your direction — when you connect cabano to ChatGPT, the information described in Section 4.
• Slack, at your direction — when you use cabano in Slack, the information described in Section 5, posted in the workspace where you use the app.
• App marketplaces — when you choose to publish an app, we transmit the necessary materials to the relevant marketplace (for example, the Apple App Store) using credentials you provide or authorize.
• Legal & safety — when required by law, legal process, or to protect the rights, safety, and security of cabano, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

7. Data retention

We retain information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account, after which we will delete or de-identify your personal information except where retention is required by law.

8. Security

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. To report a security vulnerability, see our security policy.

9. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can update account details in the Service or contact us to exercise these rights. You may also opt out of non-essential emails via the unsubscribe link. We will not discriminate against you for exercising your rights. You can use browser controls to limit cookies and the advertising preference controls provided by Google and Meta.

10. International users

We operate in the United States, and your information may be processed in the U.S. and other countries that may have different data-protection laws than your own. Where required, we use appropriate safeguards for cross-border transfers.

11. Children’s privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will take steps to delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means. The “Last updated” date above reflects the latest revision.

13. Contact

For privacy questions or requests, contact us at privacy@cabano.app.