Privacy policy

This policy covers this website, the Foundry Cloud service behind it, and the apps you build with them. It is published by Simkins & Elgazar LLC, a Virginia limited liability company ("we", "us"). It takes effect on 2026-11-10. The Foundry Android app is not available yet. Questions go to hello@simkinselgazar.com.

The short version

• You sign in with Google; it is the only way to have an account. We receive the email address, name, profile picture link and account ID that Google shares.
• When Foundry builds or changes an app, your request, the app's plan and code, and screenshots of the app being tested on our servers are sent to AI models through OpenRouter. We keep the app and its records until you delete them, and a full log of each build for about 60 days.
• Your apps are private until you create a share link. Anyone with a link can use the app until you revoke it.
• There is no advertising and no analytics. Payments go through Stripe; we never see your card or bank details.
• You can delete any app, or your whole account, on the website or by email. Most of it goes at once; the few copies that remain for a while are listed below.

What we collect, and why

Your Foundry account

Apps you build

Your apps are built on our own servers in Amazon Web Services, and the AI models described below write them. This is what that keeps, where, and for how long:

What an app saves while you use it (your entries, scores, settings) stays in the browser you use it in. It is not sent to us, unless the app was built for an online service and sends it there (see below).

What the AI receives

Foundry Cloud does not run AI models itself. It relays each request, with our own API key, to OpenRouter, Inc., which routes it to a provider of the model we have chosen for that kind of work. We pick these models and may change them at any time; OpenRouter may route a request to any provider that serves the chosen model. The content is:

• As you type a new app's request: the request, so a decision model can say whether it can be built as an app that runs on its own in a browser, and how big it is.
• When Foundry builds or changes an app: your request (or the change you typed), the app's current plan and code, Foundry's instructions to the models, your device profile (above), and the results of testing the built app in a browser on our servers: what each test did, the errors it printed, and screenshots of it. If you ticked the device check, the results and pictures from your own browser go to the builder too.
• A web search for the plan: while it checks the plan's facts, OpenRouter may search the web through its search provider, Exa Labs, Inc., with a search query OpenRouter forms from that call.

We record the number of calls, the AI tokens each used, and what each cost us, against the build it belonged to, and we keep each build's full log as listed above. OpenRouter and the model providers process the content under their own policies: OpenRouter states that it does not use inputs or outputs for training, and that some model providers may retain inputs and outputs or use them for training under their own terms. Model providers may be located outside the United States. Please do not put passwords, financial details or other secrets into a request. See OpenRouter's privacy policy.

Apps that use the internet

An app is built to work offline, with everything it needs inside it, unless you asked for something that needs an online service; its page then says what it needs a connection for. Such an app sends that service what it needs to work, directly from your browser; we do not see it. That service's own terms and privacy policy apply, and any account or key you give the app is yours.

Opening and sharing your apps

Each app runs on its own address on a separate domain (foundryusercontent.com), so apps share no storage or cookies with this site or with each other. The address opens only with a signed pass from our server:

• Yours, given after checking your sign-in, lasts 30 days, so an app you installed keeps opening. Anyone you give the link from Open in its own tab can use it for that long, so keep it to yourself.
• A share link's pass lasts 10 minutes, and the share page renews it while the link is valid. A share link works until you revoke it; the links this site creates do not expire on their own.
• Revoking a link stops only that link: whoever is using it loses the app within 10 minutes. Your app keeps its address and your saved data, and your other links keep working.
• People using a share link keep what they save in the app in their own browser, separate from yours. They can use the app but cannot download it or its source: the app's address never serves the downloads, to anyone.
• You download the one-file app and the source through a link our server gives only to you, which works for 10 minutes.

The pass is kept in a cookie for that app's address only; it holds the pass and nothing about you. App pages tell search engines not to index them, and Foundry adds no analytics or trackers to the apps it builds. A copy you download and open from your own device does not go through Foundry at all.

Payments

Tokens are bought on this website through Stripe, Inc., on Stripe's checkout page. We give Stripe the email address and id of your Foundry account and the amount; Stripe collects your payment details (card or bank) and billing details and may use information about your device to prevent fraud, under Stripe's privacy policy. From Stripe we receive the checkout session id, the amount, any tax, what reached us after Stripe's fee, and any refund or dispute, so the right number of tokens can be added or taken back. We also keep a log of Stripe's notifications to us (their id, type and result, with the account id, checkout session and amounts involved) for 90 days, also after the account is deleted.

Server logs

Each request to Foundry Cloud leaves a log line: the route called, your account id, the result code, timing, the AI model used, token counts and costs, the ids of builds, apps or payments involved, and, when an AI provider or Stripe refuses a request, the error message it returned. These logs do not contain the content of your requests. They are kept for a limited period set by our hosting provider (Supabase) and deleted automatically. Like any internet service, our providers see your IP address when your browser connects.

This website

This site is static and hosted by AWS Amplify Hosting. It sets no cookies, runs no analytics and loads no scripts, fonts or styles from third parties. Every page asks Foundry Cloud for the current prices and limits (a request that carries nothing about you), and the pages for building apps (My apps, Tokens, a build's progress) talk to Foundry Cloud as you. Amplify Hosting keeps standard access logs, including IP addresses, for a limited time.

How we use it

• To sign you in and keep you signed in.
• To build and change your apps when you ask, and to host them for you and for the people you give a share link to.
• To charge and refund tokens as described in the terms, and to add tokens you were given or bought.
• To enforce fair-use limits, prevent abuse and fraud, and keep the service running and secure.
• To measure how well builds work and to read build logs, so we can fix and improve Foundry.
• To answer you when you write to us, and to tell you about changes to the service or these policies.

We do not build advertising profiles, show advertising, or sell or rent your data to anyone.

Who else sees it

Beyond these, we disclose data only if the law requires it, to protect our rights or someone's safety, or to a successor if the business changes hands, in which case this policy continues to apply.

How long we keep it

• Account data, Google profile, balance, ledger, build records, holds, web top-up records, your apps, their records and share links: until you delete the app (for what belongs to one app) or your account.
• Files you delete, or that are deleted with your account (hosted apps, projects, downloads, checkpoints, pictures): kept as hidden old versions for 30 days, then deleted.
• A build's checkpoints, full log and device-check pictures: about 60 days. Its progress messages: 30 days after it ends. Build server logs: 14 days.
• A daily copy of our database tables, made as a backup (accounts, balances, ledgers, the free-token records, top-ups, your apps' names, descriptions and requests, build records and share links): each copy is kept about 90 days. So after you delete something, it can remain in these copies for up to about 90 days. Supabase also keeps its own backups of the database for a limited time.
• The free-token record (your Google account ID, the id of the account that received the tokens, and the date): kept after the account is deleted, so a deleted account cannot claim the free tokens again.
• Price quotes: 2 to 7 days, and the log of Stripe's notifications: 90 days, both also after the account is deleted.
• Server logs: a limited period set by Supabase and Amplify Hosting, then deleted automatically.
• Stripe keeps its own records of payments under its policies and the law; OpenRouter, the model providers and Exa keep request content only as their policies say.
• In your browser: your sign-in session until you sign out, and what your apps saved until you clear the site's data. Files you downloaded stay on your device until you delete them.

Security

Every connection uses TLS. Our AI, payment, storage and signing keys stay on our servers; this site holds only Foundry Cloud's publishable key, which is public by design. Files are encrypted at rest. The site cannot change the database directly: every change goes through our server code, which acts only on your own data. Each app runs on its own address, apart from this site and from other apps, and opens only with a signed pass. No system is perfectly secure; if we learn of a breach that affects your data, we will tell you as the law requires.

Your choices and rights

• Sign out at any time with Sign out in the top bar. This removes your session from this browser.
• Delete an app on its page with Delete this app. Its files, versions and share links are removed from our servers, as described above.
• Revoke a share link on the app's page.
• Delete your account at the bottom of My apps, or by email; see Delete account.
• Camera, microphone and location: your browser asks before an app uses them, and you can change the answers in its site settings.
• Access, correction, deletion, portability, objection. Email us and we will send you what we hold, correct it, or delete it, within 30 days. We may ask you to confirm from the email address on the account.

US state privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Oregon, Texas, Utah or Virginia), you may have the right to know what personal data we hold and how we use it, to get a copy, to correct it, to delete it, and to opt out of its sale, of its "sharing" for cross-context behavioural advertising, of targeted advertising, and of profiling. We collect the categories described above: identifiers (account id, email address, Google account ID, IP address in logs), commercial information (token grants, charges, refunds and purchases), internet activity (build records, your browser and device profile), and the content you give us (your requests and the apps made from them). We collect it from you, your browser, Google and Stripe, for the purposes listed under How we use it, and disclose it to the providers listed above. We do not sell personal data, do not share it for advertising, do not use it for targeted advertising or profiling, and do not use sensitive personal data to infer anything about you. You can make a request yourself or through an authorised agent, by email. If we decline a request, you can appeal by replying with "Appeal"; we answer appeals within 45 days, and if you disagree you can contact your state attorney general. We will not treat you differently for exercising these rights.

If you live in the European Economic Area or the United Kingdom, the GDPR gives you these rights and the right to complain to your data protection authority; our legal basis is performing our contract with you and, for security, abuse prevention and improving Foundry, our legitimate interests.

Children

Foundry is for adults: you must be at least 18 to use it (see the terms), and it is not directed at children or teenagers. Foundry does not ask your age, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has used Foundry, email us and we will delete the account and its data.

Where data is processed

We are in the United States. Supabase, OpenRouter, Exa, Google and Stripe are US companies, and the Amazon Web Services we use are in the United States. Model providers that OpenRouter routes to may process requests in other countries. If you use Foundry from outside the United States, your data is transferred to and processed in the United States and, for AI requests, possibly elsewhere, where data protection laws may differ from yours.

Changes

When this policy changes we update the date at the top. For changes that matter to you, such as a new category of data or a new provider, we also tell you on this site or by email before they take effect.

Contact

Simkins & Elgazar LLC. hello@simkinselgazar.com.