Privacy first, by design
Your projects belong to you. How Craftkite keeps them private under GDPR and KVKK, and why our staff can open them only through an audited, time-limited process.
By The Craftkite team2 min read
When you build an app, you share ideas, data and sometimes your customers’ information with the tool you use. We think that comes with a clear promise: your projects are yours. Here is how Craftkite keeps it, under the EU’s GDPR and Turkey’s KVKK.
Private by default
Your projects, prompts, files, previews and app data are visible only to you and, by role, to your team. Nobody else at Craftkite or in the community can see or use them. Published apps are public by your choice; their code and your previews stay private.
The database itself enforces this: every member request runs with the member’s identity, and rows of other accounts are refused even if application code forgets a check.
Staff access only through break-glass
Sometimes our support team needs to look inside a project to solve a problem you reported. That access is not a standing permission. It goes through a break-glass process: a staff member asks for access for a specific reason, such as your support request, for a limited time, and every access is recorded in an audit log that cannot be changed.
You see each access yourself, under Account → Privacy → Craftkite team access: who opened your data (support, trust and safety or billing), why and when.
You decide where your data lives
Accounts store their projects, files and app databases in the European Union or the United States region, and your account shows which one. Secrets such as API keys and store credentials are encrypted and never shown again after you save them.
Clear retention, real deletion
Your account lists how long we keep build logs, attached images, test screenshots and closed support tickets. Voice recordings are deleted as soon as they are turned into text. You can download everything we hold about you as a ZIP at any time, and deleting your account erases it after a 30-day grace period during which you can change your mind.
Consent you can see
Your consents, such as the terms of service, explicit consent under KVKK and marketing emails, are listed with their dates in your account.
Read more in the help center: Privacy and your data.
