Fledly
Privacy Policy
Fledly collects as little as it needs to run the service. We do not sell your data, show ads, or use advertising trackers.
Who is responsible
The data controller is Fledly, operated by Mika Heinonen, Finland. Contact: hello@fledly.app.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email address and account id | Sign-in links, account and billing messages | Contract |
| Apps, tracked searches, countries, saved ideas and notes | To track ranks and show your dashboard | Contract |
| Plan and subscription status from Stripe (customer id, plan, renewal date) | To give you the features you pay for | Contract |
| Technical logs (time, IP address, browser, errors, API and AI tool calls) | Security, abuse prevention and fixing problems | Legitimate interest |
We do not receive or store your card details. Stripe collects them directly as the merchant of record.
The market data in Fledly (App Store rankings, charts, public reviews and app details) is public information about apps and developers, not about you.
AI assistant connections
You can connect Fledly to AI assistants such as ChatGPT, Claude or other MCP clients. When you do:
- You sign in and approve the connection with OAuth. The assistant gets a token for your Fledly account only, and you can disconnect it at any time from the assistant's settings or by emailing us.
- The assistant can read market data (ideas, outliers, charts, keyword data) and your own Fledly data (tracked apps, searches and saved ideas). It can add or remove tracked apps and searches and save ideas when you ask it to.
- We do not receive your chat history or the rest of your conversation. We only receive the specific requests the assistant sends to Fledly.
- For each request we log the tool name, time, duration and result status to keep the service secure and working. We keep these logs for up to 90 days.
- What the assistant does with Fledly's answers is governed by that assistant provider's privacy policy.
Who processes data for us
| Service | Role | Location |
|---|---|---|
| Supabase | Database, sign-in and server functions | EU (Stockholm, Sweden) |
| Netlify | Website hosting | Global CDN, United States company |
| Stripe | Payments, tax and invoices as merchant of record (independent controller for payment data) | EU and United States |
| Email delivery provider | Sending sign-in links and account emails | EU or United States |
Where data leaves the EU/EEA, transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Cookies and storage
Fledly uses your browser's local storage to keep you signed in and to remember settings such as theme and language. There are no advertising or cross-site tracking cookies. Stripe's checkout pages use their own cookies for payment security.
How long we keep data
- Account data: as long as your account exists. When you delete your account, we delete your data within 30 days, except backups which roll off within a further 30 days.
- Billing records: kept by Stripe as merchant of record for the period tax law requires.
- Technical and AI tool call logs: up to 90 days.
Your rights
You can ask to access, correct, export or delete your data, object to processing based on legitimate interest, or restrict processing. Email hello@fledly.app and we will answer within 30 days. You can also complain to your data protection authority; in Finland that is the Data Protection Ombudsman (tietosuoja.fi).
Children
Fledly is meant for developers and is not directed at children under 16.
Changes
We will update this page and the date above when this policy changes, and email you about material changes.