This policy explains what Faisal Nadeem ("we", "us") collects when you use htmltoapk.com, the HTML to APK builder and the HTML to APK Android app, and what we do with it. If anything here is unclear, ask us at support@saiftech.com.
The short version
- The free tools upload nothing. Files you drop on them are processed in your browser and never reach us.
- To build an app you need an account, and the content you submit is transmitted to our build service and stored with your project.
- We never see your card details. Subscriptions are billed by Google Play.
- You can delete your account and its data from inside the builder.
- We do not sell personal data, and we do not buy it.
What we collect
Account information
When you sign in with Google we receive your email address, display name and profile picture URL from Google. When you sign in with email and password we store your email address; the password itself is handled by Firebase Authentication and is never visible to us. Each account has an internal identifier used to associate your projects and subscription with you.
Content you submit for a build
When you build an app we receive the settings you chose (app name, package name, colours, permissions and so on), the icon and images you supplied, and — if you are bundling rather than loading a live URL — the HTML, CSS, JavaScript and assets in your ZIP. This content is transmitted to our build service, used to compile your app, and retained with the project so you can rebuild or download it again.
If you generate or upload a signing keystore, it is transmitted so the build can sign your app. Treat your keystore password as you would any other password: we cannot recover it for you.
Files used with the tools
Nothing. Every tool under /tools/ runs entirely in your browser — images are resized with the Canvas API, ZIPs are packed locally, the encoders and validators never make a network request with your data. This is why the tools keep working with your connection switched off.
Technical information
Our servers record ordinary request information — IP address, timestamp, requested URL, user agent — for security, abuse prevention and diagnosing failures. Your browser also stores a sign-in token so you stay signed in, and a small amount of local data for conveniences like remembering a filter list. Those live in your browser, not on our servers.
What we do with it
| Purpose | Data used |
|---|---|
| Building your app | Settings, images, web content, keystore |
| Keeping your projects between sessions | Account identifier, project data |
| Applying build limits fairly | Account identifier, build history |
| Unlocking Pro features | Account identifier, subscription status from Google Play |
| Answering your support emails | Whatever you tell us, plus your account email |
| Preventing abuse and investigating incidents | Request logs |
We do not use your web content for anything other than building your app. We do not train models on it, publish it, or share it with anyone except the processors listed below.
Who else is involved
Running this service means using other companies' infrastructure. Each of these receives only what it needs:
- Google (Firebase) — authentication and the database holding your account, projects and subscription state.
- Cloudflare — the service that receives your requests and routes them.
- GitHub — the build pipeline. Content you submit for a build is stored in a private repository while the build runs and while the result remains available to you.
- Google Play — subscription billing for the Android app. Google handles the payment and tells us only whether your subscription is active.
These providers operate internationally, so data may be processed outside your country.
Advertising and cookies
We use no advertising or analytics cookies at the time of writing. Sign-in uses browser storage that is strictly necessary to keep you logged in.
If we display third-party advertising in future — including Google AdSense — those partners may set cookies or use device identifiers to serve and measure ads, and Google's use of advertising cookies is described in Google's advertising policies. Where the law requires consent, we will ask before any such cookie is set, and this section will be updated to describe exactly what runs.
How long we keep things
- Account data — until you delete your account.
- Projects and build content — until you delete the project or the account.
- Request logs — a short period for security and diagnostics, then discarded.
- Support emails — as long as needed to resolve the issue and for our records.
Your choices
You can delete a project at any time in the builder, which removes its stored build. You can delete your entire account from the builder's settings, which removes your account record and associated projects. Deletion is permanent, and apps you have already downloaded or published remain yours — deleting your account here does not remove an app from Google Play.
You may also ask us for a copy of the personal data we hold about you, or ask us to correct it, by emailing support@saiftech.com from your account address.
Children
This service is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.
Security
Connections use HTTPS, authentication is handled by Firebase, and build content is held in private storage. No service can promise perfect security, and we will not pretend otherwise — but we do not store payment details at all, which removes the most sensitive category entirely.
Changes
When this policy changes materially we will update the date at the top and, for significant changes, tell account holders by email. Continuing to use the service after a change means accepting the updated policy.
Contact
Faisal Nadeem, Sialkot, Pakistan — support@saiftech.com.