Legal & Privacy

Privacy Policy

Last updated: October 20, 2026

1. Introduction

Welcome to Adam Apps ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://adamapps.in), use our mobile applications, interact with our plugins and AI/agentic tools, or purchase our products like smart cards.

2. Information We Collect

We collect information that you voluntarily provide to us when expressing an interest in obtaining information about us or our products and services. The personal information that we collect depends on the context of your interactions with us and the products, and features you use.

A. Personal and Business Information

  • Contact Data: Name, email address, phone number, and mailing address.
  • Business Data: Company name, project requirements, assets, and integration credentials provided during the discovery and development phases.
  • Account Data: Login credentials if you register for our specific platforms or SaaS products.

B. Smart Card Data

When you purchase or use our NFC smart cards, we collect the profile information you choose to encode on the card (such as vCard details, social links, and portfolio URLs) to facilitate the intended digital handshakes.

C. AI, Plugins & Agentic Tools

For our AI-powered features, plugins, and agentic tools, we collect the inputs, prompts, and contextual data you provide. This data is strictly used to execute the requested tasks, generate responses, and improve the specific workflow. We do not use your proprietary business data to train public foundation models.

D. Automatically Collected Information

We automatically collect certain information when you visit, use, or navigate the Site. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and location data.

3. How We Use Your Information

We use personal information collected via our Site and Services for a variety of business purposes described below:

  • To deliver and facilitate delivery of services: To build your apps, websites, AI agents, and encode your smart cards.
  • To respond to user inquiries/offer support: To solve any potential issues you might have with the use of our services.
  • To send administrative information: To send you details about your account, new feature updates, and changes to our terms, conditions, and policies.
  • To improve our platform: We analyze usage data to improve the user experience across our digital properties.

4. Information Sharing and Disclosure

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. We may process or share your data that we hold based on the following legal basis:

  • Vendors and Third-Party Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work (e.g., hosting providers, AI API providers like OpenAI/Anthropic, payment gateways).
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We do not sell your personal information to third parties.

5. Data Security & Storage Limitation

We implement rigorous technical and organizational security controls to protect the confidentiality, integrity, and availability of your personal data. All data transmitted between your browser and our servers is secured using modern Transport Layer Security (TLS 1.3), and stored data is encrypted at rest using industry-standard AES-256 encryption.

We practice strict storage limitation. Project assets, staging builds, and discovery documentation are retained only as long as necessary to fulfill the commercial contract, warranty period, or statutory tax requirements, after which they are permanently and securely purged.

🇪🇺European Union & UK Privacy Commitment

6. For Our European Partners & Visitors: Complete Peace of Mind (GDPR & UK GDPR)

If you reside in the European Economic Area (EEA), the European Union, Switzerland, or the United Kingdom, your personal data is protected under the General Data Protection Regulation (Regulation (EU) 2016/679) and the UK Data Protection Act 2018 (UK GDPR). We treat GDPR compliance not merely as a legal requirement, but as our global baseline for respectful, high-integrity engineering.

A. What Gives European Businesses Peace of Mind When Working With Us

🛡️
Zero Public AI Training on Your IP

When you hire Adam Apps to build your software, mobile apps, or AI integrations, your proprietary source code, database architectures, customer data, and prompts are strictly quarantined in isolated enterprise environments. We never feed your intellectual property into public AI models (OpenAI, Anthropic, Google) for public training.

🔒
Standard Contractual Clauses (SCCs)

For cross-border data processing between the EEA/UK and our engineering center in India, we operate under European Commission-approved Standard Contractual Clauses (SCCs), ensuring your data enjoys the exact same legal protections as if it never left the European Union.

🚫
No Data Brokers, No Selling, No Monetization

We do not sell, rent, monetize, or barter your personal or business data to third-party ad networks, brokers, or marketing syndicates. We are a digital product engineering studio, not an ad surveillance platform.

📐
Privacy by Design & Default (Art. 25 GDPR)

We build digital products following the principle of Privacy by Design. Minimal data footprint, zero unnecessary third-party tracking scripts, cookie-less performance telemetry, and least-privilege role-based access controls on all production repositories.

⚡
Guaranteed 30-Day Response Window

Whenever you request data export, modification, or erasure, our team commits to acknowledging your request within 48 hours and fulfilling it within 30 calendar days at zero charge.

🤝
Comprehensive Data Processing Agreements (DPA)

We readily provide enterprise clients with signed Data Processing Agreements (DPAs) incorporating EU Module 2 (Controller-to-Processor) clauses and technical appendices before any project commences.

B. Lawful Bases for Processing Under Article 6 GDPR

We only collect and process personal data where we have a valid legal basis under European law:

  • Contractual Performance (Art. 6(1)(b)): To scope, quote, architect, test, and deliver custom software, mobile applications, websites, and smart cards as requested by you.
  • Explicit Consent (Art. 6(1)(a)): When you voluntarily submit a project inquiry, request a discovery call, or subscribe to studio communications. You have the right to withdraw consent at any time.
  • Legitimate Interests (Art. 6(1)(f)): To maintain web infrastructure security, prevent automated bot abuse, rate-limit malicious traffic, and ensure server uptime.
  • Legal Obligation (Art. 6(1)(c)): To comply with mandatory statutory, financial, accounting, and anti-fraud regulations.

C. Your Fundamental Rights Under GDPR & UK GDPR (Articles 15–22)

European visitors and clients are entitled to exercise the following statutory rights:

  • Right of Access (Art. 15): You have the right to obtain confirmation as to whether your personal data is processed, and receive a free copy of all personal data held about you in an easily readable format.
  • Right to Rectification (Art. 16): You may request the immediate correction of inaccurate or incomplete personal or business records.
  • Right to Erasure / "Right to be Forgotten" (Art. 17): You may request that we permanently delete your personal information from our active databases and backup systems, subject only to statutory tax retention rules.
  • Right to Restriction of Processing (Art. 18): You can ask us to suspend processing of your data while a dispute or verification regarding accuracy or lawful basis is investigated.
  • Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., JSON or CSV) and have it transmitted to another service provider.
  • Right to Object (Art. 21): You have an absolute right to object to any direct marketing communications or to processing based solely on legitimate interests.
  • Right to Non-Automated Profiling (Art. 22): You will never be subjected to automated decision-making or algorithmic profiling that produces legal or significant effects.
  • Right to Lodge a Complaint with a Supervisory Authority (Art. 77): You have the legal right to submit a complaint directly to your national Data Protection Authority (DPA). Examples include:
    • France: Commission Nationale de l'Informatique et des Libertés (CNIL)
    • Germany: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
    • Ireland: Data Protection Commission (DPC)
    • United Kingdom: Information Commissioner's Office (ICO)
    • Netherlands: Autoriteit Persoonsgegevens (AP)
    • Spain: Agencia Española de Protección de Datos (AEPD)

7. Global Privacy Rights (California, US & India DPDP)

In addition to our European standards, we respect data privacy laws across all jurisdictions we serve:

  • California Residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion, and opt out of the sale or sharing of your personal data. We do not sell or share personal information.
  • India (Digital Personal Data Protection Act - DPDP): Personal data is processed in accordance with the DPDP Act 2023 for specified lawful purposes with transparent grievance redressal mechanisms.
  • United Arab Emirates & GCC: Client project requirements, payment verifications, and digital card registrations are handled in full compliance with UAE Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection.

8. Contact Us & Data Protection Inquiries

To exercise any of your GDPR, UK GDPR, or global privacy rights, or if you have questions regarding our data protection policies, please contact our dedicated Data Protection team at:

Adam Apps Pvt Ltd
Attn: Privacy & Data Protection Desk
Email: [email protected] (or [email protected])
DSpace, Mavoor Rd, Tazhekkod
Kozhikode, Kerala 673001
India
Phone: +91 89210 92317

We respond to all verified privacy and GDPR subject access requests within 48 hours and fulfill all requests within 30 days without fee.