Privacy Policy
Itsappy Lab · Last updated 15 August 2026
Itsappy Lab is a workspace collaboration app: a virtual office, chat, tasks and meetings for a team. This policy explains what the app collects, why, and what control you have over it. It covers the Itsappy Lab mobile apps for iOS and Android and the web app at lab.itsappy.com.
Who is responsible for your data
Itsappy operates the service. If your employer or team created the workspace you belong to, they administer it: workspace owners and admins can see and moderate content posted in their workspace, and can remove members. Contact them first about content in your workspace, and contact us at itappy2026@gmail.com about anything else.
What we collect
| Data | Why |
|---|---|
| Account details — your name, email address, job title, profile photo | To create your account, sign you in, and show you to your teammates |
| Content you create — messages, replies, reactions, stories, voice notes, photos, videos, files, tasks, projects, comments, whiteboards | To deliver it to the people in your workspace you sent it to, and to show it to you again later |
| Presence and status — whether you are online, your chosen status, and where you are standing on a virtual office floor | So teammates can see who is around and who is within earshot |
| Location — only when you explicitly choose "share my location" in a conversation | To post that location as a message. The app never collects location in the background. |
| Camera and microphone — only while you are in a meeting, a call, the virtual office floor, or recording a voice note | To carry your audio and video to the other participants. Meeting and call media is not recorded or stored by us. |
| Push notification token, device type and OS version | To deliver notifications to your device and to diagnose problems |
| Technical logs — IP address, timestamps, error traces | Security, abuse prevention and debugging |
What we do not do
- We do not show ads.
- We do not track you across other apps or websites, and the app does not use an advertising identifier.
- We do not sell or rent your personal data.
- We do not use your messages, files or meetings to train machine learning models.
Who your data is shared with
Your content is visible to the people you send it to inside your workspace, and to the owners and admins of that workspace. Beyond that, we share data only with the service providers that make the app work:
- Push notification delivery — Apple Push Notification service, Firebase Cloud Messaging (Google) and Expo's push service carry notification payloads to your device.
- Hosting — our own servers, which store the database and uploaded files.
- Calls and meetings — audio and video travel peer-to-peer where possible, and otherwise through our relay (TURN) server. Media passes through; it is not stored.
We also disclose data where the law requires it, or to protect the safety of people using the service.
How long we keep it
Content stays in your workspace until you or a workspace admin deletes it, or until the workspace itself is deleted. Technical logs are kept for up to 90 days. Deleting your account removes your profile and your personal data; messages you posted in shared channels may remain visible to the workspace unless an admin removes them.
Your choices and rights
- Edit your profile — from More → your profile in the app.
- Delete individual content — messages, tasks and files can be deleted in the app.
- Delete your account — see Delete your account, or email itappy2026@gmail.com from the address on the account.
- Get a copy of your data — email us and we will send an export.
- Turn off permissions — camera, microphone, photos, location and notifications are all optional and can be revoked at any time in your device settings. The features that need them will stop working; the rest of the app will not.
Depending on where you live you may have additional rights — to access, correct, export, restrict or erase your data, or to object to processing. Email us and we will act on the request within 30 days.
Children
Itsappy Lab is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 13. If you believe a child has an account, email us and we will delete it.
Security
Traffic between the app and our servers is encrypted with TLS. Passwords are stored hashed, never in plain text. Access to production systems is limited to the people who operate the service. No system is perfectly secure, so if we discover a breach affecting your data we will notify you.
International transfers
Our servers and service providers may process data in countries other than yours. Where that happens we rely on standard contractual protections offered by those providers.
Changes to this policy
If we change this policy materially we will update the date at the top and, for significant changes, tell you in the app before they take effect.
Contact
Questions, requests or complaints: itappy2026@gmail.com.