Last Updated: 27 August 2026
Appd publishes several different apps. They are not alike: some require an account, some do not; some collect location, most do not; one is made for children. A single set of promises could not describe all of them honestly, so this policy has two parts.
Read the core and the annex for your app together. The annex describes the specifics for that app. Where an annex says something more specific or more protective than the core, the annex governs.
App annexes:
Appd is an Australian software developer. In this policy, "we", "us" and "our" refer to Appd. "You" refers to the person using the app — or, for an app used by a child, the parent or guardian responsible for them.
You can reach us at any time at [email protected].
Everything in this part applies to every app we publish.
What we collect differs from app to app, and the annex for your app lists it item by item. Across all our apps, the general categories are:
We collect what an app needs to work, and we say so in its annex. If an app does not need something, it does not ask for it.
We use the information described in each annex to:
These commitments hold across every Appd app:
We share information in only three circumstances:
We take reasonable steps to protect information from unauthorised access, disclosure, alteration and destruction. Data is encrypted in transit using HTTPS/TLS and encrypted at rest by our infrastructure providers. Access is restricted to what each app's own authentication permits, with one deliberate exception: where an app publishes something specifically so that you can share it. Enliven's finished videos are the only such case, and the Enliven annex explains it in full.
No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
We are based in Australia and use infrastructure providers whose servers may be located in other countries. This means your information may be transferred to, stored in and processed in a country other than the one you live in, where data protection laws may differ from those in your own country.
Each app's annex states which countries its data is processed in. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including Standard Contractual Clauses with our providers.
Subject to your local law, you have the right to:
To exercise any of these rights, email [email protected] and tell us which app you are using. We do not charge for this and we will not treat you differently for asking.
If you are in Australia and are unhappy with how we have handled your information, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the EEA or UK, you may complain to your local data protection authority.
You can request deletion of your data at any time, for any of our apps, by email. Full instructions are on our Account & Data Removal page.
For apps with an account — Ankr, Enliven and our monday.com apps — email [email protected] from your registered email address and tell us which app you are using. We use the sending address to verify the request. See your app's annex for its deletion timeframe.
Monster Lab is different: it has no account, and you delete everything yourself from inside the app. See the Delete Monster Lab Data page.
Most Appd apps are general-audience products that are not directed to children under 13. We do not knowingly collect personal information from children under 13 through those apps. If you are a parent or guardian and believe your child has provided us with personal information through one of them, contact us and we will delete it.
Monster Lab is the exception. Monster Lab is deliberately designed for children, and is covered by additional protections and obligations. If you are a parent or guardian of a Monster Lab user, please read the Monster Lab annex — it is written for you.
Enliven is a 13+ app that children enjoy. It is not directed to under-13s and its accounts are for adults, but we know parents draw alongside their children with it. If that is you, the Enliven annex flags the two settings worth understanding first: the public share link and the name a drawing is signed with.
We may update this policy to reflect changes to our apps or to legal requirements. When we do, we will update the "Last Updated" date above and post the revised policy here. If a change materially affects how we handle your information, we will give notice in the affected app before the change takes effect.
For any privacy question, request or complaint:
Email: [email protected]
Website: https://appd.com.au
Monster Lab turns a child's drawing into a 3D monster. This annex is written for parents and guardians. Read it with Part 1 above. A standalone copy of this annex, complete in itself, is published at privacy-monsterlab.html.
Monster Lab is directed to children. We treat it accordingly, and we have designed it to collect as close to nothing as an app of this kind can. It is built to meet:
Monster Lab has no sign-up, no login, no password, and no email address. We never ask for your child's name, age, birthday, school, photo of themselves, or any other detail that identifies them, and there is nowhere in the app to enter one.
When the app first runs it obtains an anonymous user ID — a random string of characters (a UUID) generated by our authentication provider. It is not derived from your device, your phone number, your advertising ID, or anything about your child. It is simply a random number that lets our server recognise the same installation on the next request, so we can apply the daily limit and know whether a subscription is active.
We hold a random identifier, not an identity. We could not tell you who any given ID belongs to, because we have never been told.
The complete list. There is nothing else.
This is the part we most want parents to read, so we will state it plainly.
When your child creates a monster, their drawing is uploaded to our backend and sent to Google's Gemini service. Gemini is an artificial intelligence service operated by Google. It looks at the drawing, identifies its features — the shapes, colours and details your child drew — and generates the monster image from them. Without this step the app cannot make a monster.
The drawing is sent to Google for that single purpose and nothing else. We do not send anything alongside it that identifies your child, because we do not hold anything that does — no name, no email, no account.
On training AI models: we do not permit your child's drawing to be used to train or improve any AI model, and we do not use it to train models of our own. Google's paid Gemini API is offered on terms under which submitted content is not used to train Google's models, and it is on those terms that we send the drawing. Google's own handling of the data is additionally governed by its Privacy Policy. If this ever changes, we will update this policy and give notice in the app before the change takes effect.
Google is the only AI provider Monster Lab uses. No other AI or machine learning service receives your child's drawing.
The monsters your child collects, the names they give them, their progress through the game, and their app settings are stored on the device only, in the browser's local storage (IndexedDB). This information is never uploaded to us, and we cannot see it.
Because it lives on the device, it is removed when the app is uninstalled or its data is cleared. It is also not backed up by us, so it will not transfer to a new device.
Children's apps commonly include things we have deliberately left out. Monster Lab contains:
We checked for the usual third-party components found in apps of this type before publishing. There are none.
That is the complete list. No other company receives data from Monster Lab.
Monster Lab's data is processed outside Australia:
If you are in Australia, the EEA or the UK, this means information is transferred overseas for processing. We rely on appropriate safeguards for these transfers, including Standard Contractual Clauses where required, and we take reasonable steps to ensure our providers handle the data consistently with this policy.
Because these questions matter most for a children's app, we repeat them here without qualification:
As a parent or guardian you have the right to review the information associated with your child's installation, to have it deleted, and to refuse any further collection.
To delete everything, use the app. Open Monster Lab, go to the Grown-ups screen (the ⚙ icon) and tap Delete account & data. This removes the device's account and everything stored for it, immediately and permanently. There is no waiting period and nothing to email us about. It cannot be undone.
If the app has already been uninstalled: the anonymous identity lives only inside the app, so uninstalling discards the only key linking that data to the device. What remains on our side is unattributable — it cannot be connected to you, your child or your device — and it expires with our normal retention. If you would like it removed anyway, email [email protected].
To stop all further collection: uninstall the app. Nothing is collected when it is not running.
Deleting your data does not cancel a subscription. Subscriptions are billed by the app store, not by us, so deleting data has no effect on billing. Cancel separately — on Android via Google Play → Payments & subscriptions, on iPhone or iPad via Settings → your name → Subscriptions.
Step-by-step instructions are on our Delete Monster Lab Data page.
We would rather answer a question than have you guess. For anything about Monster Lab and your child's privacy, email [email protected] and we will respond.
Ankr is a boat anchor monitoring app. Read this annex with Part 1 above. A standalone copy of this annex is also published at privacy-ankr.html.
You control when this happens. Location tracking occurs only when you explicitly start a monitoring session, and stops when you end it. You can change location permissions at any time in your device settings.
Your location data is used only to: track your boat's position relative to the anchor drop point; detect drag beyond the expected swing radius; allow you to monitor from another device; display movement history for a session; and trigger geofence alerts.
In addition to the commitments in What We Never Do, for Ankr specifically we do not share your location with other users unless you choose to share it through the app's own settings and links, and we do not track your location when monitoring is not active.
The app requests these on first use and explains why each is needed.
Ankr uses Firebase, a Google platform:
Firebase is provided by Google and subject to Google's Privacy Policy. No other third-party service provider receives your Ankr data.
You may request deletion of your account and all associated data at any time by emailing [email protected] from your registered email address. We will delete your account and authentication credentials, and all stored location data and monitoring history, removing personal information from our systems within 30 days. Some data may be retained in anonymised form for analytics or where the law requires it.
Ankr's data is stored on Google's cloud infrastructure, including servers in the United States.
This annex covers our apps that run inside a monday.com workspace. Read it with Part 1 above.
This app and our website may use cookies and similar technologies — including beacons, scripts and tags — to hold certain information and to analyse use of the service. Cookies are small data files stored on your device, which may include an anonymous unique identifier.
You can set your browser to refuse cookies or to tell you when one is being sent. If you refuse cookies, some parts of the app may not work.
These technologies are used in this app only. They are not used in Monster Lab.
With your consent, we may use your name and email address to send you updates about the app or new features. You can opt out at any time using the unsubscribe link in any email we send.
Your consent is entirely optional. Declining does not affect your ability to use the app.
We retain your information for as long as your account is active or as needed to provide the app, and as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
Deletion on uninstall: when you uninstall the app, we delete your personal information from our systems. This is currently a manual process, triggered by an "uninstall" webhook event that alerts our support team by email. On receiving that notification, our support team deletes your information within 10 business days.
Because this step is manual, there may be a short delay between uninstalling and complete deletion. We are working on automating it to shorten that window. You can also request deletion directly at any time — see Deleting Your Data.
This app is hosted on Vercel's infrastructure, which may process and store data in the United States and other regions.
Enliven turns a drawing into a short video with sound. You draw a creature on the in-app canvas, or photograph one you drew on paper, and the app returns an eight-second video of it moving. Read this annex with Part 1 above. A standalone copy of this annex, complete in itself, is published at privacy-enliven.html.
Enliven is not directed to children under 13, and accounts are for adults. You must be at least 13 to hold an account, and if you are under 18 you should have a parent or guardian's permission. We expect parents will sit alongside a child while they draw — that is fine, but the account, the email address on it, and the decision to share a video are the adult's.
On our shared backend: one Supabase project hosts several of our apps. Enliven's data lives in its own database schema, isolated by row-level security — every table is restricted so a signed-in user can read only their own rows, and the app has no permission to insert, update or delete directly. Other apps on that project cannot read Enliven data, and Enliven cannot read theirs.
Your sketch, the transparent copy, the generated still and the raw model output are all stored privately, readable only by you.
The finished video and its poster image are different. They are stored in a public bucket, and anyone who has the link can open and watch them, on any device, without signing in to Enliven and without an account of their own.
This is deliberate. Sharing a creature is the point of the app, and the places you share to — messaging apps, social apps, a link pasted into a family chat — need a link they can actually fetch. A video locked behind a login could not be shared at all.
The link is unguessable, but it is not secret. It contains a long random identifier, so nobody will stumble across your video by chance and there is no directory or browsable index of everyone's creations. But once you send the link to someone, they can send it on. Treat sharing a video the way you would treat sharing a photo. If you want one taken down, email us and we will delete the file, after which the link stops working.
This is the one place where an Appd app deliberately publishes something, and it is the exception noted in Part 1 under Security.
Enliven lets you sign a drawing with a short line of text — for example “Brodie · 12yrs”. It is free text you choose, limited to 40 characters.
That text is rendered into the finished video file itself. It is not a caption we can strip out later; it is part of the picture, so it travels with the video everywhere the video goes — including to anyone passed the public link. The only way to remove it is to delete the video; editing the field afterwards does not change a video already made.
We do not require a real name, and we would gently suggest not using one. A first name, a nickname or an initial does the job.
When you create a creature, your drawing is uploaded to our backend and sent to third-party AI services to be turned into a video. There is no way to make the video without this step. Specifically:
The drawing is sent for that single purpose and nothing else, and is not accompanied by your email address or anything else identifying you.
On training AI models: we do not use your drawings, images or videos to train models of our own, and we do not permit them to be used to train or improve a third party's models. We send content to these providers on their commercial API terms for that purpose. Each provider's own handling is additionally governed by its terms — Google's by its Privacy Policy, and Alibaba Cloud's by its Privacy Policy. If this ever changes, we will update this policy and give notice in the app before the change takes effect.
No AI or machine learning provider other than those named above receives your drawing.
That is the complete list. No other company receives data from Enliven.
Enliven does not request location, contacts, calendar, microphone, health data, or an advertising identifier. There are no third-party advertising SDKs in the app, and no chat, comments or public feed — nobody can contact you through Enliven, and there is no gallery of other people's creations to browse.
Enliven is paid for with consumable credits bought through the app store. Credits are consumable, not a subscription, so there is nothing recurring to cancel. Payment is processed entirely by Apple or Google; refunds are handled by them under their own policies.
At present, nothing expires automatically. Your sketches, generated images, finished videos, credit ledger, purchase records and generation history are kept for as long as your account exists. There is no scheduled deletion job, and we do not currently delete inactive accounts. Deletion happens when you ask for it. If we introduce automatic expiry later, we will update this policy and say so in the app before it takes effect.
There is currently no delete button inside the app. Deletion is by email request, and we do it by hand. Email [email protected] from the address you signed in with, and we will confirm when it is done, within 30 days.
Deletion removes your account and email address, your credit ledger, purchase records and generation history, your moderation counters and push tokens, and your files in both storage buckets — every sketch, transparent copy, generated still, master file, poster and finished video. We remove the files as a separate, deliberate step, because storage does not delete itself when an account is removed. Afterwards, any share link you have sent out stops working.
Deletion is permanent and cannot be undone. Unused credits are forfeited when an account is deleted — if you have a balance you care about, spend it first. Deleting your account does not itself produce a refund.
To delete a single video rather than your whole account, email us the link and we will remove that video and its poster.
Enliven's data is processed outside Australia. Supabase, Vercel, Google and Alibaba Cloud operate infrastructure in a number of countries, including the United States and locations in the Asia-Pacific region, and your drawings and videos are processed there.