Last Updated: 12 August 2026
Appd publishes several different apps. They are not alike: some require an account, some do not; some collect location, most do not; one is made for children. A single set of promises could not describe all of them honestly, so this policy has two parts.
Read the core and the annex for your app together. The annex describes the specifics for that app. Where an annex says something more specific or more protective than the core, the annex governs.
App annexes:
Appd is an Australian software developer. In this policy, "we", "us" and "our" refer to Appd. "You" refers to the person using the app — or, for an app used by a child, the parent or guardian responsible for them.
You can reach us at any time at [email protected].
Everything in this part applies to every app we publish.
What we collect differs from app to app, and the annex for your app lists it item by item. Across all our apps, the general categories are:
We collect what an app needs to work, and we say so in its annex. If an app does not need something, it does not ask for it.
We use the information described in each annex to:
These commitments hold across every Appd app:
We share information in only three circumstances:
We take reasonable steps to protect information from unauthorised access, disclosure, alteration and destruction. Data is encrypted in transit using HTTPS/TLS and encrypted at rest by our infrastructure providers. Access is restricted to what each app's own authentication permits.
No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
We are based in Australia and use infrastructure providers whose servers may be located in other countries. This means your information may be transferred to, stored in and processed in a country other than the one you live in, where data protection laws may differ from those in your own country.
Each app's annex states which countries its data is processed in. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including Standard Contractual Clauses with our providers.
Subject to your local law, you have the right to:
To exercise any of these rights, email [email protected] and tell us which app you are using. We do not charge for this and we will not treat you differently for asking.
If you are in Australia and are unhappy with how we have handled your information, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the EEA or UK, you may complain to your local data protection authority.
You can request deletion of your data at any time, for any of our apps, by email. Full instructions are on our Account & Data Removal page.
For apps with an account — Ankr and our monday.com apps — email [email protected] from your registered email address and tell us which app you are using. We use the sending address to verify the request. See your app's annex for its deletion timeframe.
Monster Lab is different: it has no account, and you delete everything yourself from inside the app. See the Delete Monster Lab Data page.
Most Appd apps are general-audience products that are not directed to children under 13. We do not knowingly collect personal information from children under 13 through those apps. If you are a parent or guardian and believe your child has provided us with personal information through one of them, contact us and we will delete it.
Monster Lab is the exception. Monster Lab is deliberately designed for children, and is covered by additional protections and obligations. If you are a parent or guardian of a Monster Lab user, please read the Monster Lab annex — it is written for you.
We may update this policy to reflect changes to our apps or to legal requirements. When we do, we will update the "Last Updated" date above and post the revised policy here. If a change materially affects how we handle your information, we will give notice in the affected app before the change takes effect.
For any privacy question, request or complaint:
Email: [email protected]
Website: https://appd.com.au
Monster Lab turns a child's drawing into a 3D monster. This annex is written for parents and guardians. Read it with Part 1 above. A standalone copy of this annex, complete in itself, is published at privacy-monsterlab.html.
Monster Lab is directed to children. We treat it accordingly, and we have designed it to collect as close to nothing as an app of this kind can. It is built to meet:
Monster Lab has no sign-up, no login, no password, and no email address. We never ask for your child's name, age, birthday, school, photo of themselves, or any other detail that identifies them, and there is nowhere in the app to enter one.
When the app first runs it obtains an anonymous user ID — a random string of characters (a UUID) generated by our authentication provider. It is not derived from your device, your phone number, your advertising ID, or anything about your child. It is simply a random number that lets our server recognise the same installation on the next request, so we can apply the daily limit and know whether a subscription is active.
We hold a random identifier, not an identity. We could not tell you who any given ID belongs to, because we have never been told.
The complete list. There is nothing else.
This is the part we most want parents to read, so we will state it plainly.
When your child creates a monster, their drawing is uploaded to our backend and sent to Google's Gemini service. Gemini is an artificial intelligence service operated by Google. It looks at the drawing, identifies its features — the shapes, colours and details your child drew — and generates the monster image from them. Without this step the app cannot make a monster.
The drawing is sent to Google for that single purpose and nothing else. We do not send anything alongside it that identifies your child, because we do not hold anything that does — no name, no email, no account.
On training AI models: we do not permit your child's drawing to be used to train or improve any AI model, and we do not use it to train models of our own. Google's paid Gemini API is offered on terms under which submitted content is not used to train Google's models, and it is on those terms that we send the drawing. Google's own handling of the data is additionally governed by its Privacy Policy. If this ever changes, we will update this policy and give notice in the app before the change takes effect.
Google is the only AI provider Monster Lab uses. No other AI or machine learning service receives your child's drawing.
The monsters your child collects, the names they give them, their progress through the game, and their app settings are stored on the device only, in the browser's local storage (IndexedDB). This information is never uploaded to us, and we cannot see it.
Because it lives on the device, it is removed when the app is uninstalled or its data is cleared. It is also not backed up by us, so it will not transfer to a new device.
Children's apps commonly include things we have deliberately left out. Monster Lab contains:
We checked for the usual third-party components found in apps of this type before publishing. There are none.
That is the complete list. No other company receives data from Monster Lab.
Monster Lab's data is processed outside Australia:
If you are in Australia, the EEA or the UK, this means information is transferred overseas for processing. We rely on appropriate safeguards for these transfers, including Standard Contractual Clauses where required, and we take reasonable steps to ensure our providers handle the data consistently with this policy.
Because these questions matter most for a children's app, we repeat them here without qualification:
As a parent or guardian you have the right to review the information associated with your child's installation, to have it deleted, and to refuse any further collection.
To delete everything, use the app. Open Monster Lab, go to the Grown-ups screen (the ⚙ icon) and tap Delete account & data. This removes the device's account and everything stored for it, immediately and permanently. There is no waiting period and nothing to email us about. It cannot be undone.
If the app has already been uninstalled: the anonymous identity lives only inside the app, so uninstalling discards the only key linking that data to the device. What remains on our side is unattributable — it cannot be connected to you, your child or your device — and it expires with our normal retention. If you would like it removed anyway, email [email protected].
To stop all further collection: uninstall the app. Nothing is collected when it is not running.
Deleting your data does not cancel a subscription. Subscriptions are billed by the app store, not by us, so deleting data has no effect on billing. Cancel separately — on Android via Google Play → Payments & subscriptions, on iPhone or iPad via Settings → your name → Subscriptions.
Step-by-step instructions are on our Delete Monster Lab Data page.
We would rather answer a question than have you guess. For anything about Monster Lab and your child's privacy, email [email protected] and we will respond.
Ankr is a boat anchor monitoring app. Read this annex with Part 1 above. A standalone copy of this annex is also published at privacy-ankr.html.
You control when this happens. Location tracking occurs only when you explicitly start a monitoring session, and stops when you end it. You can change location permissions at any time in your device settings.
Your location data is used only to: track your boat's position relative to the anchor drop point; detect drag beyond the expected swing radius; allow you to monitor from another device; display movement history for a session; and trigger geofence alerts.
In addition to the commitments in What We Never Do, for Ankr specifically we do not share your location with other users unless you choose to share it through the app's own settings and links, and we do not track your location when monitoring is not active.
The app requests these on first use and explains why each is needed.
Ankr uses Firebase, a Google platform:
Firebase is provided by Google and subject to Google's Privacy Policy. No other third-party service provider receives your Ankr data.
You may request deletion of your account and all associated data at any time by emailing [email protected] from your registered email address. We will delete your account and authentication credentials, and all stored location data and monitoring history, removing personal information from our systems within 30 days. Some data may be retained in anonymised form for analytics or where the law requires it.
Ankr's data is stored on Google's cloud infrastructure, including servers in the United States.
This annex covers our apps that run inside a monday.com workspace. Read it with Part 1 above.
This app and our website may use cookies and similar technologies — including beacons, scripts and tags — to hold certain information and to analyse use of the service. Cookies are small data files stored on your device, which may include an anonymous unique identifier.
You can set your browser to refuse cookies or to tell you when one is being sent. If you refuse cookies, some parts of the app may not work.
These technologies are used in this app only. They are not used in Monster Lab.
With your consent, we may use your name and email address to send you updates about the app or new features. You can opt out at any time using the unsubscribe link in any email we send.
Your consent is entirely optional. Declining does not affect your ability to use the app.
We retain your information for as long as your account is active or as needed to provide the app, and as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
Deletion on uninstall: when you uninstall the app, we delete your personal information from our systems. This is currently a manual process, triggered by an "uninstall" webhook event that alerts our support team by email. On receiving that notification, our support team deletes your information within 10 business days.
Because this step is manual, there may be a short delay between uninstalling and complete deletion. We are working on automating it to shorten that window. You can also request deletion directly at any time — see Deleting Your Data.
This app is hosted on Vercel's infrastructure, which may process and store data in the United States and other regions.