Privacy Policy

Introduction

Welcome to BPA1 Personal ("we," "our," or "us"). BPA1 Personal is a local-first database app builder: your projects, your database and your documents live in files on your own device. This Privacy Policy explains what that means for your information, both when you use the app and when you visit this website.

The short version: we do not run servers that hold your data, and the app does not require an account. Everything you build stays with you unless you choose to share it.

Your Data in the App

Local-First by Design

Every BPA1 Personal project is a single .bpa1 file on your device containing a SQLite database, your app's metadata, attachments and documents. The app does not upload this file or its contents to us. There is no cloud sync, no hosted service and no account.

Optional AI Features

The AI Agent and Ask AI features are optional and only work if you supply your own OpenAI API key. When you use them, the content needed to answer your request (for example, your app description, or excerpts of documents you ask questions about) is sent directly from your device to OpenAI under your key and OpenAI's terms. We never see that traffic. Your API key is stored as a user-level setting on your device, never inside your project files.

Microsoft Store

If you install the app from the Microsoft Store, Microsoft may provide us with aggregate, anonymised statistics (such as download and acquisition counts) under Microsoft's own privacy terms. The app itself has no usage tracking or crash reporting, and these statistics do not include the contents of your projects.

Information We Collect on This Website

This website is a static informational site. We collect personal information only when you choose to give it to us, for example when you:

• Email us with a question, bug report or feedback
• Use the contact form (which opens a message in your own email client)

In those cases we receive the details you include, such as your name, email address and message. We use them solely to respond to you.

Our hosting provider may log standard technical information (such as IP address, browser type and pages visited) for security and operational purposes.

How We Use Information

We use the limited information we receive to:

• Respond to your inquiries and provide support
• Fix bugs and improve BPA1 Personal
• Keep this website secure and operational
• Comply with legal obligations

We do not sell your personal information, and we do not use it for advertising.

Data Sharing and Disclosure

We may share information only in these situations:

Service Providers

Providers that operate this website or our email may process the information you send us, on our behalf and under confidentiality obligations.

Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

With Your Consent

We may share information for any other purpose with your explicit consent.

Data Security

Because your projects live on your own device, the most important protections are the ones the app gives you locally:

• Automatic backups before every schema change
• Audit logging of data changes inside your project
• Optional password protection on published read-only apps, which encrypts the entire bundled payload
• Injection-safe, validated dynamic SQL inside the engine

We also recommend you keep your own backups of your .bpa1 files, as you would with any important document. For the website, we use SSL/TLS encryption in transit.

Your Privacy Rights

Depending on your location, you may have rights over personal information we hold about you (such as emails you have sent us), including:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Objection: Object to processing of your personal information

To exercise these rights, please contact us at hello@bpa1.com. We will respond to your request within 30 days. The data inside your own projects is already fully under your control — it never reaches us.

Data Retention

We retain correspondence only for as long as necessary to handle your inquiry and for reasonable record-keeping, unless a longer retention period is required by law. When we no longer need the information, we delete it.

Children's Privacy

Our website and support channels are not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new Privacy Policy on this page and update the "Last updated" date.

We encourage you to review this Privacy Policy periodically. Changes are effective when posted on this page.