Privacy Policy

Last updated: 19 October 2026

1. Who we are

Ants is operated by Core Engine IT Infrastructure LLC, Al Souq Al Kabeer, R118, 201-A-19, Dubai, United Arab Emirates (registration number 2647230, licence number 1526216). Contact us about privacy at [email protected].

2. What this policy covers

This policy explains how we handle personal data when you visit ants.dev, use your account at my.ants.dev, and build apps with Ants. For that data, we are the controller.

Apps you build collect their own data from their own users ("App Data"). For App Data, you are the controller and we are your processor, under our Data Processing Addendum. Your app needs its own privacy notice, and its users should contact you about their data.

3. What we collect

Information you give us

Account data: your email address, your name if you give it, and your sign-in method: a one-time email code, a passkey, or Google or Apple sign-in.
Conversations and project content: what you write to Ants; files, images, designs and HTML you upload; and the PRDs, estimates, approvals and app details that result.
Billing data: your plan, payments, invoices, billing address, country and tax ID if you give one. Card details are handled by our payment processor; we see only the card brand, last four digits and expiry date.
Support and reports: messages you send us and our replies.

Information we collect automatically

Usage data: credits used, builds, deployments, errors and feature use.
Device and connection data: IP address, browser and device type, language, and an approximate country derived from your IP.
Notification data: if you allow browser notifications, a push subscription address issued by your browser.
Logs: request and error logs from Ants and from apps we host.
Analytics and advertising data: collected through cookies, with your consent where the law requires it (section 10).

Please do not put sensitive personal data, such as health or identity documents, into prompts or uploads unless your app genuinely needs it. Voice dictation uses your browser's speech recognition, so we receive only the text.

4. How we use it, and our legal bases

Purpose	Legal basis (UK GDPR / LGPD)
Creating and securing your account; building, deploying and hosting your apps; showing estimates and credit usage	Contract
Taking payments, issuing invoices, keeping financial records	Contract; legal obligation
Support, service and billing messages	Contract; legitimate interests
Screening prompts and apps for misuse; preventing fraud and abuse of free credits; enforcing our Terms	Legitimate interests
Improving Ants (section 5)	Legitimate interests
Website analytics, advertising measurement, marketing emails	Consent where the law requires it, which you can withdraw at any time; otherwise legitimate interests
Complying with the law and lawful requests	Legal obligation

5. AI and your content

AI providers. Ants uses third-party AI model providers to understand your requests, write PRDs and estimates, generate images, and build your apps. To do that, we send them your prompts, uploads, project content, code and related logs. They process it on our behalf, under contracts that do not allow them to use it to train their own models.

Improving Ants. We analyse conversations, PRDs, estimates, builds and errors to improve our prompts, agents, cost estimates and reliability. We do this in de-identified form where we can. We do not use App Data for this.

Automated screening. We automatically check prompts and apps against our Acceptable Use Policy. Screening may block a request or keep an app offline. You can ask for a person to review any such decision at [email protected].

We do not sell your personal data.

We share personal data with the following categories of service provider. Each processes it only on our instructions, under contract:

cloud hosting and infrastructure providers, which run Ants and the apps you build;
content delivery and network security providers;
AI model providers;
source code hosting and build pipeline providers;
the payment processor and tax services;
email delivery providers;
image storage and delivery providers;
logging and monitoring providers;
secrets management providers;
customer support and office email tools.

We also share data in these cases:

Sign-in: with Google or Apple, if you choose to sign in with them.
Cookies: with Google, for analytics and advertising measurement, with your consent where the law requires it.
Notifications: with your browser's push service (for example Google, Mozilla or Apple), to deliver notifications you have allowed.
Services you connect: with any service you connect to Ants yourself, for example an AI assistant connected through MCP.
Legal and business reasons: where the law requires, to protect rights and safety, or as part of a merger or sale of our business.

If you publish an app, anyone with its address can see what it shows.

7. Where your data is processed

Ants and the apps you build are hosted mainly in the European Union. Some of our service providers, and our team in the UAE, process data in other countries, including the United States. For transfers out of the UK, we use the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy decision. For transfers out of Brazil, we use the standard contractual clauses approved by the ANPD.

8. How long we keep it

Data	Retention
Account data	While your account is open, then up to 90 days
Conversations and project content	While your account is open; for inactive apps, until the 3-month grace period ends
Published apps and App Data	While the app is live, then 3 months after it becomes inactive
Billing and tax records	As long as tax and commercial law requires, up to 7 years
Support messages and abuse reports	Up to 24 months, or longer if needed for a legal claim
Logs	Up to 30 days, or longer if needed to investigate a security incident
Analytics data	Up to 14 months

Deleted data is removed from backups within 35 days.

9. Your rights

Depending on where you live, you can ask us to:

confirm whether we process your data, and give you a copy;
correct it;
delete it;
restrict or object to its use;
provide it in a portable format;
give information about who we share it with;
review an automated decision.

You can also withdraw consent at any time.

Write to [email protected]. We reply within one month, or sooner where the law requires; for example, Brazil's LGPD requires 15 days for a full confirmation. We may need to verify your identity first.

You can complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in Brazil, the ANPD (gov.br/anpd).

United States. We do not sell personal information. We do not respond to "Do Not Track" browser signals. You can refuse analytics and advertising cookies in your account settings or on ants.dev.

10. Cookies

We set strictly necessary cookies without consent, because the site cannot work without them. We set analytics and advertising cookies with your consent where the law requires it. Wherever you are, you can refuse them or change your choice at any time in your account settings or on ants.dev.

Name	Type	Purpose	Duration
Session and token storage	Necessary	Keeps you signed in	Session to 30 days
Consent choice	Necessary	Remembers your cookie choice	12 months
Language preference	Necessary	Remembers your language	Until cleared
`_ga`, `_ga_*`	Analytics	Google Analytics 4 measurement	Up to 24 months
`_gcl_au`	Advertising	Google Ads conversion measurement	90 days
`IDE`, `test_cookie`	Advertising	Google ad measurement and personalisation	Up to 13 months

Apps you build may set their own cookies. You are responsible for informing their users and getting any consent required.