Skip to content

(A)App self-check · 2 minutes

Is your AI-built app leaking data? A 2-minute self-check.

Ten questions about the setup and the legal basics. You get a simple profile and the fixes worth making first.

What did you build it with?

  1. 01 · Database & accessAccess rules (such as Row Level Security) are switched on for every database table.
  2. 02 · Database & accessWe’ve tested the app logged out, and as a second user, and couldn’t see anyone else’s data.
  3. 03 · Database & accessNo secret keys (payment, database service, AI API) are in front-end code or a public repository.
  4. 04 · Data & documentsWe know every service our app sends personal data to.
  5. 05 · Data & documentsOur privacy policy describes what the app actually does today.
  6. 06 · Data & documentsNon-essential trackers only load after users agree (for EU/UK visitors).
  7. 07 · Data & documentsIf our app calls an AI API, we’ve checked whether the provider keeps or trains on that data.
  8. 08 · Data & documentsUsers can delete their account and data.
  9. 09 · ResilienceWe have backups, and our test data is separate from live data.
  10. 10 · ResilienceWe know who to tell, and how fast, if user data leaks.