Privacy Policy

MobiDrag ("we," "our," or "us") is a software company that provides a no-code mobile app builder for Shopify merchants. Our platform enables Shopify store owners to design, launch, and manage native iOS and Android mobile apps without writing code.

Our website is located at https://mobidrag.com. If you have any questions about this Privacy Policy, you can contact us at info@mobidrag.com.

We collect information in the following ways:

2.1 Information You Provide

• Account information: Name, email address, password, and billing details when you register or subscribe.
• Shopify store data: When you connect your Shopify store, we access store data (products, collections, orders, customer data) solely to build and power your mobile app.
• Communications: Messages you send us via email, chat, or support tickets.
• Payment information: Processed securely by our payment provider. We do not store raw card numbers on our servers.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent, and actions taken within our dashboard.
• Device & browser info: IP address, browser type and version, operating system, and device identifiers.
• Cookies & tracking pixels: We use cookies to keep you logged in, remember preferences, and analyze usage patterns. See Section 8 for details.
• App analytics: Aggregated, anonymized data about how end-users interact with mobile apps built on our platform (e.g., screen views, session duration). No personally identifiable end-user data is stored by us.

2.3 Information from Third Parties

• Shopify Partner API: Store metadata, installed app status, and billing events as provided by Shopify.
• OAuth providers: If you sign in via Google or another OAuth provider, we receive basic profile information (name, email).

We use the information we collect to:

• Provide, operate, and improve the MobiDrag platform and your mobile app.
• Process payments and manage your subscription.
• Sync your Shopify store data (products, collections, inventory) into your mobile app in real time.
• Send transactional emails (receipts, password resets, app build notifications).
• Send product updates and marketing communications — you can opt out at any time.
• Provide customer support and respond to inquiries.
• Monitor platform security, detect abuse, and prevent fraud.
• Comply with legal obligations.
• Analyze aggregate usage trends to improve features and performance.

We do not sell your personal data to third parties. We do not use your Shopify store data or your customers' data for advertising purposes.

As a Shopify app, MobiDrag processes data on behalf of Shopify merchants. This includes product catalogs, customer order history, and other store data required to build and operate your mobile app.

Your store's customer data (names, emails, addresses) is accessed only as needed to display order history and account information within the mobile app experience. We act as a data processor for this data — you remain the data controller responsible for your customers' data.

We never use your end-customers' data for our own marketing or share it with third parties outside of what is necessary to operate the service (e.g., sending push notifications).

We share data only in the following limited circumstances:

• Shopify: As a Shopify Partner, we exchange data with Shopify as required to install and operate the app within their ecosystem.
• Payment processors: For handling subscription billing securely on your behalf.
• Firebase / Apple Push Notification Service (APNs) / Google Firebase Cloud Messaging (FCM): For delivering push notifications to your app's users.
• Apple App Store & Google Play Store: For distributing your mobile app. These platforms have their own privacy policies.
• Analytics providers: Aggregated, anonymized usage data may be shared with analytics tools (e.g., Mixpanel, Segment) to improve our platform.
• Legal requirements: We may disclose data if required to do so by law, regulation, or valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We retain your account data for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain it by law (e.g., financial records for tax purposes, which are retained for 7 years).

Anonymized, aggregated analytics data may be retained indefinitely as it cannot be used to identify you.

We implement industry-standard security measures to protect your data, including:

• TLS/SSL encryption for all data transmitted between your browser and our servers.
• Encryption of sensitive data at rest.
• Role-based access controls limiting employee access to customer data.
• Regular security reviews and vulnerability assessments.
• Secure third-party cloud infrastructure with their own security standards.

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as promptly as reasonably possible and as required by applicable law.

We use the following types of cookies:

• Essential cookies: Required for the platform to function (authentication sessions, CSRF protection). Cannot be disabled.
• Preference cookies: Remember your settings and preferences.
• Analytics cookies: Help us understand how visitors use our site (e.g., Google Analytics). These are anonymized.
• Marketing cookies: Used to deliver relevant ads on third-party platforms. You can opt out via your browser settings or our cookie banner.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the platform.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a portable, machine-readable format.
• Objection: Object to processing of your data for marketing purposes.
• Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, email us at info@mobidrag.com. We will respond within 30 days. We may need to verify your identity before processing your request.

MobiDrag is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@mobidrag.com and we will delete it promptly.

MobiDrag is operated in the United States. If you are located outside the US, your data may be transferred to and processed in the US or other countries. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

Our platform may contain links to third-party websites (e.g., Shopify, Apple, Google). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you by email or an in-app notice if the changes are material. Continued use of MobiDrag after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests related to this Privacy Policy, contact us at: