Last updated: April 18, 2026

Our Privacy Promise

weballoon is built with privacy-first principles. Your browsing data stays on your device. We don't track you, we don't sell your data, and we can't see what you do in your apps.

1. Information We Don't Collect

weballoon operates on a local-first architecture. This means:

We don't collect your browsing history
We don't store your passwords or login credentials
We don't track your behavior within apps
We don't access the content you view in your workspaces
We don't sell or share your personal data with third parties

2. Information We Do Collect

We only collect the minimum information necessary to provide our service:

Account information: email address only if you choose to link your account for cloud sync
App configuration: your workspace names and app URLs only if you enable cloud sync
Payment information: processed securely by Stripe; we don't store your payment details
Technical data: anonymous crash reports and performance metrics only if you choose to share them

3. Local-First Architecture

By default, all your data is stored locally on your device in a JSON file. This includes:

Your workspace configuration
App URLs and names
App-specific cookies and storage, isolated per app
Privacy settings

You can inspect, export, or delete this data at any time through the Settings panel.

4. Cloud Sync (Optional)

If you choose to enable cloud sync with a Pro subscription:

We sync only your workspace and app configuration, not your browsing data
All synced data is encrypted in transit and at rest
You can delete your cloud data at any time
We maintain server logs for security purposes only

5. Cookies

Our website uses only essential cookies necessary for the functioning of the service. We do not use tracking cookies or third-party analytics cookies. See our Cookies for details.

6. Your Rights (GDPR)

Under GDPR and other privacy regulations, you have the right to:

Access your personal data
Rectify inaccurate data
Delete your data (right to be forgotten)
Export your data (data portability)
Object to processing
Lodge a complaint with a supervisory authority

To exercise these rights, email us at privacy@weballoon.app.

7. Data Retention

Local data remains on your device until you delete it. Cloud data is retained while your account is active and for 30 days after account deletion for recovery purposes.

8. Security

We implement industry-standard security measures including:

Encrypted sync transport and secure storage for synced configuration
TLS 1.3 for all data transmission
Regular security reviews
App sandboxing and isolation

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the last-updated date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@weballoon.app
Address: weballoon, Lda., Portugal