Privacy Policy

1. Information at a glance

2. How the app uses the network

• Content you choose. Loading or previewing a website you want to convert, or online content your project uses. These requests go directly to those sites and are covered by their own privacy policies.
• Our server. The app talks to freehtmltoapk.com to keep your diamond balance, verify purchases, receive service messages and settings (for example a maintenance notice or an update reminder), and to check that it is a genuine copy installed from Google Play. That check uses Google's Play Integrity API; the result is used for that request only and not stored. Section 3 lists what is stored.
• Google services. Rewarded ads (section 4), Google Play Billing (section 5), Google Play's in-app update and in-app review features, and Google Play Asset Delivery, which downloads the optional ad-mediation components the first time you build an app with mediation. Google handles these under the Google Privacy Policy.

3. The device ID and what our server stores

The app has no accounts. Instead it computes a device ID: a one-way hash (SHA-256) of your device's Android ID. The Android ID itself is never sent, and the hash cannot be turned back into it. The device ID only keys your balance and plan on our server. Against it we store:

• Diamonds: your balance and a history of each diamond earned, spent on a build, refunded after a failed build, or granted free.
• Purchases: verification records for Remove Ads or Support Development: the product ID, the plan, a hash of the purchase token, when it was verified and, for the subscription, when it ends.
• Device details: app version, Android version, device make and model, language, install source, and when the app was first and last seen.
• Country: worked out by Cloudflare, which runs our server, from the connection. We do not store your IP address.
• Service messages: whether an in-app message was shown or tapped.

We also keep daily totals (for example how many builds or ads happened that day) that are not tied to a device. Our server is protected by short-lived rate limits that count requests per IP address to stop abuse; these counters are not stored with your device ID.

4. Ads in the app (Google Mobile Ads SDK)

On the Free plan, each build uses a diamond, and you can earn one by watching a short rewarded ad. Ads are provided by Google through the Google Mobile Ads SDK (AdMob). An ad only loads after you tap to watch one. Remove Ads and Support Development turn ads off.

To show and measure ads and to prevent fraud, Google's SDK collects and processes your device's advertising ID, device information (such as model, operating system and language), your IP address and approximate location derived from it, and how you interact with ads. This data goes to Google, not to us, and is handled under the Google Privacy Policy. See how Google uses information from sites or apps that use its services.

Consent. In the European Economic Area, the UK and other places where it is required, the app shows Google's consent form (the User Messaging Platform) before any ad is requested, and ads are personalised only if you agree. You can change your choice later in the app's settings. You can also reset or delete your advertising ID, or opt out of personalised ads, in your Android settings under Privacy → Ads.

For each rewarded ad, the app tells our server only that a reward was earned (with a random ID so it counts once) and simple ad events such as "ad shown" or "no ad available". These are used to credit your diamond and to count totals.

5. Purchases (Google Play Billing)

Remove Ads (one-time) and Support Development (yearly subscription) are sold through Google Play Billing. Google Play processes the payment; we never receive your card or payment details, your name or your email address. After a purchase, the app sends our server the purchase token and product ID, and our server asks Google Play to confirm the purchase is valid. We store a hash of the token, not the token itself, so the same purchase can be restored on another of your devices. Refunds and cancellation are handled by Google Play.

6. Permissions

Files and folders you import are opened through Android's system file picker, which only gives the app access to what you select.

7. Partner promotion

The app also shows a clearly labelled partner promotion for Closed Test Pro, a separate company. It is a static promotion: no data is sent to the partner. If you tap it, its Google Play page or website opens, and their own privacy policy applies there.

8. Feedback and email

If you choose Send feedback, your email app opens with some device details (device model, Android version, app version) filled in. You can review or remove them before sending. We use what you send only to reply to you and to improve the app, and we delete it when it is no longer needed.

9. Apps you build

Apps you create with Free HTML to APK belong to you, and you are their developer. What data they collect depends on the content and services you put in them. If you turn on Google AdMob or mediation, those ad services operate in your app under your account and their own policies. You are responsible for your app's privacy policy and for accurate store disclosures such as Google Play's Data safety form. The builder adds no analytics, tracking or ads of ours to your apps.

10. This website

freehtmltoapk.com uses no cookies, no analytics and no advertising. It is served by Cloudflare, which processes technical information such as IP addresses and browser details to deliver the site and protect it from abuse, as described in the Cloudflare Privacy Policy.

The web builder

The web builder is free and uses no diamonds, ads or device ID. When you press Build on freehtmltoapk.com/html-to-apk-converter, your browser uploads your app settings, your files, the icon and splash images, and your signing keystore with its password to our build service over HTTPS. They are used only to assemble and sign that one app, are kept in memory for the few seconds this takes, and are discarded as soon as the finished file is sent back. We do not store, log or look at your files, keys or passwords.

Keys created on the website are generated on our server during that request and returned to you as a password-protected .p12 file; we keep no copy. Your settings, and your encrypted key file if you choose Remember this key, are saved only in your own browser (local storage). Your key password is never saved. A short-lived rate limit counts requests per IP address to stop abuse.

11. Who can see the server data

The developer of Free HTML to APK has access to the server data in section 3 through a password-protected admin panel. It is used to run the service: answering support requests, restoring or correcting a diamond balance, granting a plan, suspending a device that abuses rewards, sending in-app messages and viewing overall statistics. Every change made in the admin panel is recorded in an audit log. We do not sell this data or share it with anyone except Cloudflare, which hosts it, and Google, which verifies purchases, or where the law requires it.

12. Children

The app and this website are not directed at children under 13, and we do not knowingly collect personal data from children.

13. Keeping and deleting your data

Everything the app stores on your phone stays there. To remove it, delete projects or clear the cache in the app, or uninstall the app. Uninstalling removes all of its private data, so export your signing keys first. Backups you saved to Downloads remain until you delete them.

On our server, we keep a device's records for as long as they are needed to keep its diamond balance and plan working, and purchase verification records for as long as the purchase is valid and as needed to handle refunds, disputes and fraud. Daily totals contain no device data and are kept for statistics. To ask us to delete your device's records, email support@freehtmltoapk.com from Send feedback in the app. Deleting them resets your diamond balance; a Google Play purchase can be restored afterwards.

14. Security

Projects and keys live in the app's private storage, which other apps cannot read. Key backups are password-protected PKCS#12 files. Our server data is reached only over HTTPS, and the admin panel is password-protected. Keep your device locked and your backup passwords safe; we cannot recover them.

15. Changes to this policy

If this policy changes, we will update this page and the date at the top. Significant changes will also be shown in the app.

16. Contact

Questions about privacy: support@freehtmltoapk.com, or use Send feedback in the app's Settings.