Privacy Policy

Last updated Sept 12, 2025

This Privacy Policy is entered into by and between you as an individual or you on behalf of the entity you represent (“you”) and Whimsical, Inc., a Delaware corporation (“Applet”, “we”, “us”, or “our”), which owns and operates the applet.dev and other associated domains (collectively, the “Websites”) and all content, services, applications, and products available at or through the Websites, including the Applet Tool (defined below), any other AI-assisted prototyping tools, and any related APIs provided by Applet (collectively, our “Services”). The Services are owned and operated by Whimsical, Inc.

Your privacy is important to us. At Applet, we have a few fundamental principles:

Below is our Privacy Policy, which incorporates and clarifies these principles.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR PERSONAL INFORMATION. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE WEBSITES OR USE OUR SERVICES.

If you live in or are located in Europe or certain US states, and if you would also like to identify your data controller and processor, please see “Regional Terms for Europe and Certain US States“ below and view our Subprocessor List. This Privacy Policy includes and incorporates our Terms of Service, Cookie Policy, and Data Processing Addendum. Defined terms used herein and not otherwise defined have the meanings set forth in the Terms of Service.

Who We Are and What This Privacy Policy Covers

Through the Services, Applet offers an AI-assisted software development prototyping tool at applet.dev (the “Applet Tool”). The prompts, images, drawings, attachments, or other information that you provide to the Applet Tool are the “Input”. The output generated by the Applet Tool based on the Input, including the underlying code, is the “Output”. Together, the Input and Output are referred to as “Content” and “Content” encompasses User Content, Organization Content, and Public Content, each of which is defined in the Terms of Service. Our Services utilize data models trained by machine learning, which are referred to herein as “AI Systems”.

This Privacy Policy applies to information that we collect about you when you access our Websites (including any related websites and successor websites) and/or to utilize our Services, including but not limited to the Applet Tool and any beta or pre-release tools offered within the Services. Below we explain how we collect, use, and disclose personal information about you, along with the choices that you have with respect to that information.

Personal Information We Collect

Information You Provide to Us

It’s probably no surprise that we collect information that you provide to us. The amount and type of information depends on the context and how we use the information. Here are some examples:

Throughout this Privacy Policy, we will refer to this information as “Registration Data”.

Other information we may collect directly from you, which is not part of Registration Data, may include survey responses, feedback about our Services, product or pricing inquiries, or sales discussions details.

Information We Collect Automatically

We collect some information automatically:

Throughout this Privacy Policy, we will refer to this information as “Usage Data”.

Information We Collect from Other Sources

We may also receive information about you from other sources. For example, if you create or log into your Applet.dev account through another service (like Google), we will receive information from that service (such as your basic profile information) via the authorization procedures used by that service.

Information We Collect or Generate through Our Services

Through our Services, we receive your Content. We also receive communications from you, such as support requests.

Information You Provide During the Job Application Process

We may also receive information about you if you submit a job application, inquire about opportunities at Applet, provide us your information at a recruiting event, or if we receive information about you from third parties in connection with our recruiting activities. Throughout this Privacy Policy, we will refer to this information as “Recruiting Data”. Recruiting** **Data may include:

You are responsible for the Recruiting Data you provide or make available to us and all Recruiting Data you provide must be truthful, accurate, and not misleading in any way. You may not provide Recruiting Data that is obscene, defamatory, infringing, malicious, or that violates any law. To the extent you voluntarily provide any sensitive or special categories of information, as may be defined in applicable laws, you explicitly consent to our processing of such information as described in this Privacy Policy. Depending on your region or the region where an opportunity is located, we may be required to process certain sensitive personal information to comply with applicable local law. You are responsible for providing any notices and obtaining any consents necessary for us to collect and use personal information of your references as described in this Privacy Policy.

How and Why We Use Your Personal Information

We use information about you as mentioned above and for the purposes listed below:

As detailed in the “Data Usage, Learning, and Training” section of our Terms of Service, we may use certain data to improve our Services and train our AI Systems.

How and Why We Disclose Personal Information

We disclose information about you in the limited circumstances spelled out below and with appropriate safeguards in place to protect your privacy:

How Long We Keep Personal Information

We generally delete information about you when we no longer need the information for the purposes for which we collect and use it–which are described in the section above entitled “How and Why We Use Your Personal Information”–and we are not legally required to continue to keep it. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of your information, the purposes for which we process your information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Privacy Obligations

Applet provides you with the ability to provide Inputs that could contain personal information and Outputs that could be used to collect personal information from individuals. If you publish such Content, it is your responsibility to understand your legal obligations and to comply with all applicable laws, including:

How to Access and Control Your Personal Information

You can view, access, edit, or delete your personal information for many aspects of the Services. You can request that Applet delete your personal information by sending an email to [email protected] with “Please delete my personal information” in the subject line. Applet will verify your identity and then delete the personal information associated with your email address. You may also delete your account within your Account Settings through the Services. Please note that we may retain certain information as required or permitted by applicable law, and we may deny your deletion request if retaining the personal information is necessary for us or our service providers under any permitted exceptions.

Children’s Privacy

Our Websites and the Services are not intended for general audiences and not for children under the age of 16. No one under age 16 may provide any personal information on the Websites or through the Services. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on the Websites or through the Services. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at [email protected].

Security

While no online service is 100% secure, we work very hard to protect information about you against unauthorized access, use, alteration, or destruction, and take reasonable measures to do so, such as monitoring our Services for potential vulnerabilities and attacks. For details about the measures we take to protect information you, please refer to our Security webpage located at https://applet.dev/security.

Other Sites, Mobile Applications and Services

The Websites may contain links to other websites, mobile applications, and other online services operated by third parties such as social media companies or payment processors (“Third Party Services”). These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on Third Party Services. We do not control these Third Party Services, we are not responsible for their actions, and they may follow different rules regarding the collection, use and sharing of your personal information. We encourage you to read the privacy policies of Third Party Services you use.

Choices

You have several choices available when it comes to information about you:

Regional Terms for Europe and Certain US States

The Websites and our Services are hosted in the European Union. If you are using the Websites or Services from outside the European Union, please be aware that your information may be transferred to, stored, and processed in the European Union where our systems and facilities, and those of our third party providers and recipients of information, are located. The data protection and other laws of the European Union might be different than those in your country. By using the Websites and Services, you consent to your information being transferred to our systems and facilities, and to the systems and facilities of those third parties to whom we disclose information as described in this Privacy Policy. Your information may also be accessed from or transferred to locations outside of the European Union, for example, in connection with the section above titled “How and Why We Disclose Personal Information” as well as the section below titled “International Transfer of Data”.

The Applet Data Processing Addendum is available here and the Applet Subprocessor List is available here.

The below provides additional information to individuals who are residents of certain US states such as California and Nevada or are located in the European Union, United Kingdom, and Switzerland (“Relevant Regions”) as required under applicable data protection laws in those regions (“Regional Laws”).

Your Consumer Rights

Certain Relevant Laws provide individuals in Relevant Regions certain rights regarding their personal information. If a Relevant Laws apply to you, you may submit a request to exercise your right(s) in relation to your personal information, as follows:

Certain other details regarding the processing of personal information that individuals located in Relevant Regions may be entitled to receive are contained in other provisions of the Regional Supplement.

Please note that you may designate an authorized agent to exercise these rights on your behalf by providing written materials demonstrating that you have granted the authorized agent power of attorney. Please note that if an authorized agent submits a request on your behalf, we may need to contact you to verify your identity and protect the security of your personal information.

You can usually access, correct, or delete your personal information using your account settings and tools that we offer, but if you aren’t able to do that, or you don’t have an account, or you would like to contact us about one of the other rights, our contact information is set forth in “How to Reach Us“ below. Individuals in the European Economic Area, Switzerland, and United Kingdom (collectively, “Europe”) also have the right to make a complaint to a government supervisory authority.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. Under some Relevant Laws, you may only make a verifiable consumer request for access twice within a 12-month period. The verifiable consumer request must (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will respond to a verifiable consumer request within the time periods permitted under Relevant Laws. If we require more time, we will inform you of the reason and extension period in writing, in accordance with Relevant Laws.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Relevant Laws may require us to verify your identity. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. We may not be able to provide all of the information requested, for example: (i) if the personal information was collected for a single one-time transaction and if, in the ordinary course of business, such information was not retained; (ii) we would be required to reidentify or otherwise link any data that, in the ordinary course of business, was not maintained in a manner that would be considered personal information; or (iii) the consumer used different browsers, devices or identifying information and we have not linked all such information together.

California Privacy Rights Act (“CPRA”) Notice

If you are a California resident or resident of a US state with other Relevant Laws, the CPRA and other Relevant Laws require us to disclose the following information with respect to our collection, use and disclosure of personal information.

Non-Discrimination and Non-Retaliation

We will not discriminate or retaliate against you for exercising any of your CPRA rights. Unless permitted by the CPRA, we will not deny you goods or services; charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; provide you a different level or quality of goods or services; and/or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

California “Shine the Light” Law

California residents may request certain information regarding our disclosure (if any) of personal information to third parties for their direct marketing purposes, pursuant to California Civil Code Section 1798.83 (the California “Shine the Light” law). To make such a request, please contact us, identify yourself as a California resident and provide sufficient information so we can take appropriate action, such as your name, email address or any additional information required.

Individuals Located in Europe

If you are located in Europe (as defined above), the legal bases for using your personal information are as follows:

Controller and Processor Designations

Please see our Data Processing Addendum for terms related to our role as a Processor when we provide our Services. With regard to the processing of Registration Data, Usage Data, and Recruiting Data, Applet is the Controller and processes such information as set forth herein.

Data Processors

Please see our Subprocessor List for information on our use of third-party data processors.

International Transfer of Data

We may transfer to, process, and store the data we collect about you in countries other than the country in which the data was originally collected, including the USA, Canada or other destinations outside Europe. Those countries may not have the same data protection laws as the country in which you provided the data. When we transfer your data to other countries, we will protect the data as described in this Privacy Policy and comply with Relevant Laws providing adequate protection for the transfer of data to countries outside Europe.

We transfer your personal information outside Europe with appropriate organizational safeguards in place. Specifically, we transfer your personal information in accordance with the Standard Contractual Clauses (“SCCs”). The SCCs are part of our Data Processing Addendum. By utilizing our Service, you agree to the transfer of your personal information in accordance with our Data Processing Addendum.

You may request more information about the safeguards that we have put in place in respect of transfers of personal information by contacting us as described in “How to Reach Us“ below.

Privacy Policy Changes

Although most changes are likely to be minor, Applet may change its Privacy Policy from time to time, and in Applet’s sole discretion. Applet encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

How to Reach Us

If you have a question about this Privacy Policy, or you would like to contact us about any of your rights mentioned herein, please contact us at [email protected]. You may reach us by mail at Applet, c/o Whimsical, Inc., 1630 Welton Street, 7th Floor, Denver, Colorado 80202, USA.