Security and safeguards
How Appfully protects your account, your projects and the people using them.
Your account
- Sign-in uses Google or a one-time email link; Appfully never stores a password.
- Your data is protected by database row-level security: you can only read and change your own projects, credits and settings.
Previews are sandboxed
Generated code runs in an isolated sandbox with no access to Appfully's cookies, your session or other pages. Safe stand-ins replace browser features the sandbox blocks (see Preview and testing).
Connections
Access tokens for connected services are encrypted and kept on the server. They're never sent to your browser or written into your project.
Payments
Card details go directly to Flutterwave; Appfully never sees them. Payments are verified with Flutterwave before a plan is applied.
Reporting a problem
If you find a security issue, please tell us privately through Support.
Related articles
What's public and what's privateExactly what others can see, before and after you publish.Credentials and connectionsHow Appfully handles access to your services, and how to keep secrets out of your code.Preview and testingHow the live preview works for Apps and Web Apps, and what behaves differently there.
Didn't find what you needed? Contact support