Privacy Policy
Effective date: 24 August 2026
1. Scope and controller
This Privacy Policy explains how Brilic Media collects, uses, stores, and shares personal data when you use Brilic Apps.
Brilic Media operates Brilic Apps and is the controller of personal data processed for the operation of the website, user accounts, marketplace, valuations, buyer and seller requests, introductions, and transaction-support services.
Brilic Apps is the marketplace and app-acquisition service operated by Brilic Media. Brilic Media may introduce buyers and sellers, facilitate a marketplace transaction, or consider buying, investing in, or entering into a commercial partnership concerning an app itself.
Questions and requests concerning privacy or personal data should be sent to support@brilicapps.com.
2. Personal data we collect
Google account and authentication information
When you sign in with Google, we receive and store:
- your name;
- your email address;
- your Google account identifier; and
- your Google profile image.
We use this information to create and secure your Brilic Apps account, sign you in, display your profile, associate your requests with your account where applicable, and communicate with you about the Services.
Information you submit
Depending on how you use Brilic Apps, we may collect:
- your name and email address;
- Telegram, WhatsApp, or other contact details;
- whether you are acting as a buyer, seller, representative, or both;
- acquisition budget, criteria, preferred app types, and transaction objectives;
- App Store or Google Play links;
- app names, platforms, categories, and descriptions;
- revenue, profit, expenses, downloads, traffic, retention, subscriptions, refunds, and other app-performance information;
- information concerning ownership, technology, source code, service providers, and transfer readiness;
- offer amounts and messages;
- information and documents supplied for valuation, verification, due diligence, an NDA, a data room, escrow, or transfer;
- information submitted through free-valuation, contact, consultation, buyer, seller, offer, and other website forms; and
- messages and other communications with Brilic Media.
You may choose not to provide optional information. Certain information may be needed to create an account, respond to a request, evaluate an app, provide a valuation, qualify a buyer, or facilitate a transaction.
Information collected automatically
When you visit or use Brilic Apps, we may collect basic technical and usage information, including:
- IP address;
- browser and device type;
- operating system;
- approximate country or region inferred from technical information;
- browser language or locale;
- pages, listings, buttons, and features used;
- referral source and referring page;
- date and time of access;
- page address and path;
- account, authentication, performance, and security logs; and
- cookie or session identifiers.
Information from other sources
We may obtain information from public App Store and Google Play listings, public business sources, app owners, authorized representatives, buyers, sellers, professional advisors, and information supplied during transaction discussions.
For off-market sourcing, we may use lawful public or business contact information to approach an app owner about a possible opportunity.
3. How and why we use personal data
We use personal data for the following purposes and legal bases:
| Purpose | Typical legal basis |
|---|---|
| Create, authenticate, secure, and administer accounts | Performance of our agreement and legitimate interests in providing secure account access |
| Respond to inquiries, buyer requests, seller requests, offers, consultations, and valuation requests | Steps requested before entering into an agreement and legitimate interests in responding to business requests |
| Generate preliminary valuations and review submitted apps | Steps requested before entering into an agreement and legitimate interests in evaluating opportunities |
| Create and manage public or confidential listings | Performance of an agreement, pre-contractual steps, and legitimate interests in operating the marketplace |
| Verify financial, store, ownership, and operational information | Pre-contractual steps, performance of an agreement, fraud prevention, and legitimate interests in marketplace integrity |
| Match and introduce buyers and sellers | Pre-contractual steps, performance of an agreement, and legitimate interests in facilitating transactions |
| Evaluate whether Brilic Media wishes to acquire, invest in, or partner concerning an app | Pre-contractual steps and legitimate interests in evaluating business opportunities |
| Coordinate NDAs, data rooms, due diligence, transaction documents, escrow, payments, and transfers | Pre-contractual steps and performance of an agreement |
| Communicate about an account, request, listing, opportunity, or transaction | Performance of an agreement, pre-contractual steps, and legitimate interests in business communication |
| Detect fraud, spam, abuse, sanctions issues, and unauthorized activity | Legal obligations and legitimate interests in security and fraud prevention |
| Maintain accounting, transaction, compliance, and dispute records | Legal obligations and legitimate interests in recordkeeping and legal claims |
| Measure website performance and understand usage | Consent where required for non-essential analytics; otherwise legitimate interests where permitted by applicable law |
| Send marketing or marketplace updates | Consent or another lawful basis permitted for business communications, with an easy opt-out |
Where we rely on legitimate interests, we consider the necessity of the processing, its effect on individuals, and reasonable expectations. Where we rely on consent, you may withdraw it at any time without affecting processing already performed.
We do not use personal data to make decisions producing legal or similarly significant effects solely through automated processing.
4. Google authentication
Brilic Apps uses Google authentication only for signing in and managing account access. We use the name, email address, Google account identifier, and profile image received through Google authentication for the purposes described in this Policy.
Google separately processes information when providing its authentication service under Google’s own terms and privacy notice. Deleting your Brilic Apps account does not delete your Google account.
You may delete your Brilic Apps account from the profile section. If you believe your Google connection remains active after deletion, you may also review and revoke third-party access through your Google account settings.
5. Marketplace, listings, and confidential information
App listings may display app names, logos, screenshots, platform, category, description, downloads, ratings, revenue, profit, expenses, valuation information, traffic, technology, and transfer information.
Personal contact details are not included in a public listing unless the relevant person authorizes publication.
Non-public seller submissions, buyer mandates, financial records, source materials, data-room documents, and transaction documents are treated as confidential. They may be shared only as reasonably necessary to evaluate, advise on, finance, or complete the relevant opportunity and may be protected by separate nondisclosure terms.
Sellers should not upload app-user or customer-level personal data unless Brilic Media specifically requests it and the seller has confirmed that the disclosure is necessary and lawful. Aggregated, anonymized, or redacted information should be used wherever reasonably possible.
6. How personal data is shared
We may share personal data with:
- Brilic Media personnel and affiliated businesses that need the information to operate Brilic Apps or evaluate an opportunity;
- prospective buyers, sellers, owners, investors, and their authorized representatives where relevant to an opportunity;
- professional legal, accounting, financial, technical, privacy, and transaction advisors;
- providers supporting website hosting, databases, storage, Google authentication, analytics, communications, email, forms, security, backups, data rooms, e-signatures, escrow, payments, and app transfers;
- app-store and platform operators where needed for verification or transfer;
- courts, regulators, public authorities, and law-enforcement bodies where disclosure is legally required or necessary to protect rights; and
- a purchaser, successor, or relevant advisor in connection with a merger, restructuring, financing, acquisition, or transfer of the Brilic Apps business.
Only information reasonably necessary for the relevant purpose should be shared. Confidential transaction information may be subject to qualification, access restrictions, and an NDA.
Brilic Media does not sell personal data as a standalone product.
7. Brilic Media as marketplace operator or app buyer
When Brilic Media operates the marketplace, it processes personal data to review opportunities, manage listings, qualify participants, make introductions, and support transactions.
When Brilic Media or an affiliate considers buying, investing in, or partnering concerning an app, Brilic Media also processes relevant seller, representative, app, and transaction information to evaluate and potentially complete that opportunity. Brilic Media will disclose its role as a proposed buyer, investor, or partner before entering into a binding transaction.
The buyer and seller in a completed app transaction are separately responsible for determining how personal data included in the transferred business or app may lawfully be disclosed, transferred, and processed after completion.
8. Cookies and similar technologies
Brilic Apps may use cookies, session identifiers, and similar technologies for:
- essential website and security functions;
- Google authentication and account sessions;
- fraud and abuse prevention;
- remembering privacy or interface preferences; and
- basic website analytics and performance measurement.
Essential authentication, security, and user-input technologies may operate automatically where they are necessary to provide a feature you request.
Basic analytics may collect a short-lived session identifier, page address, page path, referrer, browser or device information, locale, approximate country, and event time. The current analytics session identifier expires after approximately 30 minutes.
Where applicable law requires consent for non-essential analytics, those analytics will not be activated unless you choose to allow them. You can reject non-essential analytics and later change or withdraw your choice through the cookie settings available on the website.
We do not use advertising or behavioral-marketing cookies unless they are separately disclosed and any consent required by law has been obtained.
You may also block or delete cookies through your browser settings. Disabling essential technologies may prevent account login or other requested features from working correctly.
9. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy. Our standard retention periods are:
- Active account information: for as long as the account remains active.
- Deleted account information: removed promptly from the active account database after account deletion; residual copies may remain in protected backups for up to 30 days.
- General contact, buyer, seller, consultation, offer, and free-valuation submissions that do not lead to an active transaction: up to 5 years after the last meaningful interaction.
- Active listings, introductions, negotiations, and transaction files: for the duration of the opportunity and up to 10 years after completion, termination, or the last material activity.
- Accounting, payment, tax, compliance, sanctions, fraud, and legal-claim records: up to 10 years, or longer where a legal obligation or active claim requires it.
- Confidential data-room materials: normally removed or archived within 12 months after the opportunity ends, unless they form part of a completed transaction, dispute, security record, or legally required file.
- Security and technical logs: normally up to 6 months, unless longer retention is needed to investigate abuse, an incident, or a legal claim.
- Analytics records: normally up to 24 months; the analytics session identifier itself expires after approximately 30 minutes.
- Marketing records: until you unsubscribe, withdraw consent, object, or the information becomes inactive under our retention process.
- Privacy-request records: up to 3 years after completion of the request so that we can document our response and protect legal rights.
When a retention period expires, information is deleted, anonymized, or securely archived where continued restricted retention is legally necessary.
10. Account deletion and deletion of form submissions
You may delete your Brilic Apps account from the profile section. This deletes your active account and profile information promptly, subject to short-term backup retention and records that must lawfully be preserved.
Deleting an account does not automatically delete information previously submitted through separate buyer, seller, offer, contact, consultation, or free-valuation forms. This is because those submissions may be stored as separate business or transaction records and may not always be technically linked to the active account.
To request deletion of form submissions or other records, contact support@brilicapps.com and identify the email address and requests concerned. We will search relevant systems and delete eligible information, subject to records we must retain for a transaction, legal obligation, fraud prevention, dispute, or legal claim.
11. International processing
Brilic Apps may be used by buyers, sellers, advisors, personnel, and service providers located in different countries. Personal data may therefore be processed in countries other than the country where it was collected.
Where applicable data-protection law requires safeguards for international processing or transfers, Brilic Media uses appropriate contractual, organizational, or legal measures designed to protect the data and individual rights.
You may contact support@brilicapps.com to request more information about safeguards relevant to your personal data.
12. Security
Brilic Media uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, loss, misuse, or disclosure. These measures include, as appropriate:
- encrypted website connections;
- protected database and hosting infrastructure;
- Google authentication for user access;
- access restrictions based on operational need;
- administrative and account-access controls;
- logging and monitoring for security and abuse;
- controlled access to confidential transaction information; and
- protected backups and recovery procedures.
No online system can be guaranteed completely secure. Users should protect their Google accounts and promptly report suspected unauthorized access to support@brilicapps.com.
If a personal-data incident occurs, Brilic Media will investigate, document, contain, and assess it and will notify affected individuals or authorities where required by applicable law.
13. Your privacy rights
Subject to applicable law, you may have the right to:
- confirm whether we process your personal data;
- request access to your personal data;
- correct inaccurate or incomplete information;
- request deletion;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing;
- withdraw consent;
- receive certain information in a portable format;
- request information about international safeguards; and
- complain to a competent data-protection authority.
Send requests to support@brilicapps.com. Please describe the request and identify the email address or account concerned. We may request reasonable information to verify identity and protect personal data from unauthorized disclosure.
We aim to respond without undue delay and, where the GDPR or an equivalent deadline applies, within one month. That period may be extended where legally permitted for a complex or numerous request, in which case we will explain the extension.
A request may be limited or refused where continued processing is required by law, needed for a transaction or legal claim, necessary to protect another person’s rights, or otherwise permitted by applicable law.
14. Marketing communications
Where offered, marketing or marketplace-update consent will be separate from a transaction, valuation, or contact request and will not be required to use the requested Service.
You can opt out through the unsubscribe method in a marketing message or by contacting support@brilicapps.com. Service, account, security, and transaction communications are not marketing and may continue while relevant.
15. Children
Brilic Apps and its transaction-related Services are intended for adults. We do not knowingly collect personal data from anyone under 18. If such information is identified, we will take reasonable steps to delete it.
16. Data-protection commitment
Brilic Media is committed to processing personal data lawfully, fairly, transparently, securely, and only for legitimate and stated purposes. Where the European Union General Data Protection Regulation applies to processing performed through Brilic Apps, Brilic Media processes personal data in accordance with the applicable GDPR requirements.
Compliance depends on both this Policy and the technical and organizational practices used to operate the Services. We periodically review those practices and update them where necessary.
17. Third-party websites and services
Brilic Apps may link to Google, the App Store, Google Play, escrow providers, and other third-party services. Those services process information under their own terms and privacy notices. This Privacy Policy does not govern independent processing by a third party.
18. Policy updates
We may update this Privacy Policy to reflect changes to the Services, data practices, security measures, or applicable requirements. The current version will be published with its effective date. Material changes may also be communicated through the website, account, or email where appropriate.
19. Contact
For privacy questions, access or deletion requests, account issues, complaints, or concerns about personal data, contact support@brilicapps.com.