Last updated: 7 November 2026
Peidus Products OÜ, Estonia ("we") provides TweakLane. This policy explains how we process personal data. Contact: support@peidusproducts.com.
1. Two roles
- Developer accounts. For the people who sign up for TweakLane and use the dashboard, we are the controller.
- End-user data. For the users of apps that use TweakLane, the app developer is the controller and we are the processor. We process that data only on the developer's instructions, under the Data Processing Agreement. End users should contact the app's developer about their data; we will assist the developer.
2. Developer accounts
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Email address, organisation, role | account, sign-in, service messages | contract (6(1)(b)) |
| Apps, keys, settings, dashboard audit log (who changed what, when) | providing and securing the service | contract; legitimate interest in security (6(1)(f)) |
| Usage counts per app | plan limits and service operation | contract |
| Support emails | answering you | contract; legitimate interest |
We keep account data while the account exists and delete it within 90 days after the account is closed, except where the law requires us to keep it longer (for example accounting records).
3. End-user data processed for developers
| Data | Details |
|---|---|
| User identifier | chosen by the developer, or anon:<installId> for anonymous users; no name or email is needed |
| Layout documents | layouts, themes, user screens, navigation, designs and versions |
| Audit rows | app, user id, screen, action, versions, size, app version, time |
| AI consent | provider name shown, consent version, times |
| AI log rows (only when the developer enables AI) | user id, screen, model, outcome, latency and, unless switched off, the prompt; kept 30 days by default |
This data is kept until the developer deletes it, deletes the user (DELETE /users/:userId) or
deletes the app.
4. Recipients
We use the subprocessors listed on the Subprocessors page: Supabase (database, authentication, API, EU Frankfurt), Anthropic (AI requests, only when a developer enables AI and the end user consents) and Cloudflare (website, dashboard hosting, DNS). We do not sell personal data and do not use it for advertising.
5. International transfers
Data is stored in the EU (Frankfurt). Where a subprocessor processes data outside the EEA, the transfer is covered by the EU Standard Contractual Clauses or an adequacy decision, including the EU-US Data Privacy Framework where the recipient is certified.
6. Security
Access is limited per app and per user by signed tokens; database tables are closed to direct access; data is encrypted in transit. See Security and privacy.
7. Your rights
You have the right to access, rectify, erase, restrict and port your data and to object to processing based on legitimate interest. Email support@peidusproducts.com. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the authority in your country.
8. Website
tweaklane.com sets no cookies, loads no third-party scripts or fonts, and runs no analytics. Cloudflare processes request data (such as IP address) to deliver and protect the site.
9. Changes
We will post changes here and, for material changes, inform account holders by email.