Privacy Policy

Last updated: October 31, 2026 · Benge Software LLC

MakeItOurs ("the app") is published by Benge Software LLC ("we," "us"). This policy explains what data MakeItOurs handles under its two service options. The optional managed subscription uses a MakeItOurs-operated backend to store projects and run AI requests and builds. The bring-your-own-infrastructure option instead uses your device, GitHub account, GitHub Actions, and chosen AI provider. For technical detail about credentials, see Security.

Your service choice

Managed subscription

If you opt in to a subscription, MakeItOurs provides the project datastore, source versioning, AI processing, build pipeline, previews, and operational support. GitHub is not the system of record for this option. You do not select an AI provider or bring an AI API key; we select and connect the AI services used by the managed pipeline.

Bring your own infrastructure

If you do not subscribe, you can use GitHub as the source of truth for your project and manage your own GitHub Actions. You select a supported AI provider and supply your own API key. Project and provider data in this path is governed by your agreements with GitHub and the provider you choose.

Data handled by the managed subscription

Account and subscription data

We process the identifiers and records needed to authenticate you, associate projects with your tenant account, determine subscription status and entitlements, enforce quotas, and meter use. Subscription status may be received from Apple or another payment provider. Payment credentials are handled by the payment provider rather than stored in your MakeItOurs project.

Projects, requests, and build output

We store your managed project source, revision history, project metadata, requests, generated build artifacts, compatibility records, and published previews. Project source and history are held in our managed Git service rather than your GitHub account. Ephemeral build environments receive a working copy while processing a request and are torn down when processing finishes.

AI processing and design search

Your request and the project content needed to fulfill it are sent through our AI gateway to a platform-selected AI provider. We record AI prompts and responses for safety, debugging, metering, and service quality. These records are held in Cloudflare, in AI Gateway logs and in our own storage. Separately, we may turn on model-call tracing with LangSmith (a LangChain service) to diagnose problems and improve quality. By default that tracing is off. When it is on, LangSmith receives each AI call's model, provider, token counts, cost, timing, errors, and internal request and account identifiers, but not its content. For limited troubleshooting periods of at most 72 hours at a time, we may also send the prompts and responses of those calls, which include your request and the project content needed to fulfill it. Design-object content may also be converted into embeddings in a shared search index used to find equivalent objects across projects. On the hosted service, design objects are shared code: when your request needs an object like one already built in another hosted project, that object's design source may be given to our AI agents and adapted into your project, and your hosted design objects may be reused the same way in other users' projects. Nothing that identifies the project or person an object came from is shared with the other user. A future setting will let you turn this off for your whole account or for one project; doing so stops both sharing those objects and reusing other users' objects. Index entries retain source-tenant and object metadata so they can be identified and removed under our retention processes.

Service records

We create request status, audit, security, usage, cost, performance, error, and diagnostic records when operating the managed service. These records can include tenant and request identifiers, processing stages, timestamps, model usage, and technical failure details.

Data handled when you bring your own infrastructure

On your devices

On Mac, local project files and app settings remain in local storage. GitHub authorization and locally used AI provider keys are stored in Keychain. On iPhone and iPad, the app does not keep a local project copy; GitHub authorization is stored in Keychain.

GitHub and your AI provider

The app communicates directly with GitHub using your authorization. Project source, history, and published previews are stored in a repository you own or that has been shared with you, subject to GitHub's privacy statement. For GitHub Actions, your AI key is encrypted on your device with the repository's public key and sent directly to GitHub as an encrypted repository secret. Project content and requests needed for AI work are sent from your Mac or GitHub Actions to the provider you selected, subject to that provider's privacy policy. We do not receive your project, GitHub credential, or AI key merely because you use this path.

Images you attach

You can add photos or screenshots to a request to show what you want. Images are optional and are sent only with the request you attach them to. Images you attach are sent to AI models that may use or train on your data. Don't add anything you aren't comfortable sharing. The app reminds you of this before you add an image, unless you turn that reminder off in Account Management.

Before an image leaves your device, the app removes its metadata, including location, camera and device details, and when it was taken, and it resizes large photos.

Managed subscription

Images go through our AI gateway to a platform-selected AI provider, together with your request. Our service removes metadata again when it receives an image. Images are not saved to your project or your synced project library. An uploaded image that is not used in a request is deleted after 15 minutes, and an image used in a request is deleted within 24 hours. Image requests are turned on only while we have verified an AI model that can read images.

Bring your own infrastructure

Images go from your device or GitHub Actions to the AI provider you selected, together with your request, under that provider's privacy policy. We do not receive them.

Sensitive and regulated data

MakeItOurs is not designed to store or process sensitive personal information or regulated workloads. Do not include personal identifying information, protected health information, payment-card or financial account data, government identifiers, credentials, or other confidential regulated data in project files, prompts, object names, annotations, or support requests. The managed service applies automated input and output safeguards intended to detect and prevent certain sensitive data from being processed or persisted, but those safeguards may not identify every instance. You remain responsible for excluding such data.

Service providers and disclosures

We use service providers to deliver the managed subscription, including Cloudflare for request processing, storage, queues, AI routing, sandboxed builds, analytics, and previews; a managed source-control service for project history; platform-selected AI providers; Datadog for operational monitoring of request status, errors, and performance; LangSmith for model-call tracing when we turn it on, as described in "AI processing and design search"; Apple or another provider for subscriptions; and Apple CloudKit for syncing your project catalog across devices. These providers process data on our behalf or under their own terms as applicable. We may also disclose data when required by law, to protect the service and its users, or as part of a business transfer. We do not sell your personal data.

Retention and deletion

Managed project source and history are retained while your subscription is active and for up to 60 days after it ends, then scheduled for deletion. Status, audit, metric, structured-log, and design-embedding records are generally retained for up to 90 days. AI prompt and response logs for the managed subscription are held in Cloudflare (AI Gateway) and expire under its log retention. Our own AI call records are deleted automatically: details of each call after up to 14 days, and any stored prompts and responses after up to 72 hours. LangSmith keeps tracing data for up to 14 days. Images you attach are deleted as described in "Images you attach" above. Backups and replicas may take additional time to expire or be purged. You may contact us to request access to or deletion of data associated with your account, subject to security, legal, and operational requirements. Deleting data from the bring-your-own-infrastructure path is handled through your device, GitHub, and chosen AI provider.

App Store analytics

Standard, aggregated App Store analytics provided by Apple, such as install counts and crash reports when you opt in, may be available to us through App Store Connect, subject to Apple's privacy policy.

Children's privacy

MakeItOurs is not directed at children under 13, and we do not knowingly collect personal data from children.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

For privacy questions or data requests, email [email protected]. For product support, see the Support page.