Privacy Policy

This Privacy Policy explains what information From Scratch Apps collects, how we use it, who helps us handle it, and the choices you have. "From Scratch Apps," "we," "us" and "our" mean Ryan Fritchen, doing business as From Scratch Apps, a custom app, website and AI integration studio based in Omaha, Nebraska. It covers fromscratchapps.com (the "site"), our booking and contact tools, and the ways we talk with you by email, phone and text. Ryan Fritchen currently operates From Scratch Apps as a sole proprietor. We'll update these this policy and our contact details when the business organizes as a limited liability company (LLC).

1.What we collect

We try to collect only what we need. Here's what that means in practice.

Information you give us

• Reserve a Table (booking) form: your name, email, phone number, business name and any message you add. The form also records the call details you pick: party size, preferred day and time, meeting type (video or in person), and the topics you're "hungry for."
• Intake notes from your call: during your Appetizer call, our team fills in a project intake form with what you tell us about your business, workflow and goals. You don't fill it in yourself at booking.
• Emails, calls and texts: what you send us and basic details like your number, email address, and the date and time.
• If you become a client: your billing contact, company details, signed agreements, invoices and payment records. We don't store full card or bank numbers ourselves; our payment provider Stripe handles those.
• Lost-revenue calculator: the numbers you type in are processed in your browser and are not sent to us or stored unless you choose to submit them (for example, to email yourself the result or ask us to follow up).
• Facebook and Instagram lead forms: if you fill out one of our forms on Facebook or Instagram, Meta sends us your name, phone, email and answers. We use them only to set up and follow up on your free working demo. Meta's own privacy policy covers what Meta collects.

Information collected automatically

• Site stats: we use Cloudflare Web Analytics, which is cookieless. It gives us totals like page views, referring sites, country, and browser or device type. It doesn't use cookies or build a profile of you across sites.
• Campaign tags: if you arrive from a link with tracking tags (for example, a tag showing you came from our Facebook page) or from another site, the booking form notes that source so we know which channels work.
• Technical logs: our host, Cloudflare, processes your IP address and request details to deliver the site and protect it from abuse and attacks.
• Browser storage: the site uses your browser's session storage (not cookies) to remember campaign tags and to show your booking details on the confirmation page. It clears when you close the tab.

On our website, we don't use advertising cookies, tracking pixels or cross-site ad tracking. We don't knowingly collect sensitive information (like health, financial account, or precise location data). Please don't put it in the message box.

2.How and why we use it

We may also send occasional updates about our services by email. When we email you, we may see whether the email was opened or a link in it was clicked, so we know what's useful. You can opt out of our emails at any time. Every marketing email includes a way to opt out, such as replying STOP or using an unsubscribe link, and we honor opt-outs within 10 business days. We never send marketing by text: our texts are only about your appointment and your project.

3.Who helps us (service providers)

We use a few trusted companies to run the site and the business. They act as our service providers (also called processors). They may only use your information to provide their service to us, under their own terms and privacy policies.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger, sale or reorganization of the business (the new owner would have to honor this policy). Text messaging opt-in data and consent are never shared with third parties for any purpose, including in these cases.

4.We don't sell your information

5.AI tools

Some of our work uses third-party AI providers, for example to draft text, summarize notes, or power AI features inside apps we build. When we send information to an AI provider:

• We send only what the task needs.
• Where the provider offers it, we use business or API settings that don't let them use your data to train their models.
• A person on our team reviews AI output before we rely on it for anything that matters.

We use third-party AI providers such as OpenAI, Anthropic, Google or Microsoft, as selected for your project.

6.Text messages and phone calls

If you give us your phone number, we may call you about your booking or project. We will not text you unless you have given us your express consent to receive texts, for example by checking a box that says so. Consent to texts is never a condition of buying anything from us.

• STOP: reply STOP (or END, CANCEL, UNSUBSCRIBE or QUIT) to any text and we'll stop. We'll send one message confirming you're opted out.
• HELP: reply HELP for help, or contact us at hello@fromscratchapps.com or (402) 810-8446.
• You can also opt out any other reasonable way, like telling us on a call or by email. We'll honor it promptly, and within 10 business days at the latest.
• We text and call only between 8 a.m. and 9 p.m. your local time, unless you ask us to reach you outside those hours.
• We won't make prerecorded, autodialed or AI-voice calls or texts to you without the prior express consent the law requires. Our texts are informational only, never marketing.
• When you call us, our AI assistant may answer, and calls may be recorded and transcribed so Ryan can follow up. The assistant tells you this at the start of the call.
• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
• Carriers aren't liable for delayed or undelivered messages. See the SMS terms in our Terms of Service.

7.Data inside the apps we build for clients

When a business hires us to build or maintain an app, website or AI integration, the information inside it (their customers, jobs, employees and so on) belongs to that business. For that data, we act as a service provider or processor: we handle it only to provide our services and only on the client's instructions, as set out in our written agreement with them.

This Privacy Policy doesn't govern that data; the client's agreement with us and the client's own privacy policy do. If you use an app that a business built with us and have a question about your data, please contact that business. If they ask us to help with your request, we will.

8.How long we keep it

We keep information only as long as we need it for the reasons above, then delete or anonymize it.

• Leads and booking requests that don't become clients: up to 24 months after our last contact.
• Client and billing records: for the length of our relationship plus 7 years for tax, accounting and legal reasons.
• Text consent and opt-out records: 5 years after you opt out, so we can prove we honored your choice.
• Site stats: Cloudflare Web Analytics only gives us aggregate totals; Cloudflare keeps its data under its own retention rules.
• Service providers (like FormSubmit or Cal.com) may keep copies under their own retention rules.

We may keep information longer if the law requires it or to resolve a dispute.

9.How we protect it

We use reasonable safeguards for a small studio: encrypted connections (HTTPS), two-factor sign-in on our business accounts, access limited to the people who need it, and providers with strong security records. No system is 100% secure, so we can't promise perfect security. If a breach affects your information, we'll notify you and the authorities as the law requires.

10.Your choices and rights

Wherever you live, you can ask us to tell you what information we have about you, correct it, delete it, or stop sending you marketing. Email hello@fromscratchapps.com or call (402) 810-8446. We'll reply within 45 days, and we won't treat you differently for asking.

California residents (CCPA, as amended by the CPRA)

Depending on our size, the California Consumer Privacy Act may not apply to us, but we honor these rights for California residents anyway:

• Right to know and access the personal information we collected about you, where it came from, why, and who we disclosed it to.
• Right to delete and right to correct your information.
• Right to opt out of sale or sharing. We don't sell or share personal information, so there's nothing to opt out of, but you can still ask. We treat a Global Privacy Control (GPC) browser signal as an opt-out request.
• Right to limit use of sensitive personal information. We don't use sensitive information for anything beyond what the law allows.
• Right not to be discriminated against for using these rights.

In the past 12 months we collected these categories: identifiers (name, email, phone, IP address), commercial and professional information (business name, project and billing records), and internet activity (cookieless site stats and campaign tags). We got them from you, your device, and our service providers, and used and disclosed them for the business purposes described above, only to the service providers listed above.

Nebraska residents (Nebraska Data Privacy Act)

The Nebraska Data Privacy Act took effect January 1, 2025. Some small businesses are exempt from most of it, but we honor these rights for Nebraska residents:

• Confirm whether we process your personal data and get access to it
• Correct inaccuracies
• Delete personal data you gave us or that we got about you
• Get a copy of your data in a portable, readily usable format
• Opt out of targeted advertising, sale of personal data, and profiling that leads to legal or similarly significant decisions (we don't do any of these)

We won't process sensitive data about you without your consent. We'll respond within 45 days; if we need more time (up to 45 more days), we'll tell you why. Appeals: if we decline your request, you can appeal by emailing hello@fromscratchapps.com with "Privacy appeal" in the subject line. We'll answer within 60 days. If you're unhappy with the result, you can contact the Nebraska Attorney General at ago.nebraska.gov.

Visitors from the EU, UK and elsewhere

Our services are aimed at U.S. businesses, and our providers store information in the United States. If laws like the GDPR or UK GDPR apply to you, we rely on these legal bases: performing a contract or steps you ask for before one; our legitimate interests in running and improving our business (balanced against your rights); your consent (for things like texts, which you can withdraw any time); and legal obligations. You may have the right to access, correct, delete, restrict or object to our use of your data, to data portability, and to complain to your local data protection authority.

How to make a request

• Email hello@fromscratchapps.com or call (402) 810-8446, and tell us what you'd like us to do.
• We'll verify it's you, usually by confirming the email or phone number we have on file. We'll only use verification details to verify you.
• You can use an authorized agent. We may ask for proof they're allowed to act for you and confirm with you directly.
• Requests are free. We may decline or charge a reasonable fee for requests that are clearly unfounded, excessive or repetitive, as the law allows.

11.Children

Our site and services are for businesses and adults. They are not directed to children under 13, and we don't knowingly collect personal information from children under 13. If you think a child has given us information, contact hello@fromscratchapps.com and we'll delete it.

12.Other sites and services

The site links to other services, like our Cal.com booking page and our Google review page. When you use them, their own privacy policies apply, not this one.

13.Changes to this policy

We may update this policy as our business and the law change. We'll post the new version here and change the "Last updated" date. If a change is significant, we'll give more notice, such as an email to clients or a note on the site. If a change would let us use your information in a materially different way, we'll ask for your consent where the law requires it.

14.Contact us

Questions or requests about privacy? We're happy to help.

Back to top ↑