Free privacy policy template

A privacy policy tells people what personal information you collect, why you collect it, who you share it with and what rights they have. This template covers the sections most apps and websites need, including the basics of the GDPR and the CCPA. Replace the text in [brackets] and remove anything that doesn't apply to you.

Use this template

Last reviewed September 2026. General information, not legal advice.

Template preview Replace the text in [brackets]

Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how [Company Name] ("we", "us" or "our") collects, uses, shares and protects personal information when you use [App or Website Name] (the "Service"). If you have any questions, contact us at [[email protected]].

1. Information we collect

Information you give us

  • Account details, such as your name, email address and password
  • Content you create, upload or send through the Service
  • Messages you send to our support team
  • Payment details, which are processed by our payment provider [Stripe / Apple / Google] and are not stored by us

Information collected automatically

  • Device and log data, such as IP address, device model, operating system, browser type and app version
  • Usage data, such as the features you use, the pages you visit and the actions you take
  • Approximate location derived from your IP address
  • Information from cookies and similar technologies (see "Cookies and tracking")

Information from third parties

If you sign in with [Apple / Google], we receive your name and email address from that provider. [Remove this section if it does not apply.]

2. How we use information

  • To provide, maintain and improve the Service
  • To create and secure your account
  • To process payments and send receipts
  • To respond to support requests and send service messages
  • To analyze usage and fix problems
  • To send marketing emails if you have agreed to receive them; you can unsubscribe at any time
  • To prevent fraud and abuse and to comply with legal obligations

3. Legal bases for processing (EEA, UK and Switzerland)

We process personal information when it is necessary to perform our contract with you, when we have a legitimate interest that is not overridden by your rights (such as keeping the Service secure), when you have given consent, which you can withdraw at any time, or when the law requires it.

4. How we share information

We do not sell your personal information. We share it only with:

  • Service providers that host, analyze or support the Service for us, such as [hosting provider], [analytics provider] and [email provider], under contracts that limit how they can use the data
  • Authorities, when the law requires it or when it is necessary to protect our rights, our users or others
  • A buyer or successor, if we are involved in a merger, acquisition or sale of assets

5. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences and understand how the Service is used. You can control cookies through your browser settings. [Describe any advertising or cross-app tracking here and explain how users can opt out.]

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your information within [30] days, unless we must keep it longer to meet legal, tax or accounting obligations.

7. Security

We use reasonable technical and organizational measures to protect personal information, such as encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

We are based in [Country] and our service providers may process information in other countries. Where the law requires it, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

9. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal information, to receive a copy of it, to object to or restrict certain processing, and to withdraw your consent. California residents have the right to know, delete and correct their personal information and will not be discriminated against for exercising these rights. To make a request, contact us at [[email protected]]. You also have the right to lodge a complaint with your local data protection authority.

10. Children's privacy

The Service is not directed to children under [13 / 16], and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page, update the date above and, if the changes are significant, notify you in advance.

12. Contact us

[Company Name]
[Street address, City, Country]
[[email protected]]

Who needs a privacy policy?

Almost every app and website does. You need one as soon as you collect any personal information, and that includes email addresses from a sign-up form, analytics identifiers and the IP addresses in your server logs. Laws such as the GDPR in Europe, the CCPA and CalOPPA in California and PIPEDA in Canada require it, and so do the platforms you publish on: Apple and Google both require a privacy policy link for apps in their stores.

How to customize this template

  1. Say who you are. Replace [Company Name], your address and a contact email that someone actually reads.
  2. List what you really collect. Walk through your sign-up form, analytics, crash reporting, payments and support tools. Delete the bullets you don't need and add anything that's missing.
  3. Name your service providers. Your hosting, analytics (for example Google Analytics or Firebase), email and payment providers all receive some personal data.
  4. Set a real retention period. Say how long you keep data after someone closes their account.
  5. Keep the rights that apply to your users. If you serve people in the EU, the UK or California, keep those rights and explain how to use them.
  6. Publish it where people will find it. Link it from your website footer, your sign-up screen and your app store listing.

Frequently asked questions

Is this privacy policy template free to use?

Yes. You can copy it, or edit it in Legiflare and host it on a public link, at no cost.

Is a template enough to comply with the GDPR?

A template gives you the structure, but compliance depends on what you actually do with personal data. Make sure every section describes your real practices, and get legal advice if you handle sensitive data or large volumes of personal information.

Where should I put my privacy policy?

Link it from your website footer and from any screen where you collect personal information. For apps, add the URL in App Store Connect and the Google Play Console, and link to it inside the app.

How often should I update it?

Whenever your data practices change, for example when you add a new analytics tool or feature. Businesses covered by the CCPA must also review and update their privacy policy at least once every 12 months.

More free templates

Terms and conditions template General SaaS terms: accounts, acceptable use, billing, termination. Cookie policy template Explains cookie usage, categories, and opt-out options. Refund policy template Outlines eligibility, timelines, and process for refunds and cancellations. Mutual NDA template Two-way confidentiality terms for sharing business information. EULA template License, restrictions, updates, and liability for downloadable apps.

Need a policy for a specific platform? See the privacy policy generator and app privacy policy hosting.

Host this template on a permanent link

Edit it in Legiflare, publish it, and paste the link into your site or app store listing. Free.

Create a document Browse templates