Last updated 31 August 2026.
UI Rules is a product of AHO Pty Ltd, a company registered in Australia and trading as UI Rules. We are the data controller for the information described here.
We are bound by the Australian Privacy Principles. If you are in the European Union or the United Kingdom, we also handle your information in line with the GDPR and UK GDPR, and the rights below apply to you.
Where the GDPR asks us to name a legal basis: we process your account information, content, and agent conversations to provide the service you signed up for, technical logs under our legitimate interest in running and improving it, and marketing email only with your consent.
You can sign in with Google or with an email address and password. From Google we receive your name and email address. If you sign up with email, we store your email address, a hashed version of your password, and the short-lived codes we send to verify it is you. We use these to create your account, identify you, and contact you about the service.
The rules, design tokens, notes, brands, and project data you create in UI Rules. This is yours. We store it and serve it back to you and to the AI tools you choose to connect. We do not sell it, and we do not use it to train AI models.
The in-app agent keeps a transcript of each conversation, including any screenshots you paste into the chat, stored on our servers so you can pick a conversation back up. To generate each reply, the conversation so far, screenshots included, is sent to Anthropic, the AI provider that runs the model on our behalf. You can delete a conversation in the app at any time. We do not use your conversations to train AI models, and we do not permit Anthropic to.
Records of how the service is used: API calls, response sizes, timestamps, and the identifiers of the keys and accounts involved. We use these to operate the service, diagnose faults, and understand load. We keep them for a limited period and then delete them.
If you join the waitlist, we collect your email address. If you write to us through the contact form, we collect your name, email address, and whatever you put in the message. We use these to send you what you asked for and to reply.
Two more small ones. If you invite a teammate, we process the email address you enter so we can deliver the invitation, before that person has an account of their own. And if you send feedback from inside the app, your name, email address, and message reach us by email, through Resend.
Payments are processed by Polar. We never see or store your card details. We receive only what we need to manage your subscription, such as your plan, its status, and your billing history.
We use a small number of outside services to run UI Rules. Each one sees only what it needs to do its job.
| Service | What it does | Where |
|---|---|---|
| Railway | Application hosting | United States |
| Supabase | Database hosting | United States |
| Vercel | Website and app hosting | United States, global edge network |
| Sign-in, and website and in-app analytics | United States | |
| Anthropic | Processes content you send to the in-app AI agent, on our behalf | United States |
| Polar | Payments and subscription billing | United States |
| Resend | Transactional email, such as sign-in and account notices | United States |
| MailerLite | Waitlist and marketing email | European Union |
We do not sell your personal information, and we do not share it with anyone for their own marketing.
UI Rules is hosted in the United States, so your information is stored and processed outside Australia, and outside the European Union and United Kingdom. We take reasonable steps to make sure the services we use protect it to a comparable standard. By using UI Rules you are aware that your information will be handled overseas.
We ask before we measure anything. The first time you visit, a banner offers you the choice between analytics cookies and none. Nothing analytics-related loads until you accept — no Google tag, no request to Google, and no analytics cookie. If you reject, it stays that way.
If you accept, we use Google Analytics to understand how the website is used, which pages people read, and where visitors come from. It sets cookies in your browser and collects your IP address, approximate location, and details about your device. Google processes this analytics data for us.
Within the signed-in app, we associate analytics events with pseudonymous user and organization identifiers so we can understand product adoption and usage by account. These identifiers do not contain names, email addresses, or organization names, but they allow activity to be connected across sessions.
You can change your mind at any time, and withdrawing is as easy as granting. Cookie settings at the bottom of any page reopens the same choice; in the app it lives under Preferences, in the Privacy section. Your choice is remembered in this browser and covers both this site and the app. You can also opt out with Google’s browser add-on, or by blocking cookies in your browser.
Separately, we store a small cookie recording how you first arrived — the search or link that referred you — so a waitlist signup can be attributed. The site and the app also set the cookies needed to keep you signed in and remember your preferences. Those cannot be turned off without breaking the service.
If you join the waitlist or subscribe to updates, we send you email through MailerLite. Every one of those emails has an unsubscribe link, and unsubscribing takes effect straight away. Email about your account, such as sign-in and billing notices, is part of the service and is sent separately.
You can ask us to:
Email info@uirules.com and we will respond within 30 days. We may need to confirm who you are first.
If you are not happy with how we have handled a request, you can complain to the Office of the Australian Information Commissioner. In the EU or UK you can complain to your local data protection authority.
Email info@uirules.com to ask us to delete your account. Deletion covers your account information, the content you created, and your AI agent conversations.
Some records stay behind for a while after that: backups, which are overwritten on their own schedule, and billing records, which we are required to keep for tax and accounting purposes.
Your data is encrypted in transit, and access to it is limited to the people who need it to run the service. No system is perfectly secure, so we do not promise more than that. If a breach ever puts your information at risk, we will tell you, and the regulator, as the law requires.
UI Rules is not intended for anyone under 16, and we do not knowingly collect information from children.
If we change how we handle your information we will update this page and change the date at the top. If the change is significant, we will tell you by email.
Questions about this policy, or about your information, go to info@uirules.com. You can also reach us through our contact page.