# Regulatory compliance

## Data and Privacy protection

An overview of data and privacy protection policies that Expo offers.

At Expo, our team's aim is to provide developers with tools and services that enable them to create robust and high-quality apps. Our focus is not on gathering huge amounts of data. We only collect a minimal amount of data that aids us in making informed decisions about our products and services. Our ultimate goal is to provide excellent user experiences.
It's crucial that Expo is transparent with its users about the data it collects, how it does so, and why. This is particularly important as more laws, policies, and frameworks are being introduced to regulate how companies handle user data. As a developer, you need to be aware of how the tools you use treat your end users' data to ensure that you comply with relevant laws, frameworks, or guidelines in your industry.
To accomplish this, we provide not only our [privacy policy](https://expo.dev/privacy), (which is most useful if you're a lawyer) and also our [privacy explained page](https://expo.dev/privacy-explained). This page lays out exactly what data Expo collects, both from our developers and your end users, and why we collect it. In all scenarios regarding our users' data, Expo is GDPR-, CCPA-, and Data Privacy Framework-compliant.
Find out more about:


## GDPR compliance and Expo

Learn about how applications built with Expo can be GDPR compliant.

## Are apps built with Expo GDPR compliant?
**They can be! You can build GDPR compliant apps with Expo if you follow the requirements.**
While Expo ensures the proper handling and processing of developer data and end-user data, we cannot guarantee that the developers who build apps with Expo follow similar data privacy practices themselves.


## HIPAA compliance and Expo

Learn about how applications built with Expo can be HIPAA compliant.

## Are apps built with Expo HIPAA compliant?
**They can be! You can build HIPAA compliant apps with Expo if you follow the requirements.**
Expo doesn't collect any individually identifiable health data, and you can see all the data that Expo collects on [our privacy explained page](https://expo.dev/privacy-explained). That being said, you are ultimately in control of the data you collect from your users, so we cannot guarantee that all apps built with Expo are HIPAA compliant, as in the end, it is up to you as an individual application developer. But there should be no compliance issues with using Expo.