# VERDE WAHHE APP (ВЕРДЕ ВАХЕ АПП)

> VERDE WAHHE APP (LLC VERDE WAHHE, Ukraine) is an independent company for digital product audits, development and support. We review mobile apps and websites, prepare them for the App Store and Google Play, and advise on intellectual property, personal data, servers, domains and SEO for AI search.

Legal entity: LLC VERDE WAHHE / ТОВ «ВЕРДЕ ВАХЕ», Ukraine. Founder and lead reviewer: Iva-Karina Zaiko (Іва-Каріна Зайко), Legal professional with a master’s degree, intellectual property specialist.
We work with clients worldwide, except the Russian Federation and the Republic of Belarus. Working languages: Ukrainian, English, Latvian.

## Contacts
- Email: info@verdewahheapp.com
- Ukraine: +380 97 137 88 98 (phone, Telegram, WhatsApp)
- Latvia: +371 26 423 182 (phone, Telegram, WhatsApp)
- Privacy requests: privacy@verdewahheapp.com
- Legal notices: legal@verdewahheapp.com
- Client support: support@verdewahheapp.com
- Security reports: security@verdewahheapp.com

## What we do
### Audit & assurance
- Digital product audit: A comprehensive review of an app, website or platform: logic, UX, security, data and compliance
- AI-built product audit: Review of projects built with Lovable, Bolt, Replit, Cursor and other tools before launch
- Digital product due diligence: Independent assessment for investors, acquirers and companies replacing a contractor
- Intellectual property & privacy: Rights to code, design and content, licences, trademarks, GDPR
- UX, product & monetisation: User journey, onboarding, pricing, paywalls and conversion

### Strategy & consulting
- Target audience & market analysis: Who your customer is, what they need, what competitors do and where your advantage lies
- Product strategy & specification: Product structure, feature priorities, budget and launch plan
- Brand identity & colour palette: Colours, typefaces and visual language chosen for your audience and positioning
- Servers, hosting & domains: Choosing infrastructure, registering the domain in your name, email, SSL and backups
- Contractor selection & acceptance: Assessing proposals and estimates, quality control, checking the handover of rights and access

### Development
- Website development: Corporate websites, landing pages and catalogues with responsive design and SEO from day one
- Mobile app development: iOS and Android apps built with store requirements in mind
- Web platforms & SaaS: Client portals, marketplaces and internal business systems
- MVP to test an idea: A minimum version of the product for first users and investors
- Improving existing products: Fixing, modernising or relaunching projects built by other teams or with AI

### Launch & support
- App Store & Google Play publishing: Developer accounts, metadata, privacy declarations, submission and review support
- Rejection analysis & resubmission: Analysing rejection reasons, a fix plan and a response to the review team
- SEO & AI search optimisation: Visibility in Google, ChatGPT, Gemini and Perplexity: structured data, content, llms.txt
- Technical support & updates: Updates for new iOS and Android versions, store policy changes and bug fixes
- Monitoring & security: Uptime monitoring, backups, account and data protection

## How we work
1. Discovery: A confidential call, NDA, goals, markets and timelines
2. Access: We receive test builds, accounts and documents under controlled access
3. Review: Assessment against our methodology: 40+ checkpoints across 10 areas
4. Report: A document with evidence, priorities, business impact and specific actions
5. Support: We help fix the issues, re-review and guide you to release

## Standards we rely on
- Apple App Store Review Guidelines
- Google Play Developer Program Policies
- WCAG 2.2
- OWASP MASVS
- OWASP API Security Top 10
- GDPR (Regulation (EU) 2016/679)
- European Accessibility Act
- EU AI Act

## Frequently asked questions
- **I built an app in Lovable or Bolt. Can I publish it to the App Store right away?** Usually not. These tools produce a web app; for the store it has to be packaged in a native shell, and Apple rejects apps that are merely a wrapper around a website without added value (guideline 4.2). We assess whether the functionality is sufficient and suggest the shortest path.
- **The app works. Why have it reviewed?** An interface that opens doesn’t mean the data is protected. In AI-generated products we regularly see open databases, API keys in the code, missing access controls and payment errors. Users don’t notice these problems until there is a data leak or a server bill.
- **My AI or server bill suddenly multiplied. What happened?** The most common causes are an exposed API key used by third parties, requests without limits or an endless loop in the code. We find the source, help revoke the keys and set up limits and spending alerts.
- **Should I keep developing a vibe-coded product or rebuild it?** It depends on the architecture, security and scaling plans. After the audit you get a clear recommendation: what to keep, what to fix and what is cheaper to rebuild, with the risks of each option.
- **I vibe-coded an app, but it doesn’t work as it should. Can you finish it or rebuild it?** Yes. First we briefly assess the project and show which is cheaper: fixing the existing code or building a reliable version from scratch. Either way, we keep your idea, design and data and take the product through to publication.
- **Can I take my code out of Lovable or Bolt and keep working on it?** Most such platforms let you export the code or sync it with GitHub. We check whether the code can be maintained outside the platform and move the project to your infrastructure, so you don’t depend on a single service.
- **Apple rejected my app. What should I do?** Don’t resubmit blindly — every failed attempt costs time. Send us Apple’s message and a test build. We identify which guideline was breached, prepare a fix plan and the reply for the Resolution Center.
- **Google Play requires closed testing with 12 testers. What is that?** For new personal developer accounts, Google requires a closed test with at least 12 testers for 14 consecutive days before production release. We help organise the test or assess whether an organisation account makes more sense.
- **My app disappeared from the App Store or Google Play in the EU. Why?** A common reason is a missing trader status declaration, required by the EU Digital Services Act (DSA). Apps can also be removed because of an outdated SDK, policy violations or out-of-date privacy declarations. We check the account and help restore the listing.
- **Why do the stores require account deletion?** Both Apple and Google require that if users can create an account in the app, they must be able to delete it. Google also requires a deletion link outside the app. A missing deletion option is one of the most common rejection reasons.
- **Do you guarantee App Store and Google Play approval?** No. Apple and Google make that decision. We identify likely rejection reasons before submission and help resolve them, which significantly reduces the risk.
- **Google Play suspended my developer account. What should I do?** Read the message carefully and don’t create a new account right away: Google may link it to the suspended one and suspend it too. You can file an appeal through the official procedure. We help identify the reason and prepare the appeal.
- **Users leave low ratings because of crashes. How do I fix this?** Set up crash reporting, find the most frequent errors and fix them in order of impact on users. Replying to reviews helps too. We run a stability audit and build a fix plan.
- **My developer stopped responding. Where do I start?** List everything you have: access to the App Store and Google Play accounts, the code repository, domain, hosting, databases and payment services. We help take stock, recover access through official procedures and move the product into ongoing care.
- **My app is published under the developer’s account. How do I move it to my company?** Both Apple and Google offer an official app transfer procedure that keeps reviews and users. It requires cooperation from the current account holder. We prepare the transfer plan and make sure nothing is lost.
- **What happens if nobody updates the app?** Apple and Google raise their technical requirements every year. An app without updates gradually stops working properly on new iOS and Android versions, and Google Play limits the availability of apps with an outdated target API level. A care subscription solves this.
- **The contractor says everything is done. How do I check before paying?** Order an independent acceptance review. We compare the result with the specification, check quality, security, the availability of code and documentation, and the handover of all access. You get a reasoned list of issues before signing off.
- **Who owns the code written by a freelancer?** The contract decides. Without a clear clause transferring the economic rights, the rights may stay with the author, and you would be using the product without guarantees. We review the contracts and suggest how to close the gap.
- **Are AI-generated texts and images protected by copyright?** In the EU and the US, output created without human creative input is generally not protected by copyright. Ukraine has introduced a separate sui generis right for such objects. The terms of the AI service you used also matter. We assess the risks for your content and brand.
- **Why check the app name before publishing?** If the name resembles a registered trademark, the owner can file a complaint and the store may remove the app or require a rename. We check the name in the Ukrainian, Latvian and EU registers and help register your own trademark if needed.
- **Can I use free libraries, fonts and photos?** Yes, but free does not mean unconditional. Some open-source licences require you to publish your own code, some fonts can’t be embedded in apps, and some photos can’t be used commercially. We compile a register of components and their licences.
- **Do I need a privacy policy if I don’t collect personal data?** Almost always, yes. Email addresses, IP addresses, analytics, advertising identifiers and data collected by third-party SDKs are already personal data. Both stores also require a privacy policy link for every app.
- **My product stores data in Firebase or Supabase. Is that GDPR-compliant?** The service itself can be compliant, but you are responsible for the configuration: storage region, access rules, the data processing agreement, transfers outside the EU and retention periods. We check each of these.
- **What is the European Accessibility Act and does it apply to me?** Since 28 June 2025, a range of digital products and services in the EU, including e-commerce and banking, must be accessible to people with disabilities. Microenterprises providing services are partly exempt. We determine whether your product is in scope and check its accessibility.

## Pages
- [Ukrainian](https://verdewahheapp.com/): ВЕРДЕ ВАХЕ АПП (ТОВ «ВЕРДЕ ВАХЕ») — незалежна експертиза та аудит мобільних застосунків і сайтів, публікація в App Store і Google Play, розробка застосунків і сайтів, аналіз цільової аудиторії, SEO для ШІ та повний супровід. Україна, Латвія, ЄС
- [English](https://verdewahheapp.com/en/): VERDE WAHHE APP (LLC VERDE WAHHE) provides independent mobile app and website reviews, App Store and Google Play publishing, app and website development, target audience analysis, SEO for AI search and full support. Ukraine, Latvia, EU and worldwide
- [Latvian](https://verdewahheapp.com/lv/): VERDE WAHHE APP (LLC VERDE WAHHE) — neatkarīga mobilo lietotņu un vietņu ekspertīze, publicēšana App Store un Google Play, lietotņu un vietņu izstrāde, mērķauditorijas analīze, SEO MI meklēšanai un pilns atbalsts. Latvija, Ukraina, ES