FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Frameworks

Ionic

UnclassifiedOfficial website

Ionic is an open-source UI framework for building cross-platform mobile, web, and desktop applications using web technologies (HTML, CSS, JavaScript). It is a developer tool, not a data processor or tracking service. GDPR obligations arise from the application built with Ionic and the infrastructure where it is deployed, not from the framework itself.

Block Ionic until consentScan my site
Overview

What does Ionic do?

What is Ionic?

Ionic is an open-source framework for building high-quality cross-platform applications for iOS, Android, and the web from a single codebase. It provides a library of UI components optimised for mobile interfaces and integrates with Angular, React, and Vue. Ionic-built apps can be distributed as native mobile apps via Capacitor or as Progressive Web Apps. As an open-source framework, Ionic itself does not collect data or act as a data processor.

How does GDPR apply to Ionic apps?

GDPR applies to the data processed by the application built with Ionic, not to the framework itself. The organisation deploying the Ionic app is the data controller. Mobile apps built with Ionic that process EU user data must comply with GDPR regardless of the framework used. Key considerations include: where user data is stored, which analytics or push notification SDKs are integrated, how consent is obtained for data collection, and whether the app is distributed via app stores that have their own data policies.

Mobile app-specific GDPR considerations

Ionic apps face specific GDPR considerations beyond standard web apps: device permissions (camera, microphone, location, contacts) require explicit user consent via both the OS permission system and GDPR consent; push notification identifiers are personal data requiring consent; analytics SDKs like Firebase or Mixpanel integrated into Ionic apps have their own GDPR compliance requirements; and local storage or SQLite databases on the device may contain personal data that must be managed within the app's data lifecycle.

Capacitor and native platform data

When Ionic apps are deployed as native apps via Capacitor, Apple App Store and Google Play Store requirements apply alongside GDPR. Both app stores require privacy policy disclosures, and Apple's App Tracking Transparency framework requires explicit consent before tracking users across apps. These platform requirements are compatible with GDPR but add additional consent layers.

Practical compliance steps

Implement in-app consent management for analytics and tracking SDKs. Request device permissions contextually with explanations. Use EU-hosted backend infrastructure for user data. Sign DPAs with all third-party SDKs integrated into the app. Implement data subject rights within the app (access, deletion, export). Configure data retention and automatic deletion for inactive accounts.

Compliance

Ionic and the GDPR

Legal basis
Ionic is a framework, not a data processor. GDPR obligations arise from the app built with Ionic and its deployment infrastructure.
Risk level
low
Applicable regulations
GDPR compliance is the responsibility of the application developer, not the Ionic framework

Impact assessment (DPIA)

A DPIA is not required for Ionic itself. It may be required for specific app features processing large-scale personal data, biometric data, location data, or health information.

Sample text for your banner

This application is built using Ionic, an open-source cross-platform framework. Data collection and processing within this app are described in our privacy policy.
Cookies and trackers

What Ionic sets and contacts

Tracking method
Open-source mobile and web application framework, no client-side tracking by default
Server location
Self-hosted (deployer's infrastructure)
Cookieless mode available
Yes

Cookies set (1)

NameTypeDurationPurpose
ionic_sessionsessionSessionStrictly necessary session cookie used for user authentication in Ionic-built applications

Third-party domains contacted (2)

  • ionicframework.com
  • cdn.ionicframework.com
Questions

Frequently asked questions about Ionic

Can't find your question? Write to us, we answer fast.

Is Ionic itself subject to GDPR?

No. Ionic is an open-source framework. GDPR applies to the application built with Ionic and the personal data it processes, not to the framework code itself.

Do Ionic apps require a privacy policy?

Yes, but because of the app's data processing, not because of Ionic itself. Any Ionic app that processes EU user personal data requires a GDPR-compliant privacy policy describing what data is collected, the legal basis, retention periods, and user rights.

What device permissions in Ionic apps require consent?

Camera, microphone, geolocation, contacts, and biometric authentication all require explicit user consent via both the OS permission system and, under GDPR, a documented lawful basis. Push notification opt-in is also required as notification identifiers are personal data.

Do Ionic apps transfer data outside the EU?

Only if the developer configures them to. Ionic itself does not transfer data. Transfer obligations depend on the backend APIs, analytics SDKs, and cloud services the developer integrates into the Ionic app.

Do I need a DPIA for my Ionic app?

Not for Ionic itself. DPIAs may be required for specific app features that process health data, biometric data, or location data at large scale, or that make automated decisions significantly affecting users.

How do I implement GDPR consent in an Ionic app?

Implement an in-app consent flow that appears before any analytics or tracking SDKs initialise. Use Ionic's lifecycle hooks to check for consent before loading data collection services. Store consent records locally and on your backend. Provide settings screens where users can review and withdraw consent.

Where should I host the backend for my Ionic app?

EU-based cloud infrastructure (AWS Frankfurt, OVHcloud, Hetzner) ensures EU data residency. Sign a DPA with your cloud provider. Avoid non-EU database replicas for personal data. Configure data residency at the infrastructure level.

How do I handle data subject rights in an Ionic app?

Build data subject rights functionality into the app: a data export feature, an account deletion flow, and a data access view. For deletion requests, implement cascading deletion across all backend systems storing the user's data. Log all data subject requests with timestamps for compliance records.

Same category

More services: Frameworks

See the whole category

PubNub

PubNub is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. PubNub supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, PubNub ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

Simple.css

Simple.css is a CSS framework providing pre-built styles, components, and utility classes for building responsive web interfaces. It offers grid systems, typography scales, and design tokens for consistent styling. Simple.css supports dark mode, custom theming, and responsive breakpoints. With modular architecture and optimized file sizes, Simple.css helps developers create polished, professional web designs while maintaining fast page load speeds and excellent user experience.

Frameworks

Mojolicious

Mojolicious is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Mojolicious integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Mojolicious helps organizations maintain robust websites that meet user expectations and technical requirements.

Frameworks

Svelte

Svelte is a JavaScript framework designed for building fast, interactive, and scalable web applications. It provides component-based architecture, reactive data binding, and efficient DOM rendering. Svelte supports server-side rendering, static site generation, and progressive web apps. With a rich ecosystem of plugins and developer tools, Svelte accelerates frontend development and delivers exceptional user experiences with optimized performance and SEO-friendly output.

Frameworks

Gatsby

Gatsby is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Gatsby is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Gatsby offers reliable solutions that scale with organizational needs and evolving web standards.

Frameworks

Godot

Godot is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Godot is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Godot offers reliable solutions that scale with organizational needs and evolving web standards.

Frameworks

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site