Unify Applications
Logo
App Configuration

App Configuration

Logo

11 mins READ

Builder Settings Panel

The Builder Settings panel is accessed from within the Application Builder — typically via the gear icon or the Settings option in the builder's top bar. It is distinct from the Settings tab on the app's management screen in the Applications Manager, which governs access control and governance.

Screenshot_2026-10-19_at_1.21.14_PM_1.png
Screenshot_2026-10-19_at_1.21.14_PM_1.png

Note: Builder Settings vs the Settings tab: Builder Settings (inside the builder) controls the app's identity, design, code, integrations and security. The Settings tab in the Applications Manager controls who can access the app (Governance, Privacy Settings, Password Policy). Content Security Policy and Device Permissions appear in both places, under Security — see App Settings & Privacy.

The panel is searchable — type in the search field at the top to jump directly to any setting by name. Settings are organised into the following top-level sections:

Section

Available For

Key Settings

General

All app types

App name, URL, ID, logo, symbol, favicon, splash screen (mobile)

Design System

All app types

Theme selection, colour customisation, typography, border styles, custom icons

Development

All app types (some subsections mobile/web only)

Navigation, launcher (Copilot), custom code, App Build Config (mobile, developer mode only)

Security

Apps (not modules)

Content Security Policy, Device Permissions (also in the app's Settings tab → Security)

Advanced Settings

All app types (some subsections mobile only)

App variants, analytics, realtime events, location tracking, file management, developer panels

Mobile

Mobile apps only

Secure View Mode

Apps & Integrations

Apps only, not modules (individual integrations vary by platform)

UnifyApps Chat, Ozonetel, Pusher, Microsoft Clarity, UAE Pass, Razorpay, CleverTap, Yellow.ai

General

The General section covers the app's core identity and visual brand assets.

Identity

Field

Description

Notes

Name

The display name of the application, shown in the Applications Manager, browser title bar, and app header.

Changing the name does not affect the App URL.

App URL

The app's address, set from the sub-domain (or path) chosen when the app was created.

Read-only. Click to copy. The sub-domain or path can't be changed after creation.

App ID

The system-generated unique identifier for this application.

Read-only. Click the copy icon to copy it to the clipboard.

Brand Assets

Brand assets are visual identifiers displayed in the app's navigation header, browser tab, and (for mobile) on device home screens and loading screens.

  • Logo — Full-width wordmark or logotype shown in the app's primary navigation bar. Use an image with a transparent background. Size: 252×32 px. Accepts SVG, PNG, JPG or WEBP.

  • Symbol — Icon-only version of the brand mark, used in compact navigation states (collapsed sidebar) or as a standalone icon. Size: 32×32 px. Accepts SVG, PNG, JPG or WEBP.

  • Fav Icon — The icon displayed in the browser tab and bookmarks bar. Size: 16×16 px. Accepts PNG, SVG or ICO. Displayed small, so avoid complex detail.

Mobile apps have richer branding options including Android and iOS-specific assets (launcher icons, adaptive icon layers, notification icon and colour), configured in General → Brand Assets — mobile apps show extra fields there.

Splash Screen (Mobile)

The splash screen is the loading screen displayed while a mobile app initialises. You can configure:

  • Light logo — Logo to display when the system is in light mode.

  • Dark logo — Logo to display when the system is in dark mode.

  • Background colour — The solid background fill behind the logo.

  • Image fit — How the logo image is scaled within the splash screen bounds (contain, cover, fill, etc.).

Design System

The Design System section controls the visual language applied across all components in the app.

  • Theme — Pick a base theme. Themes define a complete set of colour tokens, typography scales, and border-radius presets. The same theme picker available at app creation is accessible here, with the same filter options (All / Light / Dark / Both / Recent / Presets).

  • Colors — Override individual colour tokens from the selected theme — primary, secondary, surface, background, error, warning, success, and semantic variants.

  • Typography — Set font family, weights, and size scale for headings, body text, labels, and captions.

  • Border Styles — Configure default border radius and border width used by components such as cards, inputs, and buttons.

  • Custom Icons — Upload SVG icon sets to make them available in the icon picker throughout the builder. Custom icons are scoped to the app.

Development

The Development section contains settings that control navigation, the Copilot launcher and custom scripting. For mobile apps in developer mode, it also shows App Build Config (Developer Only).

Configure the app's navigation menu — the primary sidebar or top-bar menu that links to pages within the app.

  • Content — Add, remove, reorder, and nest menu items. Each item links to a page, an external URL, or a custom action.

  • Appearance — Choose the navigation style (sidebar, top bar, or bottom bar for mobile), set icon display options, and control header/footer slots.

Launcher (Copilot Apps)

For Copilot app types, the Launcher subsection controls the floating chat button that appears on the host page where the Copilot is embedded.

  • Text — Label displayed on or beside the launcher button.

  • Icon — The icon or avatar shown on the launcher button.

  • Position — Where on the host page the launcher appears (bottom-right, bottom-left, etc.).

  • Events — Actions triggered when the launcher is opened, closed, or first rendered.

Custom Code

Inject arbitrary HTML or JavaScript into the app's document.

  • Head Code — Injected into the <head> of the rendered page. Use for third-party analytics scripts, meta tags, font preloads, or CSS custom properties.

  • Footer Code — Injected just before the closing </body> tag. Use for deferred scripts, chat widgets, or initialisation code that must run after the DOM is ready.

Web apps also have an HTML Attributes group in this panel for adding attributes to the app's container element. On mobile apps, custom code support may be limited to the web-view layer — verify compatibility with your target mobile platform.

Advanced Settings

The Advanced Settings section holds app variants, analytics, realtime events, location tracking, file management and the developer-only panels.

App Variants (Mobile)

For mobile apps, you can define named variants of the app — for example, a Primary consumer-facing variant and a Secondary internal-tools variant built from the same application record but distributed separately. Variants can have different build configurations, icons, and splash screens.

Analytics

  • Enable Analytics — Toggle to start collecting page view, component interaction, and session data. Required for the Insights tab to appear in the Applications Manager.

  • Custom events — Define named custom events that your page actions can fire. Custom events appear in the Insights dashboard alongside automatically collected events, allowing you to track app-specific interactions (e.g., "Form Submitted", "Report Exported").

Realtime Events

Enable real-time data synchronisation across all active sessions of the app using named topics. When one user's action triggers a topic event, all other users with the app open receive the update without needing to refresh.

  • Define topic names and the payload shape for each topic.

  • Wire topics to actions and component bindings in the builder.

Note: Realtime Events is not available for module app types.

File Management

Initial file visibility — Set the default visibility applied to files uploaded through file-upload components. The default is Restricted. Options:

  • Only me — Accessible to the uploading user only.

  • Only this app — Accessible to users of this app.

  • Restricted — Accessible to all authenticated users.

  • Public — Accessible to anyone.

Note: Setting the default visibility to Public means uploaded files are readable by anyone with the file URL — including people outside your organisation. Choose this setting carefully and only when the uploaded content is intentionally public.

Location Tracking

Enable the browser or device location API for this app. When enabled, page actions and components can request the user's current coordinates. Users are prompted for permission by the browser or OS before any location data is accessed.

Developer Panels (Dev Mode Only)

Two additional subsections appear only when the builder is in developer mode:

  • Theme (Developer only) — Exposes low-level design token overrides not available in the standard Design System UI.

  • Developer Options — Debug and diagnostic settings, including verbose logging and experimental feature flags.

Security

The Security section is available for apps (not modules).

Content Security Policy

Restrict what this app may load from elsewhere, and who may embed it. Turn on Enable Content Security Policy, then add URLs under:

  • Allowed sources — the sites this app may load content from. With no sources, the app can only load from itself.

  • Who can embed this app — the sites allowed to embed this app. With no sites, nobody can embed it.

Without a policy, the app can load from anywhere and be embedded by anyone. The same policy is also shown in the app's Settings tab → Security → Content Security Policy, where the two lists are labelled Resource Control and Frame-ancestors. See App Settings & Privacy.

Device Permissions

Choose what this app, and the sites it embeds, may use in a web browser — such as the camera, microphone and location. Mobile app builds ask the device for permission instead and ignore this setting.

Mobile

The Mobile section is available for mobile apps only and holds Secure View Mode. Turn on Enable Protection to block screenshots and screen recordings: a privacy screen appears when users try to capture the screen or switch apps. It applies to every page of the app. For the privacy-screen options and platform differences, see Mobile Security.

Apps & Integrations

Connect the app to third-party services and embedded assistants. Each integration is toggled independently; enabling one does not affect others.

Integration

Platform

Key Fields / Purpose

UnifyApps Chat

Web

Embed a Copilot assistant into this app. Requires an existing Copilot app to be selected as the source.

Ozonetel

Web

Integrate the Ozonetel cloud telephony widget for click-to-call and inbound call handling within the app.

Pusher

Web

Real-time messaging via the Pusher pub/sub service. Fields: Enable toggle, App key, Cluster, Auth endpoint, channel definitions, event definitions.

Microsoft Clarity

Mobile

Session recording and heatmap analytics for mobile apps. Requires a Clarity Project ID.

UAE Pass

Mobile

UAE national digital identity authentication. Configured with credentials from the UAE Pass developer portal.

Razorpay

Mobile

Payment gateway integration for in-app purchases. Field: Key ID (from your Razorpay dashboard).

CleverTap

Mobile

Mobile analytics, push notification, and engagement platform. Field: Account ID.

Yellow.ai

Mobile

Embed a Yellow.ai conversational AI bot in the mobile app. See Yellow.ai Configuration below.

Yellow.ai Configuration

Yellow.ai embeds a Yellow.ai chatbot in your mobile app. Open Settings → Apps & Integrations → Yellow.ai, turn on Enable Yellow.ai, and paste your Bot ID from the Yellow.ai dashboard. Optionally set a Bot name, a Bot icon, and User context — key–value pairs, bound to the signed-in user, that the bot receives when the chat opens. The builder saves your changes automatically; publish the app to apply them.

Turning Yellow.ai on doesn't add a chat launcher. Add the Control Yellow.ai action to a button or another interaction to open or close the chat. For the full setup and the action's options, see Control Yellow.ai Action.

FAQs

How do I configure a Content Security Policy (CSP) for my app?

Open Builder Settings → Security → Content Security Policy (or the app's Settings tab → Security → Content Security Policy) and turn on Enable Content Security Policy. Then add URLs under Allowed sources (what the app may load from elsewhere) and Who can embed this app (which sites may embed it in an iframe). In the Settings tab, these lists are labelled Resource Control and Frame-ancestors. Without a policy, the app can load from anywhere and be embedded by anyone.

Can I use a custom domain for my published app?

Custom domain support is a platform or workspace-level configuration, not a per-app Builder Settings option. The App URL in Builder Settings → General is read-only: it shows the app's address, set from the sub-domain (or path) chosen when the app was created. Mapping a fully custom external domain (for example, app.yourcompany.com) requires environment-level DNS and SSL configuration. Contact your workspace administrator or the UnifyApps support team to set up a custom domain.

How do I white-label or brand my app with my company's logo and colors?

Branding is configured in Builder Settings under two sections: General (for the logo, symbol, and favicon that appear in the navigation bar and browser tab) and Design System (for the color palette, typography, and border styles applied across all components). Upload your logo and symbol files in General → Brand Assets, then use Design System → Colors to override the theme's color tokens to match your brand palette.

Does UnifyApps Applications support environment variables or secrets?

App-level configuration values that need to differ between environments are typically managed through the integration configuration and data source settings rather than a dedicated environment variables panel. Sensitive credentials (such as API keys for Razorpay or Pusher) are entered in the relevant Apps and Integrations section of Builder Settings and are masked after saving. For advanced secrets management, contact your workspace administrator.

Can I inject custom JavaScript or third-party scripts into my app?

Yes. The Custom Code subsection in Builder Settings → Development lets you inject arbitrary HTML or JavaScript into either the document head (for analytics scripts, font preloads, or meta tags) or just before the closing body tag (for deferred scripts or chat widget initializations). Code injected here is applied globally across all pages of the published app. On mobile apps, custom code support is limited to the web-view layer — verify compatibility with your target mobile platform before use.