GDPR absolutely applies to apps, it applies to all manner of electronic and non-electronic means of data collection and processing.

The G stands for General, and the EU means it.