Privacy Policy

1.Data We Collect and Process

We limit processing strictly to information essential to run secure app signing and temporary transfers:

• Authentication Data: Email address, password hashes, and session identifiers.
• Signing Metadata: Uploaded package names, binary bundle identifiers, file hashes, and target platform parameters.
• E2EE Transfer Keying: Ephemeral credentials necessary to facilitate peer signaling and secure R2 storage uploads.

2.End-to-End Encryption (E2EE) and Storage Rules

All files shared using the Secure Share feature are encrypted client-side in your web browser prior to transit. The decryption keys are derived locally from your memorable PIN and never shared with our servers. Cloud-stored files are purged automatically from our Cloudflare R2 vaults upon expiration (30 minutes) and cannot be recovered thereafter.

3.Third-Party Advertising & Cookie Disclosures

We use third-party advertising companies, such as **Google AdSense**, to serve advertisements when you visit our website. These companies may use cookies, web beacons, and device identifiers to collect non-personally identifiable information during your visits.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our sites and/or other sites on the Internet.
• Users may opt out of personalized advertising by visiting Google Ad Settings or aboutads.info.

For detailed disclosures on how Google uses data when you use partner sites or apps, please review How Google uses information from sites or apps that use our services.

4.Compliance with Indian IT Act, 2000 (Section 43A)

In compliance with Section 43A of the IT Act 2000, we maintain reasonable security practices and procedures commensurate with the nature of the data stored. Ephemeral developer keys, certificates, and app packages are stored in an isolated database vault with strict access tokens to prevent unauthorized modification or exposure.

5.GDPR Compliance & EU User Rights

If you are a resident of the European Union, you are entitled to specific rights concerning your Personal Data under the GDPR:

• Right to Access: Request summaries of authentication records or account profile metrics we hold.
• Right to Rectification: Correct inaccurate or outdated account registration fields.
• Right to Erasure (Right to be Forgotten): Terminate your account profile, immediately purging credentials from our systems.
• Right to Portability: Download a machine-readable archive containing your developer profiles.

To exercise any of these GDPR rights, please contact us directly at [email protected].

6.Grievance Officer and Contact Points

Under the IT Act 2000, any complaints, concerns, or queries regarding data security and handling practices should be addressed to our Grievance Officer: