Privacy Policy

Summary

Androsaurus processes project and account information only to perform actions you request. Source code stays on your device and in your GitHub account, and builds run in your GitHub Actions environment. Androsaurus does not include advertising SDKs, analytics, or crash-reporting services, and Pix-kit does not sell personal data.

1. Information Androsaurus handles

Depending on the features you choose, Androsaurus may handle:

• Your GitHub fine-grained personal access token, account identity, repositories, branches, commits, pull requests, workflow runs, and repository content you choose to fetch or change.
• Local project workspaces, edited files, synchronization state, cached APK/AAB artifacts, build reports, logs, screenshots, and Google Play listing metadata.
• Release-signing material including a keystore, key alias, passwords, and certificate fingerprints.
• A Google Play service-account JSON key that you explicitly import for publishing actions.
• Google Play subscription state and the purchase token supplied to the Billing Library while a purchase is validated or acknowledged. Androsaurus does not store or log the purchase token.
• The normalized GitHub owner/repository name selected for free usage and the UTC time of its latest successful build.

2. Local storage and credential protection

Workspaces, settings, cached artifacts, the free-project lock, and the most recently verified Premium state are stored in the app's private storage. Android cloud backup and device-transfer backup are disabled for Androsaurus app data.

GitHub credentials, Google Play publishing credentials, and signing material are protected with Android platform security and app-private storage. The Google Play service-account file is size-limited and validated before it is saved. Exported signing backups are created only when you explicitly request them and should be stored securely.

3. GitHub and GitHub Actions

Androsaurus sends requests to GitHub only for actions you initiate, such as listing or creating repositories, fetching files, committing changes, managing branches or pull requests, configuring Actions secrets, and starting or inspecting builds.

Android builds run in the GitHub Actions environment of the selected repository. Source code, build logs, artifacts, and repository history are then handled under your GitHub account and GitHub's terms and privacy policy. Androsaurus does not operate a separate Pix-kit source-code build server.

4. Google Play publishing

If you configure Google Play publishing, Androsaurus uses the service-account credential you provide to communicate directly with Google Play APIs. The app sends an AAB, Store Listing text, images, and release metadata only when you explicitly prepare a Google Play draft.

Google Play Console declarations, review, testing, and final publication remain under your control.

5. Google Play Billing and subscriptions

Google Play processes payments for Androsaurus Pro. Androsaurus never receives or stores your full card or bank details. The app grants Premium access only when Google Play reports the subscription as purchased; a pending purchase does not unlock Premium.

Active purchases are synchronized automatically with the current Google Play account when Androsaurus opens or returns to the foreground. Initial purchases are acknowledged through Google Play Billing. You can view, change, pause, resubscribe, or cancel through the Manage subscription link, which opens Google Play.

The current release stores a short-lived Premium verification result locally and does not use a Pix-kit subscription backend.

6. Permissions

• Internet: connects to GitHub, GitHub Actions, Google Play Billing, and Google Play publishing APIs.
• Notifications and foreground data sync: keeps user-started fetch, push, build, import, and publishing operations visible while they run.
• Install packages: opens Android's package installer for an APK you explicitly select. Androsaurus never installs an application silently, and Android keeps the final confirmation.
• Document access: uses Android's system picker when you choose files to import or destinations for exported artifacts.

7. Data sharing and third-party services

Androsaurus sends data only to services required for actions you request, principally GitHub, GitHub Actions, Google Play, and Android system services. Pix-kit does not sell or rent this data and does not use it for cross-app advertising.

Those providers process information under their own terms and privacy policies.

8. Retention and deletion

• Disconnecting GitHub removes the saved GitHub token and related account settings from the app.
• Clearing a repository cache removes that local workspace and its cached build artifacts from the device.
• Clearing app data or uninstalling Androsaurus removes app-private settings, local workspaces, the free-project lock, the entitlement cache, and unexported artifacts.
• Temporary build and import files are deleted after the operation.
• Commits, pull requests, GitHub Actions logs and artifacts, exported files, and Google Play records remain with their provider or destination until you delete them there.

9. Children's privacy

Androsaurus is a professional software-development tool and is not directed to children under 13. If you believe a child has provided personal information through the app, contact us so we can help address the issue.

10. Security

Androsaurus uses app-private storage, AndroidKeyStore-backed protection where supported, least-privilege integration guidance, verified workspace snapshots, and explicit confirmations for destructive operations. No system can guarantee absolute security. Protect your device, restrict GitHub tokens to required repositories and permissions, keep signing backups secure, and revoke credentials that may have been exposed.

11. Changes to this policy

This policy may be updated as Androsaurus evolves. Material changes will be published on this page and the effective date above will be updated.

12. Contact

For privacy questions, requests, or concerns, contact:

Developer: Pix-kit
Email: niko@pix-kit.com