Repo Tracker privacy policy
Effective 2 October 2026
Repo Tracker is an Android app for cloning, syncing and browsing git repositories from your own SSH server, GitHub, GitLab and Gitea or Forgejo. This policy explains what data the app handles, where it goes, and how to delete it. "We" means the developer of Repo Tracker.
- Your repositories, access tokens, passwords and SSH keys stay on your phone, encrypted. We never receive them.
- The only data that goes to a service we use is your sign-in account, kept by Firebase Authentication from Google.
- No ads, no analytics, no tracking, and we never sell data.
- Repo Tracker Pro is bought through Google Play. We never see your payment details.
- You can delete your account in the app at any time: Settings › Delete account.
1. Your account
To use Repo Tracker you sign in. Accounts are kept by Firebase Authentication, a Google service that stores, on our behalf:
- your email address and password (Firebase keeps only a salted hash of the password), or, if you continue with Google, your Google account's ID, email address, name and profile picture address;
- whether your email address is verified, and your two-factor settings (Firebase keeps the authenticator-app secret so it can check your codes);
- what Firebase records to sign you in and protect accounts from abuse: when the account was created and last signed in, IP addresses, and device and browser information.
We use this only to sign you in and keep your account secure. Google processes it under the Firebase privacy and security terms. Where the GDPR applies, the legal bases are providing the app you asked for and our legitimate interest in keeping accounts secure.
2. Data that stays on your phone
The app keeps these only on your phone, encrypted with AES-256 and a key held in the Android Keystore:
- the sources you add: server addresses, user names, access tokens and passwords;
- SSH keys you create or import, and the host keys of servers you trust;
- your settings, such as the name and email used for your commits.
Your clones (the repository files) are kept in the app's own storage, and also in folders you pick with Android's folder picker, if you choose to. We have no access to any of this. It is left out of device backups, and uninstalling the app deletes it, except files in folders you picked.
3. Your git servers and hosting accounts
When you list, clone, pull or push repositories, or ask the app to add an SSH key to an account, the app connects straight from your phone to the server or service you set up (such as GitHub, GitLab, a Gitea or Forgejo server, or your own SSH server) with the credentials you entered. That service receives what any git client sends it: your credentials, your IP address and the data you push. Its own privacy policy applies. Connections to a server over plain HTTP aren't encrypted: the app warns you when you set up a server address that starts with http://.
4. Purchases
Repo Tracker Pro is a one-time purchase made through Google Play, which handles the payment under Google's payments privacy notice. We never receive your card, UPI or bank details. The app only asks Google Play whether the Google Play account on your phone owns Pro. Google gives us the order details it gives every developer, such as the order number, date, price and the buyer's country, which we use only for accounting, taxes and refunds.
5. What we don't do
- The app contains no advertising, analytics or crash-reporting code.
- We don't sell or rent your data, and don't use it for advertising, tracking or profiling.
- The app needs only network access. It doesn't ask for your contacts, location, camera, microphone or storage.
6. Sharing
Your account data is shared only with Google, which runs Firebase Authentication and Google Play for us, and with authorities when the law requires it.
7. Keeping and deleting your data
Your account is kept until you delete it.
- In the app: Settings › Delete account. This deletes your account straight away, and everything Repo Tracker keeps for it on that phone. If you used the app on other phones, its data there is deleted when you uninstall the app or clear its storage on them.
- Without the app: follow Delete your Repo Tracker account.
Google may keep sign-in logs and backups for a limited time after deletion, under its own retention rules. A Pro purchase belongs to your Google Play account, so deleting your Repo Tracker account doesn't cancel or refund it.
8. Security
Sign-in traffic is encrypted with TLS. Data on your phone is encrypted as described above, and the app checks each SSH server's host key before connecting. You can protect your account with a second factor from an authenticator app.
9. Children
Repo Tracker isn't meant for children under 13, or the minimum age in your country, and we don't knowingly collect their data.
10. Your rights
Depending on where you live, you may have the right to see, correct, delete or get a copy of your data, to object to how it's used, and to complain to your data protection authority. Write to us at the address below and we'll answer within 30 days.
11. Changes
If this policy changes, we'll publish the new version here with a new effective date, and tell you in the app when the change is significant.