PocketCodedWeb

Privacy Policy

Effective date: July 6, 2026

PocketCodedWeb is a mobile web development environment. Most project data, including source code, terminal history, imported files, SSH keys, and personal Gemini API keys, is stored on your device. Account, trial, billing status, and limited service data may be processed through Firebase and Google Play so the app can provide sign-in, verification, Premium access, and abuse prevention.

1. Who we are

This Privacy Policy applies to the PocketCodedWeb Android application ("PocketCodedWeb", "the app", "we", "us", or "our"). For privacy questions or requests, contact Slimkheli2@gmail.com.

2. Information we collect or process

Account information. When you sign in or create an account, Firebase Authentication processes your email address, display name if provided, verification status, sign-in provider, Firebase user ID, authentication tokens, and related account metadata.

Profile, trial, and Premium status. PocketCodedWeb stores limited account records in Cloud Firestore, such as your Firebase user ID, email address, display name, sign-in providers, email verification status, profile sync timestamps, trial timestamps, and whether Premium is unlocked.

Local development data. The app stores projects and operational data in app-private storage on your device, including source code, files, folders, editor state, terminal commands and output, Git repositories and configuration, installed packages, preview cache, and SSH keys you generate. This data is not automatically uploaded to a PocketCodedWeb server.

Files you select. When you import or export a file or folder, Android's system file picker gives the app access only to the item or location you select.

Purchase and trial information. Google Play provides the app with purchase information needed to complete, acknowledge, validate, or restore the one-time Premium purchase. This can include product ID, localized price, purchase state, order ID, purchase time, purchase token, acknowledgement status, and an app account identifier. Google Play handles your payment details; PocketCodedWeb does not receive your full payment-card number.

AI Chat information. If you use AI Chat, the app sends your prompt, selected project context, active editor content, file names, recent terminal output, selected model, and the Gemini API key you entered directly to Google's Gemini API. The API key is stored locally in app-private preferences and is not sent to a PocketCodedWeb backend.

Analytics and diagnostics. PocketCodedWeb includes Firebase Analytics. This may collect app instance identifiers, device and app information, usage events, diagnostics, and crash-related signals to help understand app reliability and feature usage. We do not use this data for third-party advertising.

User-directed network activity. The app includes tools such as Git, SSH, package installation, HTTP requests, browser preview, and terminal commands. When you use these tools, commands, credentials, repository data, source code, package requests, or other content may be transmitted directly to the remote host you specify.

Support messages. If you email us, we process your email address and the content of your message to respond to your request.

3. Permissions

PocketCodedWeb requests internet access so sign-in, Firebase, Google Play Billing, Gemini, Git, package downloads, web preview, and user-directed network features can work. The app does not request location, camera, microphone, contacts, SMS, or call log permissions.

4. How we use information

Provide sign-in, email verification, account recovery, and Google Sign-In;
Sync account profile, trial timing, and Premium entitlement records;
Provide the editor, terminal, project, import/export, Git, SSH, package, preview, and AI features;
Complete, validate, acknowledge, and restore the one-time Premium purchase through Google Play;
Improve reliability, diagnose problems, prevent abuse, and protect security;
Respond to support, privacy, and account deletion requests; and
Comply with applicable law and enforce our legal rights.

5. Sharing and service providers

We do not sell personal information. We do not use personal information for third-party advertising.

Google Firebase: used for Authentication, Firestore, Analytics, and related app services.
Google Play: used for app distribution, license testing, purchase processing, refunds, and purchase restoration.
Google Gemini: used only when you enter a Gemini API key and ask AI Chat to generate a response.
User-selected services: data is sent to Git hosts, package providers, websites, APIs, or servers only when you initiate the relevant command or connection.
Legal and safety reasons: information may be disclosed when reasonably necessary to comply with law, lawful process, prevent fraud, protect users, or protect our rights.

6. Security

Account services use Firebase and Google infrastructure. Data transmitted to Firebase, Google Play, Gemini, and HTTPS services is protected in transit by modern transport security where supported by those services. Local project files are stored in Android app-private storage. No system can be guaranteed completely secure, so users should protect their device, private keys, access tokens, project secrets, and API keys.

7. Retention and deletion

Local projects and settings: remain on your device until you delete them, clear app storage, or uninstall the app.
Account and Firestore records: remain while your PocketCodedWeb account is active and are deleted or anonymized after a verified deletion request, except where retention is needed for security, fraud prevention, legal, or payment record reasons.
Google Play purchase records: are retained by Google under Google's policies and may remain necessary for refunds, tax, accounting, fraud prevention, and purchase restoration.
Support emails: are retained only as long as reasonably needed to respond and keep records of the request.
User-selected third parties: information sent to remote services is retained under those services' own policies.

See the Data Deletion page for account and local deletion steps.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information. Send requests to Slimkheli2@gmail.com. You can also remove local app data from your device at any time by deleting projects, clearing app storage, or uninstalling PocketCodedWeb.

9. Children's privacy

PocketCodedWeb is not directed to children under 13, or the minimum age required to consent to data processing in their country. We do not knowingly collect personal information from a child below that age.

10. International processing

Google and user-selected remote services may process information in countries other than your own. Their legal terms and safeguards apply to that processing.

11. Changes to this policy

We may update this Privacy Policy when PocketCodedWeb's features, service providers, or legal obligations change. The effective date at the top will be updated when changes are published.

12. Contact

Privacy contact: Slimkheli2@gmail.com
Application: PocketCodedWeb
Package name: com.mkhokheli.pocketcodedweb