Privacy Policy
1. Overview
comdeck ("we", "our", "the app") is a network toolkit application. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.
2. Data we collect
Account data: If you create an account via Sign in with Apple, we store your Apple-provided user identifier and display name. We do not receive or store your Apple ID email unless you choose to share it.
Synced data: If you sign in, the following is stored on our servers (Supabase) to enable cross-device sync:
- SSH host metadata (hostname, port, username, label) — never passwords or private keys
- HTTP request presets (method, URL, headers)
- Scan history summaries (tool name, target, timestamp)
- User preferences (default terminal mode, favorite tools)
Credentials: SSH passwords and private keys are stored exclusively in your device's Keychain. They are never transmitted to our servers.
Network data: All network scans, pings, traceroutes, and other tool operations are executed directly from your device. We do not proxy, intercept, or store network traffic.
No analytics or tracking: We do not use any third-party analytics, advertising SDKs, or tracking frameworks. We do not collect device identifiers, usage patterns, or behavioral data.
3. How we use your data
Your synced data is used solely to:
- Sync your saved hosts, presets, and preferences across your Apple devices
- Display your scan history within the app
We do not sell, rent, share, or monetize your data in any way.
4. Data storage and security
Synced data is stored on Supabase (hosted on AWS) with Row Level Security (RLS) enabled, ensuring each user can only access their own data. All data in transit is encrypted via TLS 1.3. Credentials are stored using Apple's Keychain Services with hardware-backed encryption.
5. Data retention
Your data is retained for as long as your account exists. You can delete your account and all associated data at any time from within the app. Upon account deletion, all synced data is permanently removed within 30 days.
6. Third-party services
comdeck uses the following third-party services:
- Supabase: Authentication and data storage (Supabase Privacy Policy)
- Apple StoreKit: Subscription management (governed by Apple's privacy policy)
- ip-api.com: IP geolocation lookups for the IP Info tool (queries are made directly from your device)
- Cloudflare: Speed test endpoints (no personal data transmitted)
7. Children's privacy
comdeck is not intended for use by children under 13. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us and we will delete it.
8. Your rights
You have the right to:
- Access all data we store about you
- Export your data
- Delete your account and all associated data
- Use the app without an account (free tier tools work without sign-in)
9. Changes to this policy
We may update this policy from time to time. Significant changes will be communicated via an in-app notification. Continued use of comdeck after changes constitutes acceptance.
10. Contact
For privacy-related inquiries, contact us at privacy@comdeck.app.