Privacy Policy

GitPocket ("we", "us", or "our") is a native Android application that allows you to browse and manage your GitHub repositories directly from your Android device. This Privacy Policy describes how we handle your information when you use our app.

We are committed to protecting your privacy. GitPocket is designed to work exclusively with your own GitHub account data, and we do not collect, sell, or share your personal information with third parties for commercial purposes.

GitPocket operates with a minimal data footprint. We only access the data that is necessary to provide the app's core functionality.

The data accessed through GitPocket is used solely to provide the app's features to you. Specifically:

• Authenticating your identity with GitHub via OAuth 2.0
• Displaying your repositories, commits, issues, and pull requests
• Enabling you to perform actions on GitHub (create issues, comment, etc.)
• Caching repository data locally to improve performance and offline access

We do not use your data for advertising, profiling, machine learning, or any purpose other than delivering the stated features of the app.

GitPocket uses the official GitHub REST API v3 to access your account data. Authentication is performed using GitHub's OAuth 2.0 Device Flow — no passwords are ever entered into or stored by GitPocket.

When you authorize GitPocket, GitHub issues an access token. This token:

• Is stored encrypted in your device's secure storage (Android Keystore)
• Is never transmitted to our servers (GitPocket has no backend server)
• Can be revoked at any time via GitHub Settings → Applications → Authorized OAuth Apps
• Only grants the permissions (scopes) you approved during authorization

All data processed by GitPocket remains on your device. We operate without a backend server, meaning your data never leaves your device to our infrastructure.

• OAuth tokens are stored in Android's encrypted Keystore system
• Cached repository data is stored in the app's private internal storage
• No data is uploaded to external servers operated by us
• Uninstalling the app removes all locally stored data

All communication with the GitHub API is conducted over HTTPS (TLS 1.2+), ensuring your data is encrypted in transit.

GitPocket interacts with the following third-party service:

We do not integrate any advertising networks, social media SDKs, or third-party analytics services.

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can view all your GitHub data directly within the app or via github.com
• Right to Erasure: Uninstall the app to delete all locally stored data. Revoke the OAuth token in GitHub settings to remove our access
• Right to Portability: Your data resides with GitHub — export it at any time via GitHub's data export feature
• Right to Withdraw Consent: Revoke app authorization in GitHub Settings → Applications at any time
• Right to Object: Contact us at any time regarding your data

Since we do not operate a backend server or maintain a user database, most GDPR requests can be fulfilled by acting directly within GitHub's settings.

GitPocket is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through our app, please contact us and we will take appropriate action.

GitHub itself requires users to be at least 13 years of age. By using GitPocket, you confirm that you meet GitHub's age requirements.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will provide a notice within the app.

We encourage you to review this Privacy Policy periodically. Continued use of GitPocket after any changes constitutes your acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please do not hesitate to contact us: