Privacy Policy

Last updated: October 1, 2026

BipoPush is currently an example project. This policy describes how the service handles data today.

What we collect

• Account data from Google Sign-In: your name, email address and profile picture.
• Files you upload as releases, from the dashboard or the CLI.
• SDK events: timestamps and platform information sent by apps using your app key.
• Session data: login sessions and CLI tokens, including the browser or CLI user agent.

How we use it

• To sign you in, operate your dashboard and enforce plan limits.
• To send transactional emails (welcome, release published, plan changes, security alerts).
• We do not sell your data or use it for advertising.

Service providers

• Google — authentication.
• Polar — payments and subscriptions (Merchant of Record). We never see your card details.
• Cloudflare — hosting, network and file storage (R2).
• Oracle Cloud — API servers and database.
• Resend — email delivery.

Retention and deletion

We keep your data while your account is active. To delete your account and all associated data, email[email protected].

Security

Traffic is encrypted with HTTPS, sessions are stored as hashed tokens, and uploaded files are kept in private storage and served through short-lived signed URLs.

Contact

Questions about privacy: [email protected].