Legal
Privacy Policy
This Privacy Policy explains how Coot handles information when you use coot.dev, the Coot dashboard, hosted install pages, and the Coot CLI.
Last updated: July 4, 2026
Information we collect
We collect only the information needed to provide Coot, authenticate your account, host short-lived install pages, and keep the service reliable.
- Account information from supported sign-in providers, such as your name, email address, and provider account identifier.
- App and build metadata you upload, such as app name, bundle identifier, version, build number, icon, IPA file, and timestamps.
- CLI token metadata and authentication records needed to connect the Coot CLI with your account.
- Basic operational data such as request logs, device and browser metadata, IP address, and error events.
How we use information
We use information to operate the service, authenticate users, process uploads, generate install pages, prevent abuse, debug errors, maintain security, and communicate service-related updates.
Uploads, install links, and tokens
Uploaded IPAs and related metadata are used to create hosted install pages for the account that uploaded them. Install links are designed for short-lived development testing, not permanent public distribution.
Random download tokens are stored as hashes, and expired links stop granting access to downloads. We may delete expired builds, files, logs, or metadata when they are no longer needed to provide the service.
Sharing
We do not sell personal information. We may share information with infrastructure, hosting, storage, authentication, analytics, security, and payment providers when they are needed to run Coot. We may also disclose information if required by law or to protect Coot, users, or the public.
Security
We use reasonable technical and organizational measures to protect information, including hashed tokens and access controls. No internet service can guarantee absolute security, so you should avoid uploading sensitive apps, secrets, credentials, or production-only signing materials unless you are comfortable with the risk.
Your choices
You can stop using Coot at any time. You may request access, correction, export, or deletion of account information where required by applicable law. Some operational records may be retained when needed for security, compliance, abuse prevention, or backup integrity.
Changes and contact
We may update this policy as Coot changes. The updated date above shows when the latest version took effect. For privacy questions, contact the Coot operator through the support channel provided by the service.