DevRoot · Legal

Privacy Policy

Last Updated: June 2026

This Privacy Policy explains how the DevRoot mobile application (“DevRoot”, the “App”) handles information. The short version: DevRoot is offline-first and collects no personal data. Everything you create stays on your device.

01Summary at a glance

The sections below provide the full detail required by the GDPR, the CCPA/CPRA, and other applicable laws.

02Data controller & contact

The party responsible for this App (the “data controller” under the GDPR / “business” under the CCPA) is:

03Scope

This policy applies to the DevRoot Android application. It does not apply to Google Play or to any third-party website or service that may link to or distribute the App, each of which has its own privacy practices.

04What data we collect

The one situation in which we may process personal data is if you choose to email us (for example, a support or rights request) — see Support communications.

05On-device data

The App stores the following locally on your device only, in the App’s private storage (an on-device SQLite database) — it is never sent to us:

• Project records — names, descriptions, status, priority, tech-stack tags, repository URLs, directory paths, progress, and dates that you enter.
• Checklists — lists, todos, and subtasks you create.
• Lookups & settings — your categories, “system/machine” options, and your theme preference (stored in on-device app preferences).

This content is under your control. You can edit or delete it in the App at any time, and it is removed when you delete the App’s data or uninstall the App. You may also export it yourself to a JSON backup file using your device’s system file picker; that file is created, stored, and shared entirely by you.

06Device permissions

As of the “Last Updated” date, DevRoot requests no Android runtime permissions and no internet access. It does not access your contacts, location, camera, microphone, photos, or files outside what you explicitly select. Backup export/import uses Android’s Storage Access Framework, which lets you pick a single file without granting broad storage permission.

If a future feature ever requires a permission, the App will request it in context, explain why, and this policy will be updated. You can review or revoke permissions in your Android settings at any time.

07Analytics & tracking

DevRoot contains no analytics, telemetry, crash-reporting, or tracking technologies. There are no third-party analytics SDKs, no advertising identifiers, no device fingerprinting, and no behavioural profiling.

Future changes: if we ever add analytics or similar technology, we will update this policy first and, where the law requires it, request your consent (GDPR/ePrivacy) or provide a clear opt-out (CCPA/CPRA) before any such data is processed.

08Advertising & cookies

• Advertising: the App shows no ads and uses no advertising networks.
• Cookies: being a native app, DevRoot uses no browser cookies. It stores only a small local preference for your chosen theme, which never leaves your device and is not used to identify you.

09Third-party services

The App bundles no third-party data-collecting SDKs. The App is distributed through Google Play, and Google may collect certain information in connection with the download and your device under its own Google Privacy Policy — this is outside our control. Any third-party service we integrate in the future will be named here, with a link to its policy.

10Legal bases for processing (GDPR)

Because the App itself processes no personal data on our behalf, we rely on no legal basis for in-app processing. For the limited processing that can occur — namely responding to messages you send us — our legal basis under Article 6(1) GDPR is:

• Legitimate interests (Art. 6(1)(f)) — to respond to and manage your enquiry; and/or
• Consent (Art. 6(1)(a)) — where you voluntarily provide information by contacting us.

Any future processing that requires consent will not begin until consent is obtained.

11Data sharing & selling

We do not sell, rent, or share personal information, and we do not “sell” or “share” it as those terms are defined under the CCPA/CPRA. Because we collect no personal data through the App, there is nothing to sell or share. We would only disclose information you send us by email if required by law or to protect our legal rights.

12International data transfers

The App stores data locally on your device, so there is no international transfer of your in-app data. If you email us, your message may be processed in the country where our mail provider operates; where required, such transfers are protected by appropriate safeguards (e.g., Standard Contractual Clauses).

13Data retention

We retain no in-app data because we never receive it. Your on-device data is retained until you delete it, clear the App’s storage, or uninstall the App. Correspondence you send us is kept only as long as necessary to handle your request and to meet legal obligations, then deleted.

14Security

Your in-app data is protected by the Android application sandbox, which isolates each app’s private storage from other apps. Because the data never leaves your device through the App, it is not exposed to network interception by us. You remain responsible for securing your device (screen lock, OS updates, device encryption) and any backup files you export. No method of storage is 100% secure.

15Your GDPR rights (EEA / UK)

If you are in the EEA or UK, you have the following rights regarding personal data we hold about you:

For your on-device data, you can exercise most of these rights directly in the App (view, edit, export, and delete). For any personal data we may hold (such as a support email), contact DevRootSupport@softwaredevteam.gr and we will respond within the time the GDPR requires (generally one month).

16Your California rights (CCPA/CPRA)

If you are a California resident, you have the rights to:

• Know / access the categories and specific pieces of personal information collected about you;
• Delete personal information we hold about you;
• Correct inaccurate personal information;
• Opt out of the “sale” or “sharing” of personal information; and
• Limit use of sensitive personal information;
• Non-discrimination for exercising your rights.

In practice, DevRoot does not collect, sell, or share personal information, and does not process sensitive personal information, so there is nothing to opt out of. To make any request, contact DevRootSupport@softwaredevteam.gr; we will verify and respond as required by the CCPA/CPRA. You may use an authorised agent.

17Other US state rights

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and others) have rights similar to those above — to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale, or certain profiling. Because we collect no personal data through the App, these have no practical effect, but we will honour any valid request sent to DevRootSupport@softwaredevteam.gr.

18Children’s privacy (COPPA)

DevRoot is a productivity tool intended for a general, developer audience and is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. Because the App collects no personal data at all, it does not knowingly gather information from children either. If you believe a child has provided us personal information (for example, by emailing us), contact DevRootSupport@softwaredevteam.gr and we will delete it.

19Support communications

If you contact us at DevRootSupport@softwaredevteam.gr, we will process the information you include (such as your email address and message) solely to respond to and manage your request. We do not use it for marketing, and we delete it once it is no longer needed. Please don’t send us sensitive information you don’t need to share.

20Changes to this policy

We may update this Privacy Policy as the App evolves or as the law requires. We will change the “Last Updated” date above and, for material changes (for example, introducing analytics or accounts), provide a more prominent notice and obtain consent where required before the change takes effect.

21Contact & exercising your rights

To ask a question or exercise any privacy right, contact our data controller:

EEA/UK users may also complain to their local data-protection authority. See also our Terms of Service.