Privacy policy

1. Introduction

DidItWork.app ("we", "us", "our") respects your privacy. This policy explains how we collect, use, and protect your personal information when you use our Service.

2. Information we collect

Account information

• Name, email address, and profile photo (from OAuth providers or manual entry).
• Role preference (Builder, Tester, or Both).
• Stripe account details for payment processing.

Usage data

• Apps submitted for testing (URLs, descriptions, scope instructions).
• Bug reports, screenshots, and test session data.
• Device and browser information captured during test sessions.
• Payment and payout history.

Automatically collected

• IP address, browser type, and operating system.
• Pages visited, time spent, and interaction patterns.
• Cookies and similar tracking technologies.

3. How we use your information

• To provide and maintain the Service.
• To process payments and payouts via Stripe.
• To send transactional emails (test notifications, payment confirmations).
• To calculate and display reputation scores.
• To detect and prevent fraud, abuse, and terms violations.
• To improve the Service and develop new features.

4. Information sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing. Subject to Stripe's privacy policy.
• Resend — for transactional email delivery.
• Supabase — for authentication and data storage.
• Other users — Builders see tester names and reports. Testers see app details and builder names. Reputation scores are visible to all users.
• Law enforcement — when required by law or to protect our rights.

5. Data security

We use industry-standard security measures to protect your data, including encryption in transit (TLS), secure authentication via OAuth providers, and row-level security policies on our database. However, no method of transmission over the internet is 100% secure.

6. Data retention

• Account data is retained as long as your account is active.
• Test reports and issue data are retained for the lifetime of the associated app submission.
• Payment records are retained for 7 years for tax and legal compliance.
• Upon account deletion, personal data is removed within 30 days. Anonymized usage data may be retained.

7. Your rights

You have the right to:

• Access — request a copy of your personal data.
• Correction — update inaccurate personal information.
• Deletion — request deletion of your account and data.
• Export — download your data in a portable format.
• Objection — opt out of non-essential data processing.

To exercise these rights, contact us at privacy@diditwork.app.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but this may affect the functionality of the Service.

9. Children's privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify users of material changes via email. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For privacy-related questions or requests, contact us at privacy@diditwork.app.