# Privacy Policy

> What personal data BuildFerry collects from developers and testers, why, who processes it and the choices you have.

Last updated: 2026-11-01
Canonical: https://buildferry.app/privacy

This policy explains what BuildFerry ("we") collects when you use buildferry.app.

## What we collect from developers

- **Account:** email address, name and, if you sign in with GitHub, your GitHub ID.
- **Apple:** your App Store Connect API key and signing certificates, encrypted at rest.
- **Apps:** the .ipa files you upload, along with details read from them such as name, bundle ID, version and icon.
- **Activity:** a log of actions in your team, such as uploads and approvals.

## What we collect from testers

- **Device details:** UDID, device model and iOS build, shared when the tester allows the one-time profile.
- **Label:** a name, if the developer or tester enters one.

The developer who shared the app decides who is invited and approved. Testers should contact that developer first with questions about their data.

## Why we use it

We use this data to sign you in, register approved iPhones with your Apple team, sign and deliver builds, send sign-in emails and keep the service secure. We don't sell personal data and we don't use it for advertising.

## Cookies

We only use cookies needed for the service: one keeps you signed in, one protects GitHub sign-in, and one lets a tester's iPhone return to its install page. We don't use advertising or analytics cookies.

## Who processes data for us

- **Cloudflare:** hosting, database, file storage and signing containers.
- **Apple:** approved device IDs are registered with your Apple Developer account.
- **GitHub:** sign-in, if you choose it.
- **Resend:** delivery of sign-in and notification emails.
- **Dodo Payments:** checkout, tax and subscriptions, as merchant of record. Your card details go directly to Dodo and never reach BuildFerry. We keep your plan, subscription status and Dodo customer reference.

These providers may process data in other countries.

## How long we keep it

We keep account data while your account is open. Apps and their builds are removed when you delete them. Expired sessions, sign-in links and unfinished tester requests are removed automatically. Device IDs already registered with Apple stay in your Apple account until you remove them there.

## Your choices

You can ask us to access, correct or delete your personal data by emailing [support@buildferry.app](mailto:support@buildferry.app). You may have further rights under the laws where you live.

## Changes

If we change this policy, we'll update the date on this page, and we'll tell you by email if the change is significant.
