Legal
Data Storage & Processing
Transparency table for Google Play Data safety and Apple App Privacy — what is collected, where it goes, and how long it lasts.
Effective date: August 24, 2026. This page supplements the Privacy Policy with a technical inventory for regulators, app stores, and security reviewers.
Data inventory
| Category | Examples | Collected? | Stored by us? | Shared with | Purpose |
|---|---|---|---|---|---|
| Identifiers | IP address in server logs | Yes (automatic) | Hosting logs only | Vercel | Security, abuse prevention |
| Usage data | Pages viewed, device type (aggregate) | Yes | Analytics provider | Vercel Analytics | Improve site performance |
| User content | AI chat messages | If you use chat | Not in app DB | Anthropic | Generate chat replies |
| Contact info | Email you send us | If you email | Email inbox | Email provider | Correspondence |
| Preferences | Theme (dark/light) | Yes | Your device only | None | UI preference |
| Financial | Payment cards | No | — | — | — |
| Precise location | GPS | No | — | — | — |
Processing flow — AI chat
- You type a message in the browser or mobile app.
- Message is sent over HTTPS to our `/api/chat` endpoint on Vercel.
- Our server forwards the conversation (with limits: max 12 messages, 2,000 chars each) to Anthropic’s API.
- The response is returned to your device and shown in the chat UI.
- We do not write chat content to our own database.
Processing flow — GitHub activity
- Our server fetches public GitHub API data for my profile and repositories.
- Results are cached temporarily for performance.
- No visitor personal data is sent to GitHub.
Security
- HTTPS enforced in production.
- API keys (Anthropic, GitHub) stored as server environment variables — never exposed to the browser.
- GitHub webhook endpoint verifies HMAC signatures.
- Chat endpoint validates payload size and message limits.
Deletion requests
Email srujanchidarla.uof@gmail.com with “Data request” in the subject. Include enough detail to identify your request (approximate date/time of chat or email). We will coordinate deletion where we control the data and point you to third-party processors where we do not.
App store declarations
- Google Play Data safety: Data collected — app activity (analytics); messages (user-provided chat). Data not sold. Encryption in transit.
- Apple App Privacy: Data linked to you — minimal (server logs may include IP). Data used for analytics and product functionality.