Privacy Policy
Last updated 10 October 2026
This policy explains what devBoard collects, why, and what you can do about it. It is written to be read rather than to be survived.
1. Who we are
App Tube d.o.o. (reg. no. 21806480) is the data controller for devBoard. Contact us at privacy@getdevboard.app.
2. The data we collect
- Account data — your email address, display name and hashed password, plus the workspaces you belong to.
- Content you create — projects, work items, comments, labels, releases, saved views, time entries and any files you attach.
- Technical data — IP address, app version and platform, and server logs generated when the app talks to our API. These are kept for security and debugging.
We do not use advertising SDKs. The iPhone and Android apps include two Google Firebase SDKs: Analytics, which records which screens you open and which actions you take (for example "item created" or "timer started"), tied to your account id but never to the text of your work; and Crashlytics, which sends a crash report with the app version, device model, OS version and a stack trace when the app crashes. The Mac app uses Firebase only to deliver push notifications. We use these reports to see which features are used and to fix crashes.
3. How we use it
- To run the service — signing you in, syncing your work across your devices, and delivering realtime updates to your team.
- To send transactional email — address verification, invites, and account or security notices.
- To keep the service working and secure — diagnosing faults, preventing abuse.
We do not sell your personal data, and we do not read your project content except where you explicitly ask us to for support.
4. Legal bases
We process account data and content to perform our contract with you. We process technical and security data under our legitimate interest in running a functioning, secure service. Where we rely on consent, you can withdraw it at any time.
5. Who we share it with
| Provider | Purpose |
|---|---|
| Cloudflare | DNS, CDN and protection against abuse. |
| Vercel | Hosting this website, and counting page views with Vercel Web Analytics. It sets no cookies and stores no personal data. |
| Contabo (Germany) | Server hosting and database storage. |
| Mailtrap | Sending transactional email — verification, invites, account notices. |
| Google (Firebase) | Usage analytics and crash reports from the iPhone and Android apps; push notifications on all platforms. |
We may also disclose data if required by law, to enforce our Terms, or to protect the rights and safety of devBoard and its users.
6. International transfers
Your account data and content are stored on servers in the European Union. Firebase analytics, crash reports and push notification tokens are processed by Google, which may store them in the United States. Where a provider processes data outside the EEA, that transfer relies on Standard Contractual Clauses or an adequacy decision.
7. Retention
We keep your account and content for as long as your account exists. Delete your account and we remove your personal data and content within 30 days, except where we must keep records to meet a legal obligation. Server logs are kept for a short rolling window.
8. Cookies
This website sets no tracking or advertising cookies. The app authenticates with a token stored on your own device, not with a browser cookie.
9. Your rights
Under the GDPR you may request access to your data, correction, deletion, restriction, portability, or object to processing. Write to privacy@getdevboard.app and we will respond within 30 days. You also have the right to complain to your local supervisory authority.
10. Security
Traffic between the app and our servers is encrypted in transit with TLS. Passwords are stored hashed, never in plain text. Access to production systems is restricted and key-based.
11. Children
devBoard is a tool for professional work and is not directed at children under 16. We do not knowingly collect their data.
12. Changes
If we change this policy materially we will update the date above and, where the change affects you, notify you in the app or by email.
13. Contact
App Tube d.o.o., reg. no. 21806480 — privacy@getdevboard.app