Privacy policy for the app “KeyStoreGen”
Package name: dev.eno2.keystoregen · Last updated:9 November 2026
Template – not legal advice. This text is a draft with [placeholders]. Fill in your details and have it reviewed before publishing, then remove this notice.
This is a translation for convenience. The German version is legally binding.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
[VORNAME NACHNAME][STRASSE HAUSNUMMER]
[PLZ ORT]
Germany
Email: [E-MAIL-ADRESSE]
2. Overview
The app “KeyStoreGen” sends no data to me as the developer. I don’t run any servers for this app and cannot see who uses it or how. It contains no ads and no analytics or tracking services. The app processes the data listed below only on your device, or transmits it only to destinations you choose yourself.
3. Data processed
| Data | Purpose | Storage | Shared | Optional |
|---|---|---|---|---|
| Keystore, passwords and certificate details (CN, O, OU, L, ST, C) | Creating and exporting your signing key | Locally on the device; shared only on your action | Yes | No |
| GitHub access token | Setting repository secrets on your behalf | Locally | No | Yes |
| Bitwarden login or session | Saving the key to your Bitwarden vault | Locally on the device | No | Yes |
Unless stated otherwise, the legal basis is Art. 6(1)(b) GDPR (providing the app features you use) or, for optional features, your consent under Art. 6(1)(a) GDPR. [Review legal bases and adjust if necessary]
4. Permissions
The app requests the following Android permissions:
INTERNET: Only for the optional features “upload secrets to GitHub” and “save to Bitwarden”.
You can revoke permissions at any time in the Android system settings.
5. Third-party services
The app communicates with the following third-party services:
- GitHub API (GitHub, Inc. (USA)): Device-flow sign-in and writing Actions secrets to repositories you choose – only when you use this feature. Secret values are encrypted on the device first. Provider’s privacy policy
- Bitwarden (Bitwarden, Inc. (USA) or your self-hosted server): Saving the key as a secure note in your vault – only when you use this feature. Provider’s privacy policy
[For each service, add the legal basis, any third-country transfer (e.g. USA) and the retention period]
6. Advertising
The app contains no ads.
7. Distribution
The app is provided via GitHub (source code and releases). When you download it, GitHub processes technically necessary data such as your IP address. I have no influence on this. More information: GitHub’s privacy statement.
8. Data transmission and security
Network connections only happen when you actively upload to GitHub or save to Bitwarden, and only over HTTPS. Without these features nothing leaves the device unless you save or copy it yourself.
9. Deleting your data
Signing out in the app removes the GitHub token; revoke it at github.com → Settings → Applications. Everything else disappears when you uninstall the app or clear its data. Secrets and vault entries you already created are managed directly at GitHub or Bitwarden.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), e.g. the authority of your place of residence or [competent state authority at the controller’s location].
For all requests, contact: [E-MAIL-ADRESSE]
11. Changes
I update this privacy policy when the app or the legal situation changes. The version published here applies.