Privacy Policy

Introduction

IsMyAppOK (the Service) is operated by Backham Co., Ltd. This policy explains what information we collect, why we collect it, and how we handle it.

Information we collect

Account information from GitHub. When you sign in with GitHub, we receive your GitHub user access token and your GitHub login name. The token is stored in a signed session cookie in your browser and is not stored on our servers.

Repository contents. To diagnose an app, we retrieve the files of the repository you select and analyze them. We do not keep the repository contents after the diagnosis.

Diagnosis records. We store the scan identifier, status, display language, scan type, delivery target (Pull Request or Issue), the resulting number and URL, and an error code if the scan fails. We do not store your source code, secrets, or the prompts and outputs sent to the language model.

Usage measurement. We use Cloudflare Web Analytics and PostHog to understand how the Service is used. Both are configured without cookies; PostHog uses in-memory storage only.

Advertising. The page for additional checks may show ads through Google AdSense.

How we use information

We use the information to sign you in, to run diagnoses, to deliver results as a Pull Request or Issue, to keep the Service secure and within rate limits, and to improve the Service.

Sharing with third parties

We send data to the following providers only as needed to run the Service: GitHub (sign-in, repository access, and creating Pull Requests or Issues), Fireworks AI (language-model processing of repository files for diagnosis), Cloudflare (hosting, database, queues, and analytics), PostHog (usage measurement), and Google (advertising). We do not sell your information.

Cookies

We use a session cookie (httpOnly and Secure) to keep you signed in, and an OAuth state cookie during sign-in. Our analytics are configured not to use cookies.

Retention

We keep diagnosis records for as long as needed to operate the Service. You can ask us to delete them.

Security

We use signed cookies, least-privilege access, and avoid storing secrets and source code. No method of transmission or storage is perfectly secure.

Your choices

You can stop using the Service at any time by logging out or uninstalling the GitHub App. You may request access to or deletion of your information by contacting us.

Children

The Service is not intended for children under 13.

Changes

We may update this policy. Material changes will be posted on this page.

Contact

For questions about this policy, please contact us using the details below.