Privacy Policy

Information we collect

• Account information, including your email address, password hash, account role, and preferences.
• Security and session data, including IP address, browser or device description, session timestamps, and failed sign-in attempts.
• Application settings, App Store identifiers, encrypted or access-controlled Apple API credentials, webhook configuration, and forwarding destinations.
• Signed Apple notification and transaction data needed to verify, respond to, retry, audit, and display refund requests and outcomes.
• Subscription and customer metadata received from Paddle. Refoid does not receive or store your complete payment-card details.
• Email delivery events needed to send account, recovery, and refund-result messages.

How we use information

We use this data to provide and secure the service, authenticate accounts, process Apple notifications, send configured responses, show the response timeline, enforce plan limits, forward notifications at your direction, send email, support billing, prevent abuse, diagnose failures, and meet legal obligations.

Service providers

Paddle acts as the merchant of record for subscriptions and payment administration. Resend processes service email. Hosting and infrastructure providers store and transmit service data on our behalf. Apple supplies and receives App Store data. Each provider processes data under its own terms and privacy practices.

Optional website analytics

With your permission, we use Google Analytics to understand how visitors find our guides and go on to create an account, connect an application, and purchase a subscription. Analytics is off until you allow it. Advertising features are disabled.

Analytics uses a pseudonymous browser identifier and records public article slugs, general page categories, and confirmed account, connection, and purchase events. Purchase events include a transaction identifier, currency, and subscription amount excluding tax. We do not send email addresses, passwords, activation links, Apple API keys, application names, or refund-request contents to Google Analytics.

Analytics identifiers and the first article you read are shared between refoid.app and my.refoid.app through first-party cookies for up to 90 days. Server attribution records expire after 90 days without an update. You can decline analytics and continue using every product feature. Withdrawing permission stops future collection and cancels queued server events for this browser; it does not erase data already sent.

Retention and security

We keep information for as long as needed to operate the account, maintain a reliable audit trail, resolve disputes, prevent abuse, and comply with law. Credentials are excluded from public responses, private keys are stored in restricted server storage, and network traffic uses encrypted connections. No security measure can eliminate every risk.

Expired sign-in flows and billing previews are removed automatically. Completed activation and password-reset email payloads are cleared after one day. Completed refund email payloads and delivered notification-forwarding payloads are cleared after 30 days. Delivery identifiers and refund and billing audit records are retained to prevent duplicate processing and support account history. Encrypted disaster-recovery copies in Cloudflare R2 expire after seven days; deleted information may remain in those copies until they expire.

Your choices and rights

You can change notification and forwarding settings, end sessions, update your password, and request account deletion from Settings. Depending on where you live, you may also request access, correction, deletion, restriction, portability, or an objection to certain processing. We may need to verify your identity before acting.

Billing privacy

Paddle manages checkout, payment methods, tax handling, invoices, subscription changes, cancellations, and payment-related refunds. Review Paddle’s Buyer Terms and Refund Policy.

Support

Questions or privacy requests can be sent to support@refoid.app.