GitBusPrivacy policy
This policy describes which personal data GitBus (“the app”) processes. It applies to the app on Windows, Linux and Android and to this website.
1. Controller
Tribus Hannes
Südtirolerstr.3
39058 Sarnthein
Email: hons82@gmail.com
2. What the app processes
Account (Firebase Authentication)
You sign in with email and password, with Google or with GitHub. We store your email address, your account identifier and the sign-in method. A password is kept only by Firebase and never in plain text. For email accounts the address must be confirmed before data is stored.
Your overview (Cloud Firestore)
So that your repositories look the same on all your devices, the app stores under your account:
| Data | Content |
|---|---|
| Repositories | name, address, provider (GitHub, GitLab, other), time of last use, assigned access profile |
| Access profiles | host, user name, label. Not the token or password. |
| Devices | random device identifier, device name, platform, time of last use |
| Clones per device | location on that device, time of last synchronization |
Your account is the access key: the database rules only allow you to read and change this data.
What stays on your device
- Access tokens, passwords for Git providers, SSH keys and their passphrases are kept in your operating system’s secure storage.
- The contents of your repositories (the clones) are on your device. They are not transmitted to us.
- When you clone, pull or push, the app connects directly to your provider’s server (for example GitHub or GitLab). Only the credentials you provided for that go there.
Usage and crash data (Firebase Analytics, Crashlytics)
On Android, anonymous usage events (for example “commit created” or “repository added”, the latter including the provider name) and crash reports are sent to Google. They include technical details such as device model, operating system and app version. This does not happen on Windows and Linux.
Suggest commit message (Gemini)
Only if you use the “Suggest commit message” function, the app sends the staged changes to Google to generate a suggestion. On Android this goes through Firebase AI Logic. On Windows and Linux you enter your own Gemini API key for it: it stays in your device’s key store, and the app sends the request with it directly to Google, without passing through us. The terms you agreed with Google for your key apply there. Files that look like secrets (for example key files) and binary files are not sent. Without this function no contents of your repositories are transmitted.
Update notice (Windows only)
At startup the Windows app requests the small file version.json from this website to tell you about a newer version. Only this request is sent, nothing about you or your device; the host processes the technically necessary connection data (see section 7).
3. Purposes and legal bases
- Providing the app and your account (sign-in, overview, device sync): Art. 6(1)(b) GDPR.
- Crash reports and usage events to fix errors and improve the app: Art. 6(1)(f) GDPR.
4. Recipients
Our service provider is Google (Firebase: Authentication, Cloud Firestore, Hosting, Analytics, Crashlytics, the AI function) as a processor. When you sign in with Google or GitHub, those providers receive the details needed for that. Git servers (GitHub, GitLab, Gitea and others) only receive data when you let the app connect to them.
5. Retention
Your account data stays stored until you have your account deleted (see Delete account). You remove data on your device by uninstalling the app and deleting the folders of your clones.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Contact the address above. You can also lodge a complaint with a data protection supervisory authority.
7. Website
This site is served through Firebase Hosting (Google). When you visit it, the host processes technically necessary connection data (for example the IP address) in logs. The site itself sets no cookies and includes no advertising or analytics services.
This policy is updated when the app changes.