Projectify Privacy Policy

Projectify does not send data to a server operated by us, the developer. The app talks only to the Projectify server of the organization you connect to. Project, task, server and team information is kept on that server and is under your organization administrator's control.

The app contains no advertising, tracking, analytics or crash-reporting services, and we do not sell your data or share it with third parties for advertising.

Accounts cannot be opened publicly. Your organization administrator invites you, and with the invitation code you create your account with your name, email and password. Your password is stored on the server only as a one-way hash.

When you sign in, the server issues a session token (JWT). It is stored in the iOS Keychain on your device and removed when you sign out.

As you use the app, the following is written to your organization's Projectify server and stored there. Your organization is responsible for this data, and the administrator decides who can access what.

• Account details: name, email address, role and permissions
• Projects, tasks, comments and team membership
• Registered servers: name, address, username and billing details. Server and MySQL passwords are stored encrypted with AES-256-GCM on the server and are never sent back to the app
• An audit log of server actions: which user ran which action and when
• In-app notifications and backup records

If you have permission, the app runs predefined actions on your organization's registered servers (such as PM2 process control, nginx site enabling, MySQL database and backup management). Commands are relayed through the organization's Projectify server; the app does not send raw commands on its own.

MySQL backups are saved to your device as files when you choose to download them. They may contain the contents of the backed-up database; keeping and protecting them is your responsibility.

The following is stored only in the app's storage on your device:

• The session token (iOS Keychain) and the account remembered on this device
• The server address you connect to and your appearance (light/dark) preference
• The history of commands you typed in the terminal screen and the font size
• Backup files you downloaded from the server (only if you download them)

The app connects to the server address set by your organization. Whether the connection is encrypted (HTTPS) depends on your organization's server configuration. We recommend using sensitive data only with servers reached over HTTPS.

The app does not request location, contacts, photos, camera, microphone or tracking (ATT) permission. No push notification service is used; notifications are read from the server while the app is open.

The app contains no analytics, advertising or crash-reporting SDK. Your data is not shared with any third party beyond what is needed to use the app. Services your organization uses on its own server (for example email notifications) are the organization's responsibility.

Projectify is a work app for organization staff and is not directed at children. We do not knowingly collect data from children.

Because your account and data are kept on your organization's server, send access, correction or deletion requests to your organization administrator first. An administrator can remove the account from the team screen. Deleting the app from your device removes the session and preferences stored on it.

If you contact us directly, we will forward your request to the relevant organization.

If this policy changes, the new version is published on this page and the update date at the top changes.