Privacy Policy

1. Overview

App Logger is an application observability service operated by ID Maker (collectively, “App Logger,” “we,” “us,” or “our”). It includes the App Logger website, dashboard applications, API, and the Simple App Logger SDK (the “Service”).

2. Information we collect

Account and authentication information

When you create or manage an account, we collect your username, email address, password in hashed form, email-verification status, and account creation date. If you sign in with Google, we receive an identity token and store the provider, provider account identifier, and associated email address. Google and Firebase may also process authentication information under their own privacy terms.

Workspace and project information

We process project names, team membership, roles, invitation email addresses, project configuration, custom-field definitions, and API or installation credential metadata. Secret credentials are stored in hashed form where the Service supports hashing; newly generated API secrets are shown only when created.

Application telemetry submitted by customers

The Service receives information that customers configure their applications to send. Depending on that configuration, this may include:

• log messages, severity levels, tags, event identifiers, and timestamps;
• device or installation identifiers, device name and model, platform, app version, language, and country;
• session activity, last-active times, watch status, and action events;
• customer-defined fields and values, which may include text, numbers, dates, email addresses, or other application-specific context; and
• push-notification tokens when a customer enables that feature.

Log messages and custom fields are defined by the customer. They may contain personal information if a customer or its app places personal information in those fields. Customers should avoid sending sensitive information that is not needed for application monitoring.

Technical, security, and local-device information

We process request details such as request path, method, response status, timing, project or account identifiers, app version, and pseudonymized source or installation identifiers for security auditing, reliability, rate limiting, and abuse prevention. The dashboard may store session tokens and preferences on your device or in browser storage so you can remain signed in and use the Service. The public website does not currently use advertising trackers.

3. How we use information

We use information to:

• provide, maintain, and troubleshoot the Service;
• authenticate users, verify email addresses, and recover accounts;
• receive, organize, search, and display application logs and device context;
• support project collaboration, invitations, roles, and access controls;
• protect accounts, enforce usage limits, investigate abuse, and maintain audit records;
• communicate about the Service, including transactional and security messages; and
• comply with law and enforce our agreements.

Where applicable law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, or consent where we specifically request it.

4. How information is shared

We do not sell personal information or use customer telemetry for targeted advertising.

We may disclose information in these limited circumstances:

• Within a project: project owners, administrators, members, and viewers can access data according to their assigned role.
• Service providers: vendors that provide hosting, databases, caching, authentication, email delivery, security, and similar infrastructure may process information for us under contractual or other appropriate restrictions. We require them to protect personal information to the same or an equivalent level as described in this policy and to use it only to provide services to us.
• At your direction: when you enable an integration, invite a team member, or otherwise ask us to disclose information.
• Legal and safety reasons: when reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, or secure the Service.
• Business transfers: as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

5. Retention and deletion

We retain account information while an account is active and as reasonably necessary to provide the Service, resolve disputes, secure the Service, and meet legal obligations. Customer telemetry is retained according to the applicable project settings, customer instructions, and operational requirements.

Project owners can remove individual project resources through available Service controls. Account holders may request account deletion using the contact details below. Deletion from active systems may not be immediate, and limited copies can remain temporarily in backups, security records, or records we must retain by law. If your information was submitted by an App Logger customer, direct your request to the developer or organization responsible for that app first.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information. These include encrypted transport, hashed passwords and supported credentials, short-lived access tokens, scoped machine credentials, role-based project access, rate limiting, security logging with credential redaction, and revocation controls. No system is completely secure, so we cannot guarantee absolute security.

Customers are responsible for protecting their project credentials, limiting the personal information included in logs, and granting project access only to people who need it.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; or appeal a decision about a request. You may also have the right to complain to your local data-protection authority.

You can update certain account details in the Service. For other requests, contact us below. We may need to verify your identity and may retain information where an exception under applicable law applies. Authorized agents should provide proof of authority. We will not discriminate against you for exercising a privacy right.

8. International data transfers

App Logger and its service providers may process information in countries other than the country where it was collected. Where required, we use appropriate legal safeguards for international transfers. Data-protection laws in those countries may differ from the laws where you live.

9. Children

The Service is intended for developers and organizations and is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect a child’s personal information through an App Logger account. Customers using the SDK are responsible for obtaining any permissions required for their own applications and audiences.

10. Changes to this policy

We may update this policy as the Service or legal requirements change. We will post the revised policy here and update the effective date. If a change is material, we will provide additional notice where required by law.

11. Contact us

For privacy questions or requests, email privacy@id-makers.com. Please include enough detail for us to understand your request, but do not send passwords, API keys, access tokens, or sensitive log content by email.