Privacy Policy for Testely
Last Updated: July 10, 2026
At **Testely** (referred to as "we", "us", or "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App") and the corresponding backend services (the "Services").
Please read this Privacy Policy carefully. By accessing or using the App and Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the App or use the Services.
---
1. Information We Collect
We collect information about you in a variety of ways. The information we may collect via the App and Services includes:
A. Personal Data
You voluntarily provide this information when you register an account, update your profile, or interact with features in the App:
* **Account Details**: Email address, unique username, phone number, and hashed password.
* **Profile Information**: Profile picture URL (if you upload a profile photo, stored via Cloudinary).
* **Referral Data**: Referral codes and associations (if you refer someone or are referred by another user).
B. User-Generated Content and Media
To facilitate Android closed testing and platform operations, the App requires you to upload media and content:
* **App Listings (for Developers)**: App title, description, category, Google Play Store download link, application logo, and screenshots.
* **Test Cycle Feedback**: Ratings (1 to 5 stars) and detailed comments/reviews submitted by testers.
* **Daily Check-In Proof**: Screenshots uploaded by testers to verify daily testing progress on the target application.
* **Payment & Transaction Proof**: Screenshots of transaction receipts (e.g., mobile wallets, bank transfer receipts) uploaded to request the purchase of in-app digital tokens ("stars").
C. Technical and Device Data
Our servers automatically collect technical data when you access or use the App:
* **Push Notification Tokens**: Firebase Cloud Messaging (FCM) tokens, which are collected and updated to deliver system notifications (e.g., when selected as a tester, when check-ins are reviewed, or when transaction statuses update).
* **Local Device Cache**: Preferences such as active language (English/Arabic), theme choices (light/dark mode), and notification preferences, which are stored locally on your device using `shared_preferences`.
* **Server Logs**: Log files containing IP addresses, browser/device configuration, system timestamps, and API endpoints accessed. This is used for security, rate-limiting, and debugging.
---
2. How We Use Your Information
We use the information we collect to operate, maintain, and improve our services, including:
* **Authentication & Verification**: To create your account, send email verification codes (OTPs), and process password resets.
* **Core Platform Operations**: To match Android developers with closed testers, track 14-day testing cycles, record daily check-ins, and deliver developer feedback.
* **Notification Delivery**: To send real-time push notifications regarding test status, wallet balances, and system reviews.
* **Transaction Processing**: To review uploaded screenshots of payment proofs and manually credit "stars" to your wallet.
* **Security & Troubleshooting**: To prevent fraudulent activity, implement rate limiting, and debug service interruptions.
---
3. Sharing and Disclosure of Your Information
We do not sell, rent, or trade your personal information. We may share your data with the following third-party service providers (data processors) who assist us in operating our platform:
* **Google Firebase (Firebase Cloud Messaging)**: Used to dispatch push notifications to your mobile device. FCM processes your device's unique token.
* **Cloudinary**: Used to securely host and deliver uploaded media, including screenshots, profile pictures, app logos, and transaction proofs.
* **Gmail SMTP (Google)**: Used to transmit transactional emails such as email verification and password reset verification codes.
* **Other Users (Platform Visibility)**:
* If you are a **tester**, the reviews and ratings you write will be visible to the developer of the app you are testing.
* If you are a **developer**, your app listing details, play store link, screenshots, and logos will be visible to testers who wish to join your test group.
We may also disclose your information if required to do so by law, to protect our rights, or in the event of a merger, acquisition, or sale of assets.
---
4. Data Security
We implement appropriate technical and organizational measures to maintain the safety of your personal information.
* All communications between the App and the server are encrypted in transit using Secure Socket Layer (SSL/TLS) via HTTPS.
* Sensitive data (like user passwords) is stored using secure hashing algorithms on our database.
* Critical authorization tokens are stored on the mobile device using secure local storage (`flutter_secure_storage`).
Please note, however, that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
---
5. Data Retention and Account Deletion
A. Data Retention Policy
We retain your personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, or as required by legal, regulatory, or compliance obligations.
B. How to Request Account and Data Deletion
Under Google Play Developer policies and global data protection laws (such as GDPR and CCPA), you have the right to request the deletion of your account and all associated personal data.
To request the permanent deletion of your account and data, please choose one of the following methods:
1. **By Email**: Send an email to **[INSERT_SUPPORT_EMAIL]** with the subject line "Account Deletion Request". Please include your registered email address and username in the body of the email.
2. **By Web Form / Support Desk**: [Optionally insert a link to your support desk/form here, or state that email is the primary method].
**What Happens Upon Deletion Request:**
* Within **[e.g., 7 to 14]** business days of receiving your request, we will permanently delete your user profile, email address, phone number, hashed password, FCM tokens, profile pictures, and any payment proof screenshots.
* All active app listings, join requests, and tester slots owned or held by your account will be cancelled.
* *Please note:* Written feedback comments and star ratings you previously submitted to developers will be anonymized (your username and profile picture will be removed, and the feedback will be marked as "Deleted User") to preserve the integrity of test cycle records for other developers.
* Transaction ledger records (like stars purchased or refunded) may be retained in an anonymized format where legally required for financial auditing.
---
6. Your Rights (GDPR & CCPA Compliance)
Depending on your geographical location, you may have the following rights regarding your personal data:
* **The Right to Access**: You have the right to request copies of your personal data.
* **The Right to Rectification**: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
* **The Right to Erasure**: You have the right to request that we erase your personal data, under certain conditions (see Section 5).
* **The Right to Restrict Processing**: You have the right to request that we restrict the processing of your personal data.
* **The Right to Data Portability**: You have the right to request that we transfer the data we have collected to another organization, or directly to you.
To exercise any of these rights, please contact us using the details below.
---
7. Children's Privacy
Our Services are not directed to children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal identifiable information from children. If we discover that a child under these ages has provided us with personal information, we will delete it immediately. If you are a parent or guardian and are aware that your child has provided us with personal data, please contact us.
---
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.
---
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you can contact us at:
* **Email**: mshehata065@gmail.com
* **Developer Name**: Mohamed Shehata Torky
* **Website**: https://www.torky.site/