Gitdeck Privacy Policy

Last updated: October 15, 2026

Who is responsible

Gitdeck is developed by Andrea Debernardi. For privacy requests and support, contact andrea@debbaweb.it. The product website is https://gitdeck.debbaweb.it.

Your accounts and project data

Gitdeck is a native client for GitHub, GitLab, and Forgejo. It connects directly to the providers and instances you choose. It processes account identifiers, profile information, repository content, issues, pull requests, comments, notifications, and related project metadata to display your work and perform actions you request. Your provider determines what your account can access. Gitdeck does not operate a backend that receives your provider credentials or project content.

Account credentials and optional ChatGPT credentials are stored in the iOS Keychain using device-only protection while unlocked. They are not included in AI prompts, Markdown renderers, or requests to unrelated image and download hosts. Preferences, reading history, repository observations, saved briefings, cached items, and follow-up reminders are stored on your device. Ordinary app data may be included in backups according to your Apple device settings; device-only Keychain credentials do not migrate through backups.

Optional artificial intelligence

On compatible devices, the default on-device AI uses Apple Intelligence to generate briefings locally. Gitdeck does not send those briefing inputs to an external AI service and does not automatically switch to ChatGPT.

If you choose ChatGPT, connect your ChatGPT account, and explicitly allow project data sharing, Gitdeck sends bounded account names and hostnames, repository names and statistics, and issue and pull request numbers, titles, metadata, and activity signals to OpenAI. These inputs may include private project information and information about other contributors. Only enable this feature if you are authorized to share that information. Briefings may be generated automatically when you open Today or a repository digest, or when you request regeneration.

OpenAI receives the requests associated with your selected ChatGPT account and processes them under its applicable terms, privacy policy, account settings, and retention rules. Gitdeck requests inference with store set to false; this is not a guarantee of zero provider retention or deletion. You can stop future project data sharing in Settings > Artificial intelligence, or select On-device AI. Turning sharing off does not delete requests already sent to OpenAI. Signing out attempts remote authorization revocation and removes the selected account's tokens locally; if revocation fails, Gitdeck explains how to disconnect it in ChatGPT settings.

Widgets, notifications, and device unlock

Gitdeck shares a limited display snapshot with its own widget through an iOS App Group. The widget does not receive provider tokens or contact providers. Widget titles can be hidden in Settings and are hidden when app lock is enabled. Local reminder alerts and the app icon badge require your notification permission. Gitdeck does not use a remote push service for those reminders. Optional app lock uses system authentication; Gitdeck does not receive biometric templates or your device passcode.

External services and links

Providers, authentication services, image hosts, and websites you open receive the network information needed to handle requests, such as an IP address, and may keep their own logs. Provider-authenticated requests go directly to the corresponding provider. External images, downloads, browser links, the developer profile, and GitHub Sponsors are governed by their operators' privacy policies. Gitdeck does not add advertising or analytics SDKs, sell personal data, or track you across apps and websites for advertising.

Retention and your choices

You can remove a connected provider account in Settings > Connected accounts. This removes its saved credentials from Gitdeck on this device; it does not revoke the provider token or delete your provider account. Revoke tokens and OAuth access in the provider's settings when needed. Removing an account also removes its follow-ups from the active app and widget snapshot after reload. Cached briefings, observations, and some preferences can remain in local storage until app data is removed.

To remove local app data, remove connected accounts and sign out of ChatGPT first, then delete the app using Delete App in iOS Settings. Offloading an app retains its data. iOS Keychain items can outlive app deletion, so deleting the app alone should not be used to remove saved credentials. Manage retained device backups separately in your Apple settings. Copies held by providers or OpenAI must be managed with those services.

Privacy requests

The app uses the data you choose to connect to provide its requested functionality. External AI processing is optional and requires your explicit permission, which you can withdraw for future requests. If you contact support, your email address and the information you send are used to respond and resolve your request and retained only as needed for that purpose and applicable obligations. Do not send passwords, tokens, or confidential repository content in support requests.

Depending on your location, you may have rights to access, correct, erase, restrict, or object to processing of personal data, request portability, withdraw consent, and complain to your local data protection authority. Contact andrea@debbaweb.it to exercise rights concerning data held by the developer. For data held by your Git provider or OpenAI, contact that service directly. Requests concerning information stored only on your device require action on your device.

Changes

Updates to this policy will be published on the product website and included in later app versions. A material change to the external AI data disclosure requires renewed consent before Gitdeck sends project data under that disclosure.