PythonDeck Privacy Policy

Platform: iPhone and iPad (iOS/iPadOS) · Bundle ID: com.pythondeck.app
Last Updated: October 8, 2026

1. Overview

PythonDeck is a local Python development environment for iPhone and iPad: an embedded CPython runtime, editor, terminal, Notebook, package manager, Git client, debugger and an optional AI coding assistant. We follow the principle of “data minimization”. The app has no user account, no registration step and no backend of our own. Your projects, code, notebooks, settings and run history stay inside the app’s sandboxed storage on your device by default, and editing and running code work fully offline.

1.1 Purchase and Subscription Verification (StoreKit)

PythonDeck sells two products that unlock the same PythonDeck Pro tier: an Annual Membership (auto-renewable subscription) and a Lifetime Membership (non-consumable purchase). Pro unlocks remote development: an SSH terminal against a server you added, opening and writing back remote files over SFTP, and Git clone/push/pull over SSH. Those features talk to servers you own and configure yourself (see 1.5); we do not relay or retain their content. Verification runs entirely on your device through Apple's StoreKit, and consists of:

We do not operate a server that receives this information, and we do not write transaction identifiers, receipts or purchase history into your project files, exports or any analytics upload — the app embeds no analytics SDK. Payments, billing details and refunds are handled by Apple; we never see your payment method or Apple ID. Restoring purchases uses StoreKit's own sync, which asks Apple for the transactions tied to the signed-in App Store account. Subscription cancellation and management happen in Apple's subscription settings.

1.2 Data Stored Locally on Your Device

A small summary (project names you mark as favorites or open recently, plus the status of your last run) is shared with the iOS home-screen widget through an Apple App Group container so the widget can show and open your projects. The widget never runs Python code in the background.

1.3 Secrets and Credentials

If you choose to store sensitive values, they are written to the iOS Keychain on your device and are never included in exported files, logs or analytics. This covers:

These values are not synced to us or to any server we operate. You can view and delete them at any time under Settings → Secrets (Keychain).

1.4 Device Permissions You Grant

The app can expose system capabilities to the Python scripts you run (ios.camera, ios.photos, ios.location, ios.bluetooth, clipboard, share sheet, haptics, notifications). Each capability triggers the standard iOS permission prompt, is used only when you or your script explicitly requests it, and can be revoked in iOS Settings → PythonDeck. Data read through these permissions stays on your device unless your own code sends it somewhere. Access to health data (HealthKit) is not enabled in the current released version of this app.

1.5 Services You Connect to Yourself

Online features send data only to the endpoints you configure, and only while you actively use that feature — for example the prompt and code you submit to an AI provider, the PyPI requests when you install a package, your git push to a remote repository, or the SSH/SFTP traffic of remote development against a server you own. Those endpoints and credentials come from you: the AI features run on your own API key and provider account. Quota, invoicing and usage are settled directly between you and the provider — we take no part in that billing and have no access to your provider account.

Using these features therefore means complying with the provider's own terms of service and usage policies, including any rules on automated calls, content use and redistribution, at your own cost. The privacy policies of those services apply to that traffic, and we do not receive or store a copy of it on our own servers. You are also responsible for the servers you connect to and for the commands you run on them.

2. Information We Do Not Collect

3. Purpose of Data Usage

4. Third-Party Services Used

The services below are contacted directly from your device, at your instruction, for the corresponding feature. They are not used for advertising or cross-app tracking.

Service Purpose
AI provider of your choice (OpenAI, Anthropic or a compatible endpoint you configure) AI assistant chat and code edits; sends the prompt and the code you select
PyPI package index Searching package metadata and downloading packages you install
Git remotes you add (GitHub, GitLab or your own server) Clone, fetch, pull and push over HTTPS or SSH
SSH/SFTP hosts you add Remote terminal sessions and remote file browsing and editing
MCP servers you configure (experimental) Tool calls and notification streams for the AI assistant
Apple StoreKit / App Store Purchase of PythonDeck Pro (annual membership, lifetime membership), entitlement verification, restoring purchases and subscription management
Apple (system services) Keychain storage, permission prompts, App Store purchases, home-screen widget

Local open-source components (ZIPFoundation, Citadel/SwiftNIO) run entirely on your device and do not send data to their authors.

5. Data Retention and Deletion

Since we operate no servers, there is no copy of your data on our side to retain or hand over. If you contact us by email, the message you send is kept only as long as needed to answer you, and you can ask us to delete it.

6. Data Security

7. Export Compliance

PythonDeck bundles standard open-source cryptography libraries so that user scripts can implement their own security workflows. In particular:

This distribution falls within the "mass market" commodity category under U.S. Export Administration Regulations (EAR) §740.17(b)(1), which permits worldwide public distribution of standard encryption software through consumer channels such as the Apple App Store. No individual export license from the U.S. Bureau of Industry and Security (BIS) is required for PythonDeck's distribution scope.

Notice to users (EAR §740.17(e)(2)): Export and re-export of encryption software and technology is regulated by the United States and other countries. PythonDeck and its bundled cryptography components may not be lawfully exported or re-exported to any country or person listed on the U.S. Treasury's Specially Designated Nationals list or subject to a U.S. comprehensive embargo. By downloading or using this app, you agree to comply with all applicable export-control laws and to not use the app for any purpose prohibited by those laws.

8. Children’s Privacy

This application is a developer tool and is not intended for children under the age of 13, and we do not knowingly collect such information.

9. Policy Updates

We may update this Privacy Policy from time to time, for example when new features or permissions are added. The latest update date is displayed at the top of this page, and the current published version of this page prevails.

10. Contact Information

If you have any privacy-related questions, please contact:
lucky202408@gmail.com