Privacy policy

Who we are

PiRC is published by Justino Ltd, registered in England and Wales, company number 17215901, registered office 66 Paul Street, London EC2A 4NA, United Kingdom. We are the data controller for the personal data described here. Contact privacy@justino.co.uk.

Your relay, not ours

The apps connect only to the relay you join, which you or someone you trust runs. Your sessions, prompts, photos, the replies and the names of your machines pass through that relay and are not sent to us. Whoever runs the relay is responsible for what it holds; we have no access to it. In this version messages are not end-to-end encrypted, so the relay's operator could read them.

The mobile apps

The apps have no account, no advertising, no analytics and no crash reporting. On your device they keep:

• the device's keys for your relay, in the iOS Keychain or the Android Keystore, released by Face ID, a fingerprint or your passcode if the app's lock is on (the system checks these; the app never sees biometric data);
• your relay's address and your settings;
• recent chats, so they show at once, in the app's private storage, left out of backups.

The camera is used only to scan a join code, on the device. Photos you choose to send go to your relay and your pi session, not to us. Removing the app deletes what it kept.

Notifications and the push gateway

A phone in the background can be woken only through Apple's or Google's push service, so we run a push gateway, push.pirc.dev. If you allow notifications:

• the app sends the gateway its push token from Apple or Google, the platform, the app's version, and whether it is a development build; the gateway returns that token encrypted with its own key (a "handle"), which the app gives to your relay;
• when a session finishes or needs you, your relay sends the handle back to the gateway, which wakes your phone through Apple Push Notification service or Firebase Cloud Messaging (Google);
• the push carries no content: your phone then connects to your relay and writes the notification itself.

The gateway stores no tokens or handles. It sees the internet address of each app and relay that calls it, which our web server logs, with the time, for 14 days to keep the service running and protected from abuse. It keeps counts of registrations by platform and app version and of wakes by outcome, with no identifiers, and logs failures from Apple or Google without the token. On Android, Google's Firebase Cloud Messaging library on the phone also creates an installation identifier to deliver pushes, under Google's terms. Turning notifications off in the app removes the handle from your relay.

We process this to provide the notifications you asked for (performance of a contract) and to keep the gateway secure (our legitimate interests). Apple and Google process push tokens as part of their push services.

The web app

PiRC's web app runs on a server of yours. It sends us nothing.

This website

pirc.dev is hosted on Cloudflare Pages, which processes the request data any host sees (internet address, page, time, browser) to serve and protect it, as our processor. We use Google Analytics, which sets cookies, and Ahrefs Web Analytics, which does not, to understand how many people visit and which pages they read. Analytics data is kept for 14 months. We process it in our legitimate interest in running the website. If you email us, we keep your message to reply and for as long as the conversation needs; our mail is hosted by Fastmail, as our processor.

Transfers

Cloudflare, Google, Apple, Ahrefs and Fastmail operate internationally, so data may be processed outside the UK, under the safeguards UK law recognises, such as adequacy regulations and the International Data Transfer Addendum.

Children

PiRC is a tool for software developers and is not directed at children under 13.

Your rights

Under UK and EU data protection law you can ask us for a copy of your personal data, or to correct, erase, restrict, object to or transfer it, where those rights apply. Email privacy@justino.co.uk and we will reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Changes

If this policy changes, the date at the top changes with it, and the apps' store listings link here.