Privacy Policy for Zip2Git
Privacy Policy for Zip2Git
Zip2Git is an open, privacy-first developer utility for Android. We do NOT collect, store, sell, or transmit any personal data, source code, or credentials to any third-party or proprietary servers. All operations happen directly between your device and the official GitHub API.
1. Introduction
This Privacy Policy explains how Zip2Git ("we", "our", or "the app") handles your data. Zip2Git is designed to help developers directly commit and push zip archives and project folders into GitHub repositories directly from Android mobile devices.
2. Information We Handle & How It Is Used
A. GitHub Personal Access Tokens (PAT)
- Collection: To communicate with your GitHub account, you provide a GitHub Personal Access Token (classic or fine-grained).
- Storage: Your token is stored locally on your device using encrypted, private Android storage (Android Keystore / Encrypted Preferences).
- Transmission: The token is transmitted only over encrypted HTTPS directly to official GitHub servers (
https://api.github.com) to authorize your Git operations. - No Third-Party Access: We never transmit, log, or share your token with any external server, developer server, or third party.
B. Source Code & Zip Archive Files
- Processing: When you select a .zip file or folder, archive extraction, file hashing (Git SHA-1 tree calculation), and diff comparisons take place 100% locally on your device in memory.
- Uploads: Your files are uploaded directly to the GitHub repository you designate via the official GitHub Git Database API. At no point does your code pass through any middleman or proxy server.
C. Analytics and Tracking Data
- Zip2Git contains NO advertising SDKs, NO third-party tracking libraries, and NO telemetry trackers.
- We do not collect device identifiers, advertising IDs (AAID), IP logs, or personal identity information.
3. Android System Permissions
Zip2Git only asks for standard permissions required to perform its core Git functionality:
| Permission | Type | Purpose |
|---|---|---|
INTERNET |
Standard | Used strictly to communicate directly with official GitHub APIs (api.github.com) to push Git commits and read repository metadata. |
ACCESS_NETWORK_STATE |
Standard | Used to check whether your device has an active internet connection before initiating repository commits. |
Note: Zip2Git uses Android's modern Storage Access Framework (SAF) system picker. It does not request or require broad read/write storage permissions (such as MANAGE_EXTERNAL_STORAGE or READ_EXTERNAL_STORAGE).
4. Third-Party Services
Zip2Git interacts directly with:
- GitHub (GitHub, Inc.): For repository authentication, tree creation, blob uploading, and commit referencing. Your use of GitHub's services is governed by the GitHub General Privacy Statement.
5. Data Retention & Deletion
Because all credentials, history, and files are stored strictly on your local device:
- You can delete your stored GitHub token at any time by tapping the "Logout" / "Remove Token" button in the app.
- You can clear all push history and cached settings by clearing the app data in your Android system settings (Settings > Apps > Zip2Git > Storage > Clear Storage / Clear Data) or by uninstalling the application.
6. Children's Privacy
Zip2Git is a software development utility and is not directed towards children under the age of 13. We do not knowingly collect any personal information from children.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect improvements or regulatory changes. Any updates will be posted on this page with a revised "Last Updated" date.
8. Contact Us
If you have any questions, concerns, or feedback regarding this Privacy Policy or Zip2Git, please contact: