Privacy Policy

Last updated: July 23, 2026

The short version: Andon collects nothing. Your App Store Connect API key and your build data never leave your device. The app talks directly to Apple — there is no Andon server, no account, no analytics, no trackers.

Who we are

Andon (“Andon: Builds for Xcode Cloud”) is an iOS and iPadOS application published by Adrien Humilière (see the legal notice). For anything privacy-related, contact us via the support page.

What the app stores, and where

Your App Store Connect API key (Issuer ID, Key ID, and private key) is stored in the device Keychain, marked as accessible on this device only. It is used exclusively to sign requests to Apple’s App Store Connect API. It is never transmitted to us or to any third party, and it is excluded from any diagnostic export.
Build and TestFlight data (apps, workflows, builds, logs, test results, beta groups, tester feedback) is fetched from Apple’s App Store Connect API and cached locally on your device so the app stays useful offline. You can clear this cache at any time from Settings.
Preferences (refresh cadence, notification choices, appearance) are stored locally on your device.

What the app sends, and to whom

Andon communicates with exactly one service: Apple’s App Store Connect API (api.appstoreconnect.apple.com), over HTTPS, to fetch and act on your Xcode Cloud and TestFlight data on your behalf. Those requests are governed by Apple’s privacy policy and the terms of your Apple Developer account.

Andon has no server of its own. Nothing you do in the app is reported to us.

What we do not do

No analytics or usage tracking of any kind.
No third-party SDKs for advertising, tracking, or crash reporting.
No account creation, no email collection.
No sale, sharing, or transfer of any data — we never hold it in the first place.

Notifications

Build notifications are generated locally on your device by the app itself when it detects that a build finished. No push-notification service receives your data in the current version. If a future version offers server-relayed push notifications, it will be strictly opt-in, described in an updated policy before release, and designed so the relay never sees your API key.

Diagnostics

If you choose to export diagnostics from Settings to attach to a support email, the export contains the app’s own technical logs only. Your API key is never included. Sharing it is entirely at your initiative.

This website

This site is a static website: it sets no cookies and runs no analytics. As with any website, the hosting provider may process standard technical server logs (such as IP addresses) to deliver and secure the site; the provider is identified in the legal notice.

Your rights

Because Andon holds no personal data about you, there is nothing for us to access, rectify, export, or delete on our side — everything lives on your device, under your control. Deleting the app removes the Keychain entry and the local cache. If you have a privacy question or believe something is unclear, contact us; you also have the right to lodge a complaint with your local supervisory authority (in France, the CNIL).

Children

Andon is a professional developer tool and is not directed at children.

Changes to this policy

If the app’s behavior changes in a way that affects privacy — for example, an opt-in notification relay — this policy will be updated before release, with the “last updated” date above revised accordingly.