ANDON
Privacy Policy
Last updated: July 31, 2026
The short version: Andon collects nothing. Your App Store Connect API key and your build data never leave your device. The app talks directly to Apple — there is no Andon server, no account, no analytics, no trackers.
Who we are
Andon is an iOS and iPadOS application published by Adrien Humilière (see the legal notice). For anything privacy-related, contact us via the support page.
What the app stores, and where
- Your App Store Connect API key (Issuer ID, Key ID, and private key) is stored in the device Keychain, marked as accessible on this device only. It is used exclusively to sign requests to Apple’s App Store Connect API. It is never transmitted to us or to any third party.
- Build and TestFlight data (apps, workflows, builds, logs, test results, beta groups, tester feedback) is fetched from Apple’s App Store Connect API and cached locally on your device so the app stays useful offline. You can clear this cache at any time from Settings.
- Local settings, such as the favorite workflow used by widgets and the Control Center control, are stored on your device.
- Widgets, Shortcuts, and search work from a local snapshot of your app names and build statuses; app names and statuses are also indexed in the system Spotlight index on your device (entries expire after 14 days). Both are cleared when you remove your key.
What the app sends, and to whom
Andon communicates only with Apple’s servers, over HTTPS: the App Store Connect API (api.appstoreconnect.apple.com) to fetch and act on your Xcode Cloud and TestFlight data on your behalf, and Apple’s content delivery network for the images and files that API references (app icons, tester avatars, feedback screenshots, build artifacts). Those requests are governed by Apple’s privacy policy and the terms of your Apple Developer account.
Andon has no server of its own. Nothing you do in the app is reported to us.
What we do not do
- No analytics or usage tracking of any kind.
- No third-party SDKs for advertising, tracking, or crash reporting.
- No account creation, no email collection.
- No sale, sharing, or transfer of any data — we never hold it in the first place.
Notifications
The current version sends no notifications, and no push-notification service receives your data. If a future version offers server-relayed push notifications, it will be strictly opt-in, described in an updated policy before release, and designed so the relay never sees your API key.
This website
This site is a static website: it sets no cookies and runs no analytics. It is hosted on GitHub Pages; as with any website, the host may process standard technical server logs (such as IP addresses) to deliver and secure the site, as described in the GitHub privacy statement. The provider is identified in the legal notice.
Your rights
Because Andon holds no personal data about you, there is nothing for us to access, rectify, export, or delete on our side — everything lives on your device, under your control. Deleting the app removes the Keychain entry and the local cache. If you have a privacy question or believe something is unclear, contact us; you also have the right to lodge a complaint with your local supervisory authority (in France, the CNIL).
Children
Andon is a professional developer tool and is not directed at children.
Changes to this policy
If the app’s behavior changes in a way that affects privacy — for example, an opt-in notification relay — this policy will be updated before release, with the “last updated” date above revised accordingly.