Legal
Effective date: May 2025
When you submit a review request, we collect the information you provide: your name, email address, app name and description, and any materials you choose to upload. This may include screenshots, build files (APK, XAPK, AAB, IPA), repository links, ZIP exports, live web app URLs, internal builds, or demo access. We do not require source code to begin an engagement — you choose what you share.
We use submitted materials solely to perform the review or release-intelligence analysis you requested. Your contact details are used to communicate scope, findings, and invoicing. We do not sell, rent, or share your information with third parties for marketing purposes.
Files uploaded during a review — including APKs, XAPKs, IPAs, AABs, source code archives, screenshots, and internal builds — are used exclusively for the review you requested. Uploaded materials are never used to train, fine-tune, or improve any public or private AI model. You retain full ownership of all code, assets, and product materials you share. Files are stored with restricted internal access and removed after review completion. Customer data is isolated per engagement.
If you grant GitHub or repository access, it is always read-only. We do not deploy, modify, fork, or retain copies of your repository beyond the review period. Access can be revoked by you at any time. If you provide a live web app URL, it is accessed solely for production-readiness and runtime integrity review purposes. We do not retain session data, credentials, or interaction records from live app access.
Submitted materials — including source code, build artifacts, screenshots, and internal assets — are never used to train, benchmark, or improve any publicly available AI model. This applies to all review types, including automated and human-reviewed engagements.
Uploaded artifacts are removed after review completion. Retention windows are temporary by default. Email correspondence is retained for a reasonable period for support and audit record purposes. If you request deletion of your data, contact us at hello@getbrama.com and we will respond within 30 days.
Brama may use infrastructure and tooling from third-party providers (hosting, email delivery, storage) to operate the platform. These providers are bound by their own privacy policies. We do not authorize third parties to use your submitted data for their own purposes.
All data in transit is encrypted via HTTPS/TLS. Uploaded files are stored with restricted internal access. No method of transmission or storage is 100% secure. If you have specific security requirements for enterprise or sensitive workloads, contact us before submitting.
Depending on your jurisdiction, you may have the right to access, correct, or request deletion of personal data we hold. To exercise any of these rights, contact us at hello@getbrama.com.
We may update this Privacy Policy from time to time. Material changes will be noted on this page with a revised effective date. Continued use of Brama after changes constitutes acceptance of the updated policy.
For privacy-related questions, contact us at hello@getbrama.com.