WeaveHubTECHNOLOGIES
Menu

PocketOps Privacy Policy

Effective: September 19, 2026

WeaveHub Technologies LLC (“WeaveHub,” “we,” “us,” or “our”) operates the PocketOps mobile application for iOS and Android (“App”). This Privacy Policy describes how we collect, use, and protect information when you use PocketOps.

PocketOps is free. There are no subscriptions, and we show no advertisements. Your edge provider credentials are stored only on your device and are never sent to WeaveHub.

1. Information We Collect

1.1 Account Information

PocketOps requires an account. You can sign in with an email address and password, or with your Google account. Authentication is handled by Firebase Authentication, a service provided by Google LLC, which receives and stores your email address and a unique account identifier. We use this to sign you in and to keep your settings tied to your account.

1.2 Provider Credentials

You may add API credentials for supported providers such as Cloudflare and Fastly. These are stored only on your device, in the iOS Keychain or in Android’s EncryptedSharedPreferences, and are never transmitted to WeaveHub or to any analytics service. When you use the App, your device calls the provider’s API directly.

1.3 Domain Registration Details

If you register a domain through the Cloudflare Registrar feature, the App collects the registrant contact details that Cloudflare requires: name, optional organization, email address, phone number, and postal address. Your device sends these directly to Cloudflare to complete the registration, and the charge is applied to your own Cloudflare billing profile. WeaveHub does not receive, store, or process these details. Domain registrations are real purchases and cannot be refunded.

1.4 Crash Reports and Diagnostics

PocketOps uses Firebase Crashlytics (Google LLC) to report crashes and errors. Crash reports include the device model and operating system version, the App version, a random installation identifier, crash stack traces, and basic device state such as available memory. Crash reporting is always on, so we can fix defects that would otherwise go unreported.

1.5 Product Analytics

PocketOps can send anonymous usage analytics to PostHog and Google Analytics for Firebase. On first launch the App asks whether you want to share this data, and you can change your answer at any time in Settings > Privacy. If you decline, analytics are switched off.

Analytics events record which screens you visit, which features you use, and whether actions such as provider setup succeeded or failed. Your account identifier is sent only as an irreversible SHA-256 hash. Error messages are limited to the short text shown on screen.

1.6 Information We Never Collect

  • Provider API keys, tokens, or passwords
  • DNS records, firewall rules, zone settings, or any configuration you manage through provider APIs
  • The contents of provider API requests or responses
  • Location data
  • Advertising identifiers

2. How Your Data Flows

  • Device to provider APIs: Requests you make in the App travel directly from your device to the provider, such as api.cloudflare.com or api.fastly.com. WeaveHub does not proxy, intercept, or log this traffic.
  • Device to Google: Firebase Authentication receives your sign-in details. Crashlytics receives crash reports. Google Analytics for Firebase receives usage events when you have allowed analytics.
  • Device to PostHog: Usage events, when you have allowed analytics.
  • Device to Cloudflare: Registrant contact details, only when you register a domain.

3. How We Use Information

  • Accounts: To sign you in and keep your profile settings.
  • Defect resolution: To diagnose and fix crashes and errors.
  • Product improvement: To understand which features are used and where setup fails.

We do not use your information for advertising or profiling, and we do not sell, rent, or trade it.

4. How We Share Information

We share information only with the service providers that operate parts of the App on our behalf, and with the provider you direct the App to use:

  • Google LLC: Firebase Authentication (account details), Firebase Crashlytics (crash reports), and Google Analytics for Firebase (usage events).
  • PostHog, Inc.: Usage events, when you have allowed analytics.
  • Cloudflare, Inc.: Registrant contact details, only when you register a domain.
  • Legal obligations: We may disclose information where required by law or enforceable governmental request.

5. Data Retention

  • Account records: Kept until you ask us to delete your account.
  • Credentials and local data: Kept on your device until you delete them in the App or uninstall it.
  • Crash reports: Retained by Firebase Crashlytics for up to 90 days.
  • Analytics events: Retained for up to 12 months.

6. Deleting Your Data

6.1 Delete Your Account and Associated Data

To request deletion of your PocketOps account and the data associated with it, send a request through our contact form, selecting PocketOps as the product, and include the email address you use to sign in. We will confirm and complete the request within 30 days.

Deleted on request: your Firebase Authentication account record, including your email address and account identifier; the analytics profile linked to your hashed account identifier; and any crash records linked to your installation.

Kept afterwards: nothing that identifies you. Aggregated counts that cannot be traced back to you may remain in analytics reports. Records we must keep to meet a legal obligation are retained only for as long as the law requires.

Not held by us: your provider credentials and your domains. Credentials exist only on your device, and domains you register belong to your Cloudflare account. Delete or transfer those through Cloudflare.

6.2 Delete Data on Your Device

  • Delete a provider profile in the App to erase its credentials from your device.
  • Settings > Delete All Local Data erases every profile and credential stored on the device.
  • Uninstall the App to remove all remaining local data.

6.3 Turn Off Analytics

Open Settings > Privacy and switch off analytics. The App stops sending usage events immediately.

7. Data Security

  • Provider credentials are stored in the iOS Keychain or Android EncryptedSharedPreferences, both backed by device encryption.
  • All network communication uses TLS. The App refuses unencrypted connections.
  • If you set an App PIN, it is stored as a salted PBKDF2 hash, never as plain text. Biometric unlock is available where the device supports it.

8. Children’s Privacy

PocketOps is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information to us, please contact us and we will delete it.

9. International Data Transfers

WeaveHub is based in the United States. Data processed by Google, PostHog, and Cloudflare may be transferred to and processed in the United States or other countries where those companies operate. By using PocketOps, you acknowledge that this data may be processed outside your country of residence.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where practicable, through an in-app notice. Your continued use of PocketOps after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

WeaveHub Technologies LLC
Email: Contact Us