Privacy Policy

Last updated: September 02, 2026

Summary for Humans (TL;DR)

At CODEGUYAKASH, we build developer tools, browser extensions, mobile apps, and desktop utilities. We do not sell your personal data or browsing history. Whenever possible, our tools process data locally on your device (Local-First). Where cloud servers or AI APIs are needed, data is encrypted and never used to train public models.

1. Introduction & Scope

This Privacy Policy governs all applications, browser extensions, add-ons, desktop software, mobile apps, web applications, SaaS platforms, APIs, and digital tools developed by CODEGUYAKASH ("we", "us", or "Developer"), accessible via codeguyakash.in, legal.codeguyakash.in, official app stores, and extension marketplaces (see our complete Products & Tools Directory).

By installing, downloading, or using our software, you agree to the handling of information outlined in this policy.

2. Local-First & Zero Data Collection Philosophy

Our primary design principle is Local-First. Most of our standalone utilities (formatters, converters, regex tools, offline extensions) run 100% locally inside your browser or device memory.

Zero Remote Uploads: Files and code snippets processed in offline-capable tools are executed in client-side WebAssembly, JavaScript, or native code and are never sent to external servers.
No Background Telemetry: We do not log keystrokes, clipboard data, or private user files.

3. Browser Extensions & Add-ons Specific Policy

This section applies to extensions on Chrome Web Store, Brave, Mozilla Firefox Add-ons (AMO), and Microsoft Edge Add-ons, including:

Seenify - Email Tracker: (Website | Chrome / Brave Web Store | Firefox AMO | Edge Add-ons) — Real-time email tracking & read receipts for Gmail.
Web Shield: (Website | Chrome / Brave Web Store | Firefox AMO | Edge Add-ons) — Anti-phishing, privacy shielding, and malicious domain protection across Chrome, Brave, Firefox, and Edge.

We strictly comply with Chrome Web Store and Mozilla Add-on developer policies. We do not sell user data, inject tracking cookies, or harvest browsing history.

Permission	Purpose	Data Transmitted?
`storage` / `chrome.storage.local`	Stores extension configuration, user preferences, and custom rules in your local browser profile.	No (Local Only)
`activeTab` / `tabs`	Reads tab URL only when you explicitly click the extension action or invoke protection checks.	No
`scripting` / `content_scripts`	Injects helper UI (e.g. tracking checkmarks on Gmail compose) or DOM enhancements on user-approved pages.	No
`declarativeNetRequest`	Evaluates domain blocking rules on-device for security & anti-phishing protection.	No
`alarms` / `contextMenus`	Schedules local cleanup or adds right-click shortcuts.	No
`host_permissions`	Used strictly where an extension interacts with specific developer APIs.	Direct to API

4. Mobile Applications (Android & Google Play Store)

This section applies to mobile apps distributed via the Google Play Store (Developer: codeguyakash):

AutoAssist – Auto SMS Reply (app.codeguyakash.assist): (Google Play | Terms)
Uses READ_PHONE_STATE, READ_CALL_LOG, SEND_SMS, and READ_CONTACTS strictly on-device to detect incoming calls and trigger automated SMS replies when busy/driving. Zero call or SMS history is uploaded to cloud servers.
Drop Coffee (app.codeguyakash.dropcoffee): (Google Play | Terms)
Standalone offline casual game. Requests zero sensitive permissions, uses no analytics SDKs, and collects zero personal data.
Relay (app.codeguyakash.relay): (Google Play | Terms)
Peer-to-peer Bluetooth communication. Uses BLUETOOTH_SCAN, BLUETOOTH_CONNECT, BLUETOOTH_ADVERTISE, and ACCESS_FINE_LOCATION (Android 11- Bluetooth scanning). Messages are transmitted directly between local devices without cloud storage or intermediate routing.
App Permissions Explorer (in.codeguyakash.permissionsexplorer): (Google Play | Terms)
Security audit utility. Uses QUERY_ALL_PACKAGES strictly in-memory to display installed app permissions on-screen. Never transmits package lists or telemetry to any external server.
Dev Launcher (app.codeguyakash.launcher): (Google Play | Terms)
Minimalist Android home screen launcher. Uses HOME package querying and VIBRATE for haptic feedback. All customizations remain 100% on-device.

5. Desktop Software (macOS, Windows, Linux)

When using native desktop applications (.dmg, .exe, .msix, .deb, .AppImage):

Desktop apps access only specific files or folders you explicitly open.
License verification sends only the license key, an anonymized hardware hash, and app version to our license server.
Software updates check our CDN without attaching personal identifiers.

6. Web Applications & Cloud SaaS Tools

For cloud-hosted web apps requiring user accounts:

Account Info: Email address, display name, and hashed credentials (or OAuth tokens via Google/GitHub).
User Data: Projects and settings are stored securely in encrypted cloud databases (Supabase / Cloudflare D1).
Server Logs: Standard IP and timestamp logs to prevent DDoS attacks and maintain security. Logs are purged regularly.

7. AI & Large Language Model (LLM) Features

For tools integrating AI APIs (OpenAI, Anthropic Claude, Google Gemini):

No Model Training: Under our enterprise API agreements, your inputs and code snippets are never used to train public foundation models.
Bring Your Own Key (BYOK): Prompts travel directly from your client to the AI provider using your own encrypted API key.

8. Payments & Financial Data

Transactions are processed via PCI-DSS Level 1 compliant gateways: Stripe, Lemon Squeezy, Razorpay, Google Play Billing, and Apple StoreKit. We do not store full credit card details on our servers.

9. Third-Party Sub-Processors

We partner with vetted infrastructure providers: Cloudflare (CDN/Edge), Supabase (PostgreSQL), Firebase (Push Notifications), Google AdMob (Ads in select free apps), and Sentry (Crash Telemetry). See our Sub-processors Directory.

10. Data Security & Storage

All web traffic uses Modern TLS 1.3 / HTTPS encryption in transit. Cloud databases are protected with AES-256 encryption at rest and multi-factor authentication.

11. Data Retention & Deletion

Local data can be cleared instantly in browser settings. For cloud account deletion, email privacy@codeguyakash.in. Records are permanently purged within 30 days.

12. International User Rights (GDPR, CCPA, India DPDP Act)

You have the right to access, rectify, export, and delete your personal information, or object to processing, with zero discrimination.

13. Children's Privacy (COPPA)

Our software is not intended for children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children.

14. Changes to This Policy

Updates will be posted directly to this page with a revised "Last updated" date.

15. Grievance Officer & Contact Information

In compliance with India Information Technology Rules, 2021:

Grievance Officer: Akash (CODEGUYAKASH)
Email: privacy@codeguyakash.in / legal@codeguyakash.in
Website: https://codeguyakash.in