Privacy Policy

This Privacy Policy explains how Andronix Apps ("Andronix", "we", "us") collects, uses and shares personal information when you use the Andronix Android app, the Andronix installer and the andronix.app website (together, the "Service").

If you choose to use the Service, you agree to the collection and use of information as described in this policy. We use the information we collect only to provide and improve the Service. We do not sell your personal information, and we do not share it with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Information we collect and how we use it

Your Andronix account

You need an Andronix account to make purchases and to restore them on another device. Accounts are managed by Google's Firebase Authentication.

• Email and password. When you sign up with an email and password, Firebase Authentication stores your email and a hashed form of your password. We never see your password.
• Google sign-in. When you sign in with Google, the sign-in is handled by Firebase Authentication. We receive your email address and profile picture. Your profile picture is loaded from Google when it is shown and is not stored by us.

We also store your email address with the records of your purchases, so that we can link purchases to your account and help you if something goes wrong. We use your email only to operate your account, to link your purchases to you, and to reply when you contact us. We do not send you promotional email.

Purchases

All purchases are made inside the Andronix Android app through Google Play Billing. Andronix does not sell anything on andronix.app or through any other payment processor.

When you make a purchase, Google Play sends us a record of it. We store it, linked to your Andronix account, so that we can unlock what you bought and restore it on any device where you sign in:

• the product you bought and the Google Play order ID and purchase token;
• the purchase time, the price, the currency and the country of the purchase;
• whether the purchase is still valid (for example, if it was refunded); and
• your account ID and email address.

We never receive your card, UPI, bank or other payment details. These are collected and handled by Google under the Google Payments Privacy Notice.

For purchases made in India, payments are settled through BillDesk Payments Private Limited, an RBI-licensed Payment Aggregator (Cross Border), and remitted to the Andronix Apps bank account.

Usage analytics in the app

The Andronix app sends usage events to our own, self-hosted analytics server (OpenPanel, at events.andronix.app) so that we can fix problems and improve the app. The events are: the app being opened, which distro and desktop you set up and whether the installation worked, which screens you open, and whether a purchase was started, completed or failed (with the product and price). Each event includes the app version. When you are signed in, events carry a pseudonymous ID derived from your account ID, so that we can count unique users. Events never include your email address or name. Your IP address is used only to work out an approximate country and city, and is not stored.

The app also includes Google Analytics for Firebase, which collects Google's standard, automatic app events. We do not send it any events of our own.

You can turn both off at any time in the app: Settings > Notifications & privacy > Share usage analytics. When it is off, the app sends no usage events and deletes any events waiting to be sent.

Installer telemetry

The Andronix installer (the andronix command you run in Termux) sends short reports to products.andronix.xyz about what it does, for example when an installation finishes or fails. A report contains:

• what happened (for example, an installation finished or failed) and at which step, how long it took and, if it failed, the kind of error;
• the distro and desktop environment;
• the installer version, your device's processor architecture, your Android version and which Termux build you use; and
• a random install ID created on your device, so that we can tell installs apart. It is not linked to your account or your device's hardware.

Reports do not include your email, your Andronix account, your device name or any files. Your IP address is used only briefly to prevent abuse and is not stored.

You can turn installer telemetry off with andronix telemetry off, or by setting the environment variable ANDRONIX_NO_TELEMETRY=1 or DO_NOT_TRACK=1.

Downloads

Free distros are downloaded from dl.andronix.app. When you download a Modded OS edition, our server checks that your account owns it and logs the request with your account ID. These logs are kept for up to 30 days.

Crash reports and log data

We use Firebase Crashlytics to detect crashes and errors in the app. When an error occurs, the app collects data called Log Data through this service. Log Data may include your device's Internet Protocol ("IP") address, device name, operating system version, the configuration of the app when the error occurred, the time and date, and other diagnostic statistics. We use this data only to fix problems and improve the app.

Notifications

We use OneSignal to send notifications, such as update announcements. OneSignal receives a notification token for your device. You can turn notifications off in the app (Settings) or in your Android settings.

The andronix.app website

The website uses our own OpenPanel server (events.andronix.app) to measure how the site is used. It records the pages you view, clicks on links that leave the site, and a few named actions: opening Google Play, opening the documentation, copying the install command (with the distro and desktop you picked), and viewing the supporters page. It also receives your browser and device type and the referring page. Your IP address is used only to work out an approximate country and city, and is not stored. The website does not use cookies and does not store anything in your browser for analytics, and analytics is switched off entirely if your browser sends a Do Not Track or Global Privacy Control signal.

Fonts are loaded from Google Fonts, which receives your IP address and basic browser information. The website has no sign-in. How to delete your account is explained at andronix.app/delete-account.

The documentation site

docs.andronix.app uses the same self-hosted OpenPanel analytics as andronix.app to see which pages are read, which commands are copied and what people search for, so we can improve the docs. It sets no cookies. It records page views, links you follow to other sites, the first line of a code block when you copy it, and the words you type into the docs search. It doesn't identify you. If your browser sends Do Not Track or Global Privacy Control, no analytics are loaded.

The Andronix Discord community

The Andronix community server on Discord (chat.andronix.app) runs on Discord, and Discord's own Privacy Policy applies to your use of Discord. To keep the server safe, we use Discord's built-in moderation tools and our own moderation bot, Andronix Audit, which runs on our own systems and is not a third-party service. Andronix Audit may read messages and the member list in the Andronix server, and only in that server, and uses them only to detect spam and scams and to enforce the server rules. We do not sell or share this information. Moderation logs are kept for no longer than 30 days and are then deleted.

For privacy or data requests about the Discord server, including deletion of moderation data about you, write to our Grievance Officer at grievance@andronix.app. For general help, write to support@andronix.app or ask in the server.

Problem reports

When you send a problem report from the app (Report a problem), we receive what you enter and a set of technical details, so that we can help you:

• the category and your description of the problem, and, if you choose to add them, your email address and a Google Play order ID;
• app and installer versions, and device facts: Android version, manufacturer and model, kernel, ROM, processor architecture, memory, free storage and the Android background process setting;
• Termux details (where it was installed from and its version), and details of the most recent installation (the command, distro, desktop, step and any error message), plus the results of compatibility checks;
• if you choose to attach it, the installer log and diagnostics output. Tokens, secret links and similar values are removed on your device and again on our server before anyone sees the report;
• up to three screenshots or photos, if you choose to attach them. The app removes location and other metadata (EXIF) from images on your device before uploading them; and
• the random install ID and, if you are signed in, your account ID and account email.

You can also start a report from Termux with andronix report. The installer gathers the details above, shows you exactly what will be sent and uploads it only if you agree. It then opens the app so you can finish the report. A report you never finish is deleted after about 24 hours.

We use problem reports only to provide support. To sort reports and draft replies, we may process them with AI models through the Vercel AI Gateway; the providers behind it do not use this data to train their models. We also send the full text of support messages to jev, a classification service by typesafeai hosted in the United States, to sort them. Reports are stored in a database on Railway. We send replies by email through Resend, and our support dashboard runs on Vercel.

Attached images are stored in private storage that only our support team can open. Problem reports and their images are kept for 90 days after the ticket is closed and are then deleted. They are also deleted when you delete your account.

When you contact us

If you email us, we receive your email address and the contents of your message, and we use them only to respond to you.

Termux and Linux distributions

Andronix does not bundle or distribute Termux. Termux is a separate, third-party app that you install from F-Droid, GitHub or Google Play, and it is governed by its own terms and privacy practices. The Linux distributions you install are developed by their own projects. Once installed, they run on your device, and we have no access to the files or data inside them.

Third-party services

The Service uses third-party services that have their own terms and privacy policies:

• Google Play Services and Google Play Billing
• Firebase (Authentication, Cloud Firestore, Realtime Database, Remote Config and Performance Monitoring)
• Google Analytics for Firebase
• Firebase Crashlytics
• OneSignal
• Google Fonts (website)
• Resend (support email)
• jev by typesafeai (classifying support messages; hosted in the United States)
• Railway (hosting for our servers, analytics and the support database)
• Cloudflare (file storage for downloads and problem report images, and hosting for the website)
• Vercel (support dashboard, and the Vercel AI Gateway for sorting reports and drafting replies)

Our analytics (OpenPanel) and installer telemetry run on servers we operate. This policy covers only the systems we operate. It does not cover the practices of these third parties. For example, if you are signed in to a Google account on your device, Google may collect data about your use of Andronix through the Google and Firebase services the app uses, under Google's own policies.

Your choices

• Usage analytics in the app: turn off Share usage analytics in Settings.
• Installer telemetry: run andronix telemetry off.
• Website analytics: turn on Do Not Track or Global Privacy Control in your browser.
• Notifications: turn off in the app or in your Android settings.
• Your account: delete it in the app or by email, as described below.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. They are sent to your browser by the websites you visit and are stored on your device.

The Service does not use cookies itself. However, third-party code and libraries used by the app may use cookies to collect information and improve their services.

Service providers

We may employ third-party companies and individuals for the following reasons:

• to facilitate our Service;
• to provide the Service on our behalf;
• to perform Service-related services; or
• to assist us in analysing how our Service is used.

These third parties have access to your personal information only to perform the tasks assigned to them on our behalf, and they are obligated not to disclose or use it for any other purpose.

Where your data is processed

We and our service providers may store and process your data on servers outside India, including in the United States and the European Union.

Security

We value your trust in providing us your personal information, so we use commercially acceptable means to protect it. However, no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to other sites

The Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. These external sites are not operated by us, so we strongly advise you to review their privacy policies. We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party sites or services.

Children's privacy

The Service is not directed at anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we delete it from our servers immediately. If you are a parent or guardian and you know that your child has provided us with personal information, please contact us so that we can take the necessary action.

Your rights under the Digital Personal Data Protection Act, 2023 (India)

For users in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act").

• Data Fiduciary: Andronix Apps (Amita Shukla, sole proprietor), Lucknow, Uttar Pradesh, India.
• Grievance Officer: Amita Shukla, reachable at grievance@andronix.app, with a response within 30 days.
• Data retention: account data is retained while your account is active and for up to 30 days after deletion, after which it is erased. After erasure, anonymised purchase and revenue records are kept for 8 years for tax and accounting purposes; they no longer contain your name, email or account ID. Usage analytics, website analytics and installer telemetry are kept for at most 13 months. We do not store IP addresses with analytics; we keep only the approximate country and city derived from them. Problem reports and attached images are kept for 90 days after the ticket is closed.
• Your rights: you may request access to, correction of, or erasure of your personal data, and you may withdraw consent at any time.

To exercise any of these rights, contact our Grievance Officer at grievance@andronix.app.

How to delete your account and data

You can request deletion of your account and associated personal data at any time:

• In the app: open Andronix, go to your Profile, and choose "Delete account".
• By email: write to grievance@andronix.app from your registered email address requesting account deletion.

Once verified, your account data, including the usage analytics and problem reports linked to your account, is erased from our systems within 30 days, except where we are required to retain certain records to comply with law. Anonymised purchase and revenue records are kept for 8 years for tax and accounting purposes; they no longer contain your name, email or account ID.

Deleting your account removes the link between you and your purchases, so you may not be able to restore them afterwards. Distros already installed in Termux are not affected. Deleting your account does not delete the records Google Play keeps of your purchases; those are governed by Google's own policies.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, so please review this page periodically. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Changes are effective immediately after they are posted on this page.

Contact us

If you have any questions or suggestions about this Privacy Policy, contact us at support@andronix.app.