Last updated 24 October 2026
Data Processing Agreement
In short
When your app is installed by other people, Phinneas handles a little data about their devices on your behalf. This agreement says we only use it to run the service for you, keep it safe, and delete it when you ask. It’s part of the Terms of Service and applies automatically.
1.Roles
For data about the people and devices you share apps with (device names, device type, approval status, problem reports and invitations), you are the controller and Phinneas, an independent project run from India is the processor. For your own account data, we are the controller, as described in the Privacy Policy.
2.What we will do
- process that data only to deliver, update and manage your apps, as you instruct through the service;
- keep it confidential and make sure anyone who handles it is bound to confidentiality;
- protect it with appropriate security: encryption in transit, encrypted secrets, and per-account access rules;
- use only the providers on the Subprocessors page, under contracts that protect the data, and tell you before adding new ones;
- help you answer requests from the people using your apps, for example by removing a device;
- tell you without undue delay if we become aware of a breach affecting that data;
- delete it when you delete the app or your account, apart from backups that expire on their normal schedule.
3.Transfers
Data may be processed outside India, including in the United States and the European Union. Where the law requires it, transfers are covered by standard contractual protections with our providers.
4.Your part
You confirm you have a lawful reason to share your app with the people you invite and that you’ve told them what they need to know.
5.Questions and audits
We’ll answer reasonable questions about how we protect the data. Write to support@phinneas.me.
Questions? Write to support@phinneas.me.