Privacy Policy

1. Scope and privacy commitments

This Privacy Policy explains how PALEOS.IO, the operator of PALEOS.IO (PALEOS.IO, we, us, or our), processes personal information in connection with the current PALEOS.IO Service. The Service supports offline, security-first, distractionless Android applications and tools and includes public pages and Explorer, authenticated accounts, App Portal, The Digsite, Builder membership and Field Notes, profiles and limited community functions, PowerShell resources, calculators, news, guides, external links, transactional email, and moderation, account-security, and audit operations.

PALEOS.IO is designed to minimize collection. It does not use advertising analytics, cross-site behavioral tracking, marketing pixels, browser fingerprinting, canvas readback, font enumeration, session replay, heatmaps, behavioral profiling, or user-agent feature gating. It does not use personal information or Member Content to train a general-purpose artificial-intelligence model. It does not sell personal information or share it for cross-context behavioral advertising as those terms may be defined by applicable law. These statements do not prevent the disclosures described below.

This Policy does not govern information handled by third parties after you leave PALEOS.IO or interact with an external repository, app store, developer site, documentation provider, or other destination.

2. Information collected and why it is used

PALEOS.IO may process account and contact information such as email address, display name, account identifier, role, membership status, and support communications; authentication information such as password hashes, email-verification, recovery and one-time-code transaction records, sessions, revocation events, and sign-in outcomes; and acceptance evidence such as document versions, canonical hashes, locale, UTC acceptance time, acceptance-flow version, and related audit events. Passwords and one-time codes are not retained as plaintext. This information is used to create and administer accounts, authenticate users, maintain and protect sessions, deliver required messages, record legal acceptance, resolve disputes, and prevent or investigate misuse.

PALEOS.IO may process profile information, Builder Field Notes, links, images, and other content you choose to submit through an available community feature. It is used to provide, display to the audience and through the feature you selected, administer, secure, and moderate that feature. Do not include sensitive information or another person's personal information unless you are authorized to do so. PALEOS.IO cannot control what authorized viewers do with information once it is visible to them.

PALEOS.IO may process Builder membership status and records generated by the current test-mode billing workflow. Test-mode records do not mean that PALEOS.IO collects live production charges. PALEOS.IO may also process account, release or resource reference, quota outcome, daily authorization counter, timestamps, and audit events needed to authorize gated app delivery, administer the daily APK-authorization limit, prevent circumvention, and investigate misuse.

PALEOS.IO may process limited network, browser, device, request, session, endpoint, timestamp, error, security, moderation, and audit information needed to operate and debug the Service, maintain reliability, enforce authorization and quotas, prevent abuse, investigate incidents, and establish, exercise, or defend legal claims.

3. Cookies, service providers, and disclosures

PALEOS.IO uses strictly necessary Secure, HTTP-only, SameSite session cookies after completed sign-in to maintain authenticated sessions and support account security. Blocking necessary cookies can prevent sign-in or account features from working. PALEOS.IO does not use cookies or similar technologies for advertising, cross-site tracking, marketing pixels, session replay, heatmaps, fingerprinting, or behavioral profiling.

PALEOS.IO may permit personnel with a legitimate operational need and service providers to process information on its behalf when needed for hosting or infrastructure, database operation, transactional email, security, support, or test-mode billing. Current technologies and providers include Hostinger-hosted infrastructure, private PostgreSQL storage, Resend transactional email, and Stripe in test mode, subject to verification of the actual contracts, data locations, and roles before publication. Providers receive only information reasonably needed for their function, subject to applicable arrangements and law.

PALEOS.IO may disclose information when it reasonably believes disclosure is necessary to comply with law or legal process; protect the rights, safety, security, or property of PALEOS.IO, users, or others; investigate fraud, abuse, security incidents, or violations; or establish, exercise, or defend legal claims. Information may also be disclosed in connection with a proposed or completed reorganization, financing, sale, merger, or transfer of all or part of the Service or its assets as permitted by law. PALEOS.IO will not make a disclosure where applicable law prohibits it.

4. External destinations, retention, security, and incidents

PALEOS.IO may link to third-party repositories, app stores, developer sites, documentation, and other destinations. A link, listing, release note, rating, badge, or placement does not mean PALEOS.IO controls, audits, certifies, endorses, warrants, or accepts responsibility for that destination or its software, content, privacy practices, terms, or security. Review a third party's terms and privacy policy before providing information or downloading, installing, executing, purchasing, licensing, or relying on its software or content.

PALEOS.IO retains information only as long as reasonably necessary for account administration, authorized features, security, audit, moderation, legal compliance, dispute handling, and recovery. Needs differ by category. Removing visible content or closing an account may not immediately remove operational, audit, security, legal-hold, or recovery copies. PALEOS.IO may retain information longer where required or permitted by law.

PALEOS.IO uses safeguards intended to protect information, including transport encryption, server-side authorization, password hashing, verification codes, session protections, Secure HTTP-only SameSite cookies, access controls, and security and audit logging. These measures reduce risk; no website, provider, database, transmission, or storage system can guarantee absolute security. Use a unique password, protect email access and verification codes, and report suspected compromise through paleos.privacy@pm.me. PALEOS.IO will assess and address suspected incidents as appropriate and provide notices required by applicable law.

5. Rights, children, international processing, changes, and contact

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, opt-out, or an appeal concerning certain processing. These rights are not absolute and may be limited by security, fraud-prevention, legal, audit, and claims obligations. Submit a request through paleos.privacy@pm.me. PALEOS.IO may request information reasonably necessary to verify identity and authority and will respond within the period required by law.

PALEOS.IO is intended only for adults aged 18 or older and is not directed to children or teenagers. PALEOS.IO does not knowingly collect personal information from a person under 18. If you believe a minor has provided personal information, contact paleos.privacy@pm.me.

PALEOS.IO and its service providers may process information in countries or regions other than where you live. Where applicable law governs a cross-border transfer, PALEOS.IO will use the mechanism or safeguard that law requires.

PALEOS.IO may revise this Policy for changes to current features, information practices, law, or security. It will post an updated effective date and provide additional notice or obtain consent when required. A revision does not remove non-waivable rights. Privacy questions, requests, and complaints: paleos.privacy@pm.me. Security reports: paleos.privacy@pm.me. Legal notices: paleos.privacy@pm.me