Privacy Policy
Last updated: October 13, 2026
Summary
- Your app file stays on your device. Adaptwise Scan analyzes your APK or AAB in your browser. We never receive the file.
- We collect little.
- Your email, if you join the waitlist or ask for a report.
- Contact details, if you send an inquiry.
- Scan results, only to write the full report you request (not stored).
- Basic, cookieless website analytics.
- We don't sell or share your personal information for advertising, and we don't use advertising cookies.
- You control your data. Unsubscribe anytime, and ask us to access or delete your information at privacy@adaptwise.io.
1. Who we are
Stdio Labs LLC, a Wisconsin limited liability company doing business as Adaptwise, is responsible for your personal information under this policy ("Adaptwise," "we," "us"). Contact: privacy@adaptwise.io, or by mail in Baldwin, Wisconsin, USA.
This policy covers our websites (adaptwise.io, adaptwise.dev, adaptwise.app, getadaptwise.com), Adaptwise Scan, our waitlist, emails and contact forms (the "Services"). Paid products will have their own privacy terms or a data processing agreement where needed.
2. What we collect
| Category | What | When | Source |
|---|---|---|---|
| Contact details | Email address; optionally name, company, role and message | Waitlist, report request, newsletter, contact or enterprise inquiry form | You |
| Scan results for your report | Whether the file is an APK or App Bundle and its overall result; each native library's path, CPU architecture and pass or fail result with reasons. Used only to write and send your report, then discarded | Only when you request the full report by email | Your browser, after you request it |
| Communications | Emails and messages you send us. We don't track whether you open or click our emails | When you contact us or receive our emails | You and our email provider |
| Anonymous scan statistics (on by default; untick "Share anonymous results" to opt out) | For each native library: its fingerprint (hash), file name, size, CPU architecture and pass/fail result, plus the scan date and the version of our checks that produced the result. Never the app file, the app's package name, your email or your IP address | When you scan an app with the box ticked | Your browser |
| Technical and usage data | Pages viewed, referrer, approximate country (from IP, not stored), browser and device type, and events such as "scan started" or "report requested" | When you visit the Sites | Collected automatically, cookieless (see section 6) |
| Security data | IP address and request metadata, processed by Cloudflare to run and protect the Services. We don't keep our own logs of IP addresses | When you use the Services | Collected automatically |
What we don't collect:
- your app file
- your source code
- payment details (no payments happen on the free Services)
- sensitive personal information
Please don't include personal data about other people in messages to us.
3. How we use it and why (legal bases)
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Deliver the report you asked for, and answer your inquiries | Performing a contract, or taking steps at your request |
| Send waitlist, product and newsletter emails, only after you confirm your subscription through the link we email you | Consent (you can withdraw it anytime) |
| Keep the Services secure, prevent abuse and enforce our Terms | Legitimate interests |
| Understand Site usage and improve the Services using cookieless, aggregated analytics | Legitimate interests |
| Improve SDK compatibility knowledge from anonymous scan statistics (collected without your email, IP address or app package name) | Legitimate interests (on by default; untick "Share anonymous results" to opt out) |
| Build and publish aggregated statistics from anonymous scan statistics (for example, which SDK versions are misaligned) to improve our SDK knowledge and publish ecosystem reports | Legitimate interests |
| Comply with legal obligations and defend legal claims | Legal obligation; legitimate interests |
Our use of data:
- We don't use your personal information for automated decisions that have legal or similarly significant effects on you.
- We don't use your personal information to train AI models.
- De-identified, aggregated statistics, which don't identify you, your organization or your app, may be used to improve our Services.
4. Who we share it with
We share personal information only with service providers who process it for us under contract and following our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. (Workers, D1) | Website and API hosting; database | Global edge network; our database is stored in the EU |
| Cloudflare, Inc. (Cloudflare Email Service) | Sending reports and other emails you request | US and global edge network |
| Cloudflare, Inc. (Turnstile) | Checking that report and contact forms are used by people, not bots | Global edge network; configured to set no cookie |
| Cloudflare, Inc. (Cloudflare Web Analytics, cookieless) | Aggregated website analytics | US and global edge network |
We may also disclose information:
- if the law requires it, or to protect rights, safety and security
- as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it
We do not sell personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined in US state privacy laws.
5. International transfers
We are based in the United States, and our providers may process data in the US and other countries. When we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where a provider is certified. Copies are available on request.
6. Cookies and analytics
The Sites currently set no cookies and use no browser storage. Our analytics are cookieless and don't track you across sites. See our Cookie Notice for details. If this changes, we will update this policy and the Cookie Notice and ask for consent where required.
7. How long we keep it
| Data | Retention |
|---|---|
| Report requests (email, and name and company if you gave them) | 12 months, then deleted. We don't store your scan results; we email them to you |
| Marketing consent and newsletter email | Until you unsubscribe or ask us to delete it. We then keep a suppression record (email and date) so we don't email you again, and the record of your consent for 3 years as proof |
| Contact and inquiry messages | 24 months after our last interaction, unless they lead to a contract |
| Anonymous scan statistics | Kept indefinitely; never linked to an email, package name or IP address |
| De-identified, aggregated statistics | Kept indefinitely (they are not personal information) |
| Server logs | We don't keep server logs with IP addresses. Our hosting provider, Cloudflare, processes request data to protect the service under its own retention |
| Email delivery records | Kept by our email provider (Cloudflare) for 30 days |
| Analytics | Aggregated; no personal identifiers kept |
8. Security
We use reasonable technical and organizational measures to protect personal information. These include:
- encryption in transit
- access controls and least-privilege access
- separating operational data from aggregated statistics
No method of transmission or storage is completely secure, so we can't guarantee absolute security. To report a security issue, see our Vulnerability Disclosure Policy.
9. Your rights and choices
Everyone:
- You can unsubscribe from marketing emails using the link in every email, including one-click unsubscribe in email apps that support it.
- You can ask us to access, correct or delete your personal information at privacy@adaptwise.io.
EEA, UK and Switzerland. You have the right to:
- access, rectify or erase your personal information
- restrict or object to its processing
- data portability
- withdraw consent at any time (this doesn't affect processing done before you withdrew)
You can also complain to your local data protection authority.
US states (including California, Colorado, Connecticut, Virginia and others with privacy laws). Depending on where you live, you may have the right to:
- know what personal information we process and access it
- correct or delete it
- get a copy
- opt out of sale, sharing, targeted advertising or profiling (we don't do these)
- not be discriminated against for exercising your rights
You may use an authorized agent. We will verify requests using information we already hold, such as your email. If we decline a request, you may appeal by replying to our decision; if the appeal is denied, you may contact your state attorney general.
California categories (past 12 months):
- Collected: identifiers (email), professional information you choose to give (company, role), internet activity (cookieless site usage), and commercial information limited to report requests.
- Sold or shared: none.
- Retention: see section 7.
We respond within the time required by applicable law (generally 30 days under GDPR and 45 days under US state laws).
10. Children
The Services are for professionals and are not directed to children. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
11. Do Not Track and Global Privacy Control
We don't track you across sites. We treat Global Privacy Control signals as a request to opt out of sale or sharing, although we do neither. If your browser sends one, the Scan's "Share anonymous results" box also starts unticked.
12. Changes
We will post updates here with a new "Last updated" date. If a change is material, we will notify you, for example by email if you subscribed. We keep previous versions of this policy and will send you a copy on request.
13. Contact
Stdio Labs LLC (Adaptwise), Baldwin, Wisconsin, USA, privacy@adaptwise.io