Privacy Policy

Last updated: September 16, 2026

1. Who we are

HackerDroid ("we", "us", "the app") is an AI chatbot application. This policy explains what information we collect when you use it and how it is used.

2. Information we collect

• Account information: when you sign in with Google, we receive your name, email address, and profile picture from Google.
• Chat content: the messages you send, and any files/images you attach, are processed to generate a response.
• Usage data: message counts (for the daily limit), XP/rank progress, and achievement unlocks.
• Tool input: when you use a security/OSINT command (e.g. checking a domain, IP, or password), the value you provide is sent to the relevant lookup service to fetch a result. See Section 5 for specifics on what stays local to your browser.

3. How we use your information

We use this information to operate the chat, enforce fair-use message limits, track your gamification progress (XP, rank, achievements), and improve the app. We do not sell your personal information.

4. Third-party processors

• Google — for authentication (Sign in with Google).
• Supabase — our backend database and authentication provider, which stores your account, chat, and usage data.
• Google Gemini API — processes your chat messages and attached files to generate AI responses, and may use Google Search to answer time-sensitive questions.
• Free public lookup APIs — our OSINT/security tools query public services (e.g. RDAP/WHOIS registries, ip-api.com, Cloudflare DNS, crt.sh certificate transparency logs, CoinGecko, open.er-api.com, HaveIBeenPwned, GitHub/GitLab/Reddit/Dev.to/npm/Telegram for username checks) to return results. Only the specific value you provide (e.g. a domain or IP) is sent to that specific service.

5. Data that stays in your browser

Some tools are designed so sensitive input never leaves your device in full: phone number parsing, photo EXIF metadata extraction, and the pwned-password check (which uses k-anonymity — only a partial hash prefix is sent, never your actual password) all run client-side.

6. Data retention & deletion

You can delete an individual chat at any time from within the app. You can permanently delete your account and all associated data using the /delete-account confirm command in chat.

7. Advertising

We may in the future display ads from third-party advertising networks to support the free tools on this site. If so, this policy will be updated to disclose which network(s) are used and what data they may collect (such as non-personally-identifying analytics or cookies) for ad delivery.

8. Children's privacy

HackerDroid is not directed at children under 13, and we do not knowingly collect data from them.

9. Changes to this policy

We may update this policy from time to time. Continued use of the app after changes means you accept the updated policy.

10. Contact

Questions about this policy can be sent to aliafzalmain@gmail.com.