Privacy Policy
Last updated April 12, 2026
RemoBuild is operated by Ian Carscadden (“we”, “us”, “our”). This policy describes what data we collect, why, and how we handle it.
1. What We Collect
Account information
When you create an account we store your email address and, if you sign in with Apple, the name and identifier Apple provides. We use this to authenticate you and communicate about your account.
Project and build data
When you configure a project in the Mac desktop agent we store its name, bundle identifier, scheme, and build configuration. When a build runs we store its status, progress, timestamps, and — if the build fails — a filtered excerpt of the Xcode build log so you can debug it.
Build artifacts (IPA files)
Compiled IPA files are uploaded to Cloudflare R2 for OTA installation on your phone. They are automatically deleted within 10 minutes of the build completing. We do not retain or inspect the contents of your builds.
Mac agent metadata
The desktop agent reports its machine model, macOS version, and Xcode version so the iOS app can display your Mac's status.
Payment information
Payments are processed by Stripe. We never see or store your card number. Stripe provides us with your customer ID and subscription status so we can manage your plan.
Emails
We use Resend to send transactional emails (verification codes, download links). We do not send marketing emails.
2. How We Use Your Data
- Authenticate you and manage your account
- Compile, deliver, and install builds on your device
- Process payments and enforce plan limits
- Send transactional emails (verification, download links)
- Debug build failures (via build logs you can view and copy)
We do not sell, rent, or share your data with third parties for advertising or marketing.
3. Third-Party Services
We rely on the following services to operate RemoBuild:
- Supabase— authentication and database (hosted in US-West)
- Cloudflare— API, file storage, and real-time connections
- Stripe— payment processing
- Apple— Sign in with Apple identity provider
- Resend— transactional email delivery
- Vercel— web application hosting
- GitHub— desktop app release hosting
Each service has its own privacy policy. We only share the minimum data each service needs to function.
4. Data Retention
- Account data— retained while your account exists. Contact us to delete your account and all associated data.
- Build artifacts (IPAs)— automatically deleted within 10 minutes of build completion.
- Build records and logs— retained while your account exists.
5. Security
All data is transmitted over TLS. Authentication tokens are short-lived JWTs. Database access is restricted by row-level security so users can only access their own data. Build artifacts are stored in encrypted-at-rest object storage with time-limited access.
6. Your Rights
You can:
- Access and export your data by contacting us
- Request deletion of your account and all associated data
- Manage your subscription via the Stripe customer portal in your dashboard
7. Children
RemoBuild is not directed at children under 13. We do not knowingly collect data from children.
8. Changes
We may update this policy from time to time. Material changes will be communicated via the email associated with your account.
9. Contact
Questions about this policy? Email us at ian@razelabs.app.