Privacy policy

This site collects as little as it can. Here is exactly what that is.

Last updated 22 September 2026.

Who is responsible

This site is run by Asad Ali, an independent security consultant based in Taipei, Taiwan. For anything to do with your data, email asad@auditmyapp.dev.

What this site does not do

It sets no cookies. It runs no analytics, advertising or tracking scripts, and it loads no fonts or scripts from other companies' servers. Everything you see is served from this site.

What I collect, and why

When you use the contact form

The form asks for your email address, optionally what your app is built on, and a description of what is going wrong. I use this only to reply to you and, if you want, to scope and carry out work for you. The form is processed by Formspree, which passes your message to me by email. For visitors in the EU and UK, the legal basis is that you asked me to reply, and taking steps at your request before a possible contract.

When you email me

Email to asad@auditmyapp.dev is handled by Zoho Mail. I keep correspondence for as long as it is useful for the conversation or engagement it belongs to.

When you visit the site

The site is hosted by Netlify, which, like any web host, processes your IP address to deliver pages and may keep it briefly in server logs for security and reliability. The domain's DNS is provided by Cloudflare. I don't use any of this to identify or profile visitors.

How long I keep it

If an enquiry doesn't turn into work, I delete it within 12 months. If it does, I keep what I need for the engagement, and for tax and accounting records for as long as the law requires.

Data inside your app

If you hire me, anything I see inside your app or database during an audit is covered by our written engagement terms rather than by this page. In short: I access only what you have authorised, keep as little as possible, and delete it when the work ends. How I handle access and data has the details.

Where your data goes

The services above may store or process data outside Taiwan, including in the United States. I share with them only what is needed to run this site and reply to you.

Your rights

You can ask me what I hold about you, ask me to correct it, or ask me to delete it. Email me and I will respond within 30 days. Depending on where you live, you may also have rights under laws such as the EU and UK GDPR or Taiwan's Personal Data Protection Act, and you can complain to your local data protection authority.

Changes

If anything here changes, I will update this page and the date at the top.