Privacy

What Repotray handles and where it goes.

Last updated: 5 October 2026. Repotray is in development and has not been released; this page describes how the app is built today and will be revised before the first release.

In short

Repotray talks to your forges directly from your phone. Your sign-in tokens stay on your phone. The app has no advertising and no usage analytics.

Your accounts and tokens

When you sign in to GitLab, GitHub, Gitea or Forgejo, Azure DevOps or Bitbucket, the token the forge issues is kept only in the secure storage of your device. Repotray does not send your tokens to its own servers. Requests go from the app straight to the forge you signed in to, and that forge's own privacy policy applies to what it receives.

Data kept on your device

To work offline and open quickly, the app keeps a cache of what it loaded (for example inbox items, issues and repository data), your settings, and changes that are waiting to be sent. This data stays on the device; removing the app, or clearing its data in the system settings, removes it.

Push notifications

Instant notifications are optional. If you turn them on, the app registers your device with the Repotray relay so it can be woken up. Messages from the relay carry identifiers only; the app then fetches the content from the forge itself. Forge tokens and titles are not sent to the relay.

Crash reports

A crash report contains the type of the error and code locations, not your messages, requests, account details or the contents of your repositories. In the F-Droid build, crash reports are off until you turn them on, and turning them off deletes anything waiting to be sent. The development build sends none.

AI features

AI features are optional and use a provider you choose with your own key, or a model on your device. Nothing is sent to an AI provider before you agree for that account or repository, and known secrets are removed from what is sent. The provider's own terms apply to what it receives.

Purchases

Paid plans are not offered yet. Before they are, this section will say who handles the payment and what Repotray learns from it.

What Repotray does not do

No advertising, no selling of data, no usage analytics, no tracking across apps.

Contact

Questions or requests about your data: support@repotray.app.