FireDesk Privacy Policy

Effective 5 November 2026

FireDesk is a desktop app for browsing and managing Firebase and Firestore projects. It is provided by Sinovadigi ("we"). This policy explains what information FireDesk handles, where it goes and the choices you have.

The short version

• Your Firestore data and project credentials stay between your computer and Google. They are not sent to our servers.
• Our servers hold your FireDesk account, your plan and basic activity information.
• We do not sell your information, show ads or include third-party analytics in the app.

Information stored on our servers

• Account: username, email address, display name, profile picture, sign-in method, a hash of your password if you set one, and two-factor authentication settings.
• Sessions: sign-in tokens, the app or browser that created them, and your last sign-in and last active times.
• Activity: a daily count of your sign-ins and active minutes, which FireDesk reports while you are signed in.
• Optional usage sharing: only if you turn it on, your number of projects and daily counts of documents read, documents written and queries run. These are counts only and never include document contents.
• Plans: your plan and license keys.
• Network information: our servers and hosting providers process your IP address to deliver the service, limit abuse and keep it secure.

Information that stays on your computer

Your project list and settings, saved queries, bookmarks, service-account keys and Google sign-in tokens for your projects are stored on your device. Secrets are kept in your operating system's keychain where possible. Sign-ins made through the Google Cloud CLI are saved by that tool in a private FireDesk folder on your device.

When you work with a project, FireDesk connects directly from your computer to Google's services. Documents, Authentication users and other project data do not pass through our servers.

Google user data

When you choose Continue with Google, Google asks for your permission and FireDesk may receive:

• Your name, email address and profile picture (openid, email, profile), used to create your account and sign you in.
• Access to Google Cloud (cloud-platform), requested only when you connect a project. FireDesk uses it to list your Firebase projects and to carry out the actions you take on them, such as viewing, editing, importing, exporting or deleting data, managing indexes and managing Authentication users.

To confirm who you are at sign-in, FireDesk sends a Google access token to our server once. The server checks it with Google and does not store it. The name, email address and picture are saved to your account. The sign-in tokens used to reach your projects stay on your device.

We do not use Google user data for advertising, sell it, or use it to develop or train generalized artificial intelligence or machine learning models. We do not transfer it to others except as needed to provide the features you use, to comply with the law, or with your consent.

FireDesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

We use the information on our servers to run your account, keep it secure, apply your plan, send account emails such as address confirmation, offer app updates and provide support.

Who we share it with

We share information only with providers that help us run the service:

• Cloudflare carries traffic to our website and servers.
• Our server and email providers host the service and deliver account emails.
• Google handles Google sign-in and receives the requests you make to your own projects.

We may also disclose information if the law requires it. Administrators of the FireDesk service can see account details and activity in order to operate and support it.

How long we keep it

We keep account information until the account is deleted. Deleting an account removes its profile, sessions and activity. Expired sign-in tokens are removed automatically.

Your choices

• Delete your account or data: email us at [email protected]. You can also ask for a copy of your information or a correction.
• Stop sharing usage: turn off usage sharing in the app at any time.
• Remove Google access: remove FireDesk from your Google Account permissions, and remove the project from FireDesk to delete its saved credentials from your device.

Security

We use encrypted connections, store passwords only as hashes and offer two-factor authentication. No system is perfectly secure, so please protect your device and your service-account keys.

Children

FireDesk is a tool for developers and is not intended for children under 16.

Changes to this policy

We will post any changes on this page and update the effective date. If a change is significant, we will give notice in the app or by email.

Contact

Sinovadigi, Indonesia
[email protected]