Privacy policy

Who we are

AppCheck (appcheckhq.com) is operated by Pavey Group. Registered address:

Contact: support@pavey.online.

Our role

Pavey Group is the data controller for the limited personal data described below that AppCheck itself processes.

How project analysis works

When you select a ZIP archive, your browser reads it and extracts relevant text files in memory on your device. All analysis, scoring and report generation happens in your browser. Your source code and project ZIP are:

• analysed locally in your browser;
• not uploaded to AppCheck’s servers;
• not stored by AppCheck;
• not sent to any AI provider and not used to train AI models.

Storage in your browser

The generated report (score, findings, evidence snippets and file paths) is saved in your browser’s session storage for this tab, together with the payment transaction reference if you buy Complete AppCheck. This lets the report survive a page reload and the return from checkout. Session storage stays on your device, is never sent to us, and is cleared by your browser when you close the tab. Choosing “Scan another project” clears it immediately. We do not use cookies or local storage for tracking, and we do not use analytics.

Information that may be processed

• Payments. Purchases of Complete AppCheck are processed by Paddle (Paddle.com Market Ltd) as Merchant of Record. Paddle collects the information needed for payment, tax, fraud prevention and invoicing — such as your email address, billing country and payment details — under the Paddle privacy policy. AppCheck does not receive or store your full card details. To unlock your report, our server asks Paddle whether the transaction is paid; it sends only the transaction reference and an internal report reference, never your project or report contents. We can see order details (such as email and country) in our Paddle account, which we use to provide support, handle refunds and meet legal obligations.
• Website hosting. Our hosting provider processes standard technical request data (such as IP address, browser user agent and requested pages) to deliver the site and protect it from abuse.
• Fonts. The site loads fonts from Google Fonts, which receives standard request data from your browser.
• Support. If you email us, we receive the contents of your email and use it only to respond.

Legal basis

We process order information to perform our contract with you (Art. 6(1)(b) GDPR) and to meet legal obligations such as tax record-keeping (Art. 6(1)(c)). We process hosting request data and support emails on the basis of our legitimate interests in operating a secure service and answering you (Art. 6(1)(f)).

Sharing

We share data only with Paddle (as Merchant of Record), our hosting and font providers as described above, professional advisers where necessary, and authorities where required by law. Some of these providers may process data outside the EEA under appropriate safeguards such as the EU Standard Contractual Clauses.

Retention

AppCheck retains no source code, project files, scan reports or scan history on any server. Report data in your browser’s session storage is removed when you close the tab or start a new scan. Payment, transaction and customer information is retained and processed by Paddle in line with its own legal obligations and privacy practices. Support emails are kept only as long as needed to resolve your request and meet any legal obligations, then deleted.

Security

The site is served only over HTTPS. Because project analysis happens on your device, your source code is never exposed to our infrastructure.

Your rights

Depending on where you live, you may have rights to access, correct, delete or object to processing of your personal data. Contact support@pavey.online. You can ask to access, correct, erase, restrict or port your data, object to processing, or withdraw consent. We respond within one month. You may also complain to your local data protection authority.

Changes

We will update this page if our data practices change.