Privacy policy

Last updated November 2, 2026. AppLeakWatch is operated by Shinobi Tech.

What we keep

• Your email address, for sign-in, the waitlist, reports and alerts.
• The domains you add and their scan reports.
• Your subscription status from Paddle.

What scans keep

Reports record the type of problem and where it was found. For exposed secrets we keep only the first few characters. If a scan can read a row from an open database table, we use that only to confirm access is open, and we don't store the row.

Payments

Paddle.com processes payments as our Merchant of Record. We never see your card details. Paddle's own privacy policy covers the data it handles.

Who else sees your data

We use an email provider to send sign-in links and reports, and a server provider to host the service. We don't sell your data.

Your choices

Removing an app deletes its reports. To see or delete your other data, email hello@shinobitech.dev.