Privacy Policy
Effective & Last Updated: September 29, 2026
At Infinite App Store, we are committed to safeguarding your privacy. Our core philosophy is built upon privacy-by-design: we do not sell your personal data, we do not employ invasive cross-site advertising trackers, and we process device telemetry ephemerally solely to assemble tailored split APK downloads for your Android device.
1. Information We Collect & How We Obtain It
We collect only the minimum necessary information required to operate our app marketplace, ensure device compatibility, and secure developer uploads.
When you visit the store, our client scripts evaluate browser Client Hints, screen density, and WebGL renderer. This includes CPU ABI (e.g. arm64-v8a), density (e.g. xxhdpi), and Android API level. This telemetry is processed in-memory on your device and transmitted to our download routing engine solely to assemble compatible APK split packages.
When you create an account, we collect your name, email address, cryptographic password hash (salted with Argon2/Bcrypt), and verification status. Passwords are never stored in plaintext. Two-factor email codes (OTP) expire automatically within 10 minutes.
If you register as a verified developer, we store your organization name, support website, contact email, and uploaded Android App Bundles (.aab). If you post reviews or report apps, your ratings and textual comments are associated with your public username.
2. What We Explicitly Do NOT Collect or Do
No Sale of Personal Data: We never sell, rent, monetize, or trade your personal information, telemetry, or browsing history to third-party data brokers or marketing firms.
No Cross-Site Ad Tracking: We do not embed ad network pixels, fingerprinting scripts, or cross-origin tracking cookies.
No Sensitive Android Identifiers: We do not request, access, or record hardware IMEI, IMSI, MAC addresses, or SIM card serial numbers.
3. Local Storage & Service Worker Caching
Infinite App Store operates as an advanced Progressive Web App (PWA). We utilize local browser storage mechanisms to improve your user experience:
- localStorage: Stores your local app wishlist, offline library records, active download queue states, and UI preferences. This data remains on your local machine and is not synchronized to external servers unless you are logged into your account.
- Service Worker Cache: Caches core storefront UI assets, app icons, and offline fallback screens so the store remains functional without an active network connection.
4. Data Sharing & Infrastructure Partners
We only share limited operational data with trusted third-party infrastructure providers necessary to power our service:
Cloud Storage & Content Delivery Networks (CDN)
We use S3-compatible object storage (e.g. Backblaze B2) and global edge delivery (Cloudflare CDN) to stream APK split binaries to your device efficiently. These services process download requests under strict security and data protection agreements.
Transactional Email Providers
We dispatch verification codes and security notifications via encrypted SMTP services. Your email address is used solely for service-critical communication.
5. Security Protocols & Cryptographic Verification
Security is foundational to the Infinite App Store. We implement rigorous safeguards:
- Full end-to-end transport layer security (TLS 1.3/HTTPS) on all web endpoints and API download streams.
- Automated APK signature scheme (v2, v3, v3.1) verification and SHA-256 checksum generation for every compiled split APK package.
- Static bundle inspection to intercept undeclared permissions or embedded malicious code before publication.
- Protection against brute-force attacks via rate-limiting on authentication and download endpoints.
6. Your Privacy Rights (GDPR, CCPA & Global Standards)
Regardless of where you reside, you have full control over your personal data:
- Right of Access: Request a copy of all personal data held in association with your user account.
- Right of Rectification: Update or modify your profile details at any time from your account settings.
- Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your account, published reviews, and associated credentials.
- Right to Opt-Out: Since we do not sell personal data, no opt-out is needed, but you can clear all local storage data from your browser anytime.
7. Contact Our Data Protection Team
If you have inquiries regarding this Privacy Policy, wish to exercise your data rights, or have questions concerning our split delivery telemetry processing, please contact us:
Data Protection Officer
Infinite App Store Privacy & Legal Compliance