Chính sách bảo mật

At a glance

• No JenBoard account, no JenBoard server. The app connects directly from your device to the Jenkins servers you add. We never receive your Jenkins URL, username, API token, jobs or build logs.
• Your credentials stay on your device. Jenkins API tokens (and an Anthropic API key, if you add one) are kept in the device's secure storage (iOS Keychain / Android Keystore-backed encrypted storage).
• Anonymous diagnostics only. We use Firebase Analytics and Firebase Crashlytics to understand, in aggregate, how the app is used and why it crashes.
• Ads in the free version. A Google AdMob banner is shown in the job list. Where required we ask for consent first. Buying JenBoard Pro removes ads.
• Payments are handled by the app stores. Google Play or the Apple App Store process the purchase; RevenueCat verifies and restores it. We never see your card details.
• The optional chat is opt-in. It only works with your own Anthropic API key and sends a summary of your server's state, not console logs, to Anthropic.

1. Who we are

MintSoft ("we", "us", "our") develops and operates JenBoard (the "App"). This Privacy Policy explains what information is processed when you use the App, this website (jenboard.mint-soft.com) and our support channels, and the choices you have.

Data controller: MintSoft. Contact: [email protected]

2. Information we process

Stored only on your device

The servers you add (name, URL, username and API token) are saved in the device's secure storage. Your favourites, filters, muted jobs and settings are saved locally on your device. None of this is uploaded to us. If you delete the App, this data is deleted with it.

Exchanged directly with your Jenkins server

The App sends requests from your device straight to the Jenkins servers you configure, authenticated with your username and API token, to read jobs, builds, console logs, test reports and artifacts and to perform the actions you choose (for example starting, stopping, approving or deleting builds). This traffic goes between your device and your server only; it does not pass through any MintSoft server. Its handling on the server side is governed by whoever operates that Jenkins server.

Background checks (Android, JenBoard Pro)

If you turn on failure alerts, the App on your Android device checks your Jenkins servers about every 15 minutes and shows a local notification when a job fails. This runs on your device; there is no push-notification server.

Optional chat (JenBoard Pro)

If you add your own Anthropic API key, the App can answer questions about your server. When you send a question, the App sends it to Anthropic together with a short summary of your server's current state (such as job names, statuses and build statistics). Console logs are not sent. The request is made directly from your device to Anthropic under your own API key and is subject to Anthropic's terms and privacy policy (anthropic.com/legal/privacy). Nothing from the chat is sent to us.

Collected automatically (anonymous)

• Device and app information: device model, operating system version, app version, language, time zone and a randomly generated app instance identifier
• Usage events: which screens and features are used, in aggregated form
• Crash and performance diagnostics: stack traces and device state at the time of a crash
• Approximate region: a coarse, city- or country-level location derived from your IP address by our analytics provider; we do not collect precise location
• Advertising identifiers: only in the free version, which shows ads, and on iOS only after you allow tracking in the App Tracking Transparency prompt

We also use Firebase Remote Config to adjust app settings without an update; it uses the same app instance identifier.

Provided by you (optional)

If you email us, we receive your email address, name (if given) and message.

Purchase information

JenBoard Pro is a one-time purchase processed by Google Play or the Apple App Store. We and our purchase-management provider (RevenueCat) receive the product identifier, transaction state and an anonymous app user ID used to restore your purchase, never your payment card number or billing address.

3. How we use information

• Provide, maintain and improve the App
• Diagnose and fix crashes, bugs and performance problems
• Understand which features matter, in aggregate
• Show and measure ads in the free version
• Unlock and restore JenBoard Pro
• Respond to your support requests
• Comply with legal obligations

We do not sell your personal information, and we do not use it for profiling that produces legal effects.

4. Legal bases (EEA / UK)

• Legitimate interests (Art. 6(1)(f) GDPR): anonymous analytics, crash reporting and securing our services
• Consent (Art. 6(1)(a)): personalised advertising and, on iOS, tracking permitted through App Tracking Transparency; you may withdraw consent at any time
• Performance of a contract (Art. 6(1)(b)): providing JenBoard Pro after you buy it

5. Third-party service providers

• Google Firebase Analytics, Crashlytics and Remote Config (Google LLC): firebase.google.com/support/privacy
• Google AdMob, ads in the free version (Google LLC): support.google.com/admob/answer/6128543
• RevenueCat, purchase validation and restore (RevenueCat, Inc.): revenuecat.com/privacy
• Google Play and the Apple App Store, payment processing under their own terms
• Anthropic, only if you enable the optional chat with your own API key (Anthropic PBC): anthropic.com/legal/privacy

We share data with these providers only to the extent needed to operate the App. We do not share your information with data brokers.

6. Your advertising choices

• iOS: when the App asks for tracking permission, choose "Ask App Not to Track". You can change this at any time in Settings → Privacy & Security → Tracking.
• Android: open Settings → Google → Ads (or Privacy → Ads) to delete or reset your advertising ID and opt out of ads personalisation.
• JenBoard Pro removes ads entirely.

7. Data retention

• Analytics data: retained by Firebase for up to 14 months, then deleted or aggregated
• Crash diagnostics: retained for up to 90 days
• Purchase records: kept as long as needed to honour your purchase and meet accounting obligations
• Support correspondence: kept for up to 1 year after your request is resolved
• On-device data: under your control; remove a server in the App to delete its saved credentials, or uninstall the App to delete everything

8. Security

API tokens and keys are stored in the operating system's secure storage. Use HTTPS for your Jenkins server so that traffic between the App and your server is encrypted. Analytics and crash data are pseudonymous and stored by our processors in access-controlled environments. No method of electronic storage is 100% secure, but we reduce risk by collecting as little as possible.

9. International transfers

Our service providers may process data on servers in other countries, including the United States. Where required, transfers are protected by safeguards such as the EU Standard Contractual Clauses.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to its processing, and to lodge a complaint with your supervisory authority. To exercise a right, email [email protected]; we respond within 30 days. Because analytics data is anonymous, we often cannot link it to you individually; in that case we will explain what we can and cannot do (GDPR Art. 11).

11. California residents (CCPA/CPRA)

We do not sell personal information. The use of advertising identifiers by ad partners in the free version may be considered "sharing" under the CPRA; you can opt out using the controls in section 6. You also have rights to know, delete and correct, and not to be discriminated against for exercising them.

12. Children

The App is a tool for software developers and is not directed at children under the minimum age required in your jurisdiction (13 in the United States, 14 in the Republic of Korea and up to 16 in some EEA countries). We do not knowingly collect personal information from children; if you believe a child has provided us information, contact us and we will delete it.

13. Republic of Korea (PIPA)

Privacy Officer (개인정보 보호책임자): MintSoft Privacy Team, [email protected]. You may request access, correction, deletion or suspension of processing of your personal information at any time, and we will act without delay as required by the Personal Information Protection Act.

14. This website

This website stores your language choice in a cookie (lang) and your light or dark theme in your browser's local storage. It uses no analytics, advertising trackers or third-party cookies.

15. Changes to this policy

When we make material changes, we will post the updated policy on this page and revise the date above.

16. Contact us

MintSoft · [email protected] · app.mint-soft.com