UAT Pocket1. Who is responsible
UAT Pocket is operated by Verus Vibe (“we”). For questions about this policy or your personal information, contact verusvibe@gmail.com.
UAT Pocket is a business tool. When your organisation uses UAT Pocket for a project, the project's content, including issues, evidence, comments and history, belongs to that project and is visible to its members according to their roles.
2. Information we process
Account information: your display name, email address, user ID, sign-in method (email and password, or Sign in with Apple), the organisation name and type you enter, and your project memberships and roles.
Project content you add: issue titles and descriptions, expected and actual results, severity, category, module, environment and build information, quick notes, voice transcripts, comments, fix descriptions and build numbers, photos and screenshots you attach as evidence (up to five per issue, plus retest evidence), and the issue's status history.
Voice recordings: recordings are made on your device and transcribed by your device's speech recognition service: Apple's speech recognition on iPhone, or the speech recognition service configured on your Android device (Android 13 or later). Either may process the audio on the provider's servers. The audio is not uploaded to UAT Pocket; only the transcript you review and keep is saved with the issue. The temporary recording stays on your device and is deleted when you discard or re-record it, or when you leave the recording screen.
Device and notification information: a push notification token, a random device identifier created by the app, the platform and the app version, used to deliver notifications to your device.
Analytics and diagnostics: limited usage events, such as an issue being submitted or an AI draft being requested, and crash and error reports containing error codes. Crash reports also include technical details such as the device model, operating-system version and app version. Firebase Analytics and Crashlytics do not receive defect content, comments, form messages or email addresses. The apps do not collect advertising identifiers; on Android, Advertising ID collection and ad-personalisation signals are turned off.
Issue exports: when a project owner or admin exports issues, a spreadsheet of the selected project's issues and comments is emailed to the project members they choose.
Website: the fields you submit in the early-access or support forms.
3. How information is used
We use information to create and secure your account; run projects and the issue lifecycle from capture through closure; send notifications and requested exports; respond to your requests; and keep the service reliable and secure. We do not sell personal information and do not use it for advertising or cross-app tracking.
4. Optional AI drafting
AI drafting is optional. The first time you use it, the app explains what will be sent and asks for your permission. If you allow it, the evidence images you selected, your voice transcript, your quick note, the project name and environment, and any selected test-case details are sent to Google's Gemini model through Firebase AI Logic to produce a draft.
The draft is only a suggestion: you review and edit every field, and nothing is submitted until you choose Submit Issue. You can always create issues manually instead, and you can withdraw permission at any time in Me → Privacy → Withdraw AI Drafting Permission.
Google processes AI requests under the Firebase AI Logic and Gemini terms that apply to UAT Pocket's service configuration.
5. Service providers
- Google (Firebase): authentication, database, file storage, server functions, push notifications, app integrity checks, remote configuration, analytics, Crashlytics crash reporting and AI drafting through Gemini.
- Apple: Sign in with Apple, if you choose it (on iPhone and Android); on iPhone, also speech recognition and push-notification delivery. Apple's speech recognition may process audio on Apple's servers.
- Your Android device's speech recognition provider: voice transcription on Android. Processing and retention follow the terms of the provider configured on your device (often Google).
- Resend: delivery of issue-export emails.
These providers process information on our behalf under their own terms.
6. Where information is stored
The project database and server functions run in Google Cloud's Singapore region (asia-southeast1). Evidence files are stored in private Firebase Cloud Storage. Some providers, including Firebase Authentication, Analytics, Crashlytics, Apple, your device's speech recognition provider and Resend, may process information in other countries, including the United States.
7. Security
Access to project data requires a signed-in, email-verified account that is a member of the project, and is enforced by server-side rules based on each member's role. Evidence is stored in private storage that only project members can access.
No service can guarantee absolute security. Do not put passwords or secrets in evidence, comments or support messages.
8. Retention and deletion
- Your account: kept until you delete it.
- Project content: kept as part of the project's record while the project exists, including after an individual member deletes their account.
- Issue-export files: deleted from storage after 7 days.
- Backups: daily database backups are kept for 14 days, and point-in-time recovery data for 7 days. After those periods, deleted information is no longer recoverable through those systems.
- Analytics and crash reports: kept according to the configured Firebase Analytics and Crashlytics retention settings.
9. Deleting your account
You can delete your account in the app: Me → Delete Account, then confirm with your password or with Sign in with Apple. Deletion:
- permanently deletes your profile, notifications, device registrations and sign-in account;
- removes you from every project and unassigns open issues that were assigned to you;
- revokes UAT Pocket's access to your Apple ID if you used Sign in with Apple; and
- deletes unsent capture drafts stored on that device.
Issues, comments and evidence you added stay with their projects so that the UAT record remains complete; your name is shown as “Deleted user”. Backup copies expire as described above.
If you cannot access the app, contact verusvibe@gmail.com from the email address on your account. Never send your password. See Delete your account for the full request process.
10. Your choices and rights
Depending on where you live, for example under Singapore's Personal Data Protection Act or the EU or UK GDPR, you may have rights to access, correct or delete your personal information, to object to or restrict its use, to data portability, and to withdraw consent. Contact verusvibe@gmail.com to make a request; we may need to verify your identity.
You can also manage camera, photo, microphone, speech-recognition (on iPhone) and notification permissions in your device's Settings, and withdraw AI drafting permission in the app.
11. Business audience and children
UAT Pocket is intended for business UAT teams and is not directed to children. If you believe a child has provided personal information, contact us and we will delete it.
12. Changes and contact
We will update this policy when our practices change and show the new effective date at the top. Material changes will be communicated in the app or by email. Questions: verusvibe@gmail.com.