DECLARATION OF DATA-INDEPENDENCE (privacy policy) Q: What does Geesiam do? A: Geesiam ['ʤiːsɪəm] allows you to receive and manage (end-to-end) encoded messages, which are pushed from a web browser or from within your own source code over a basically insecure internet connection to your Android mobile device just using HTTP POST requests to the Geesiam backend. Geesiam is therefore based on a client app and a server app. --------- Q: What data does the client app store? A: The client app stores your passphrase, which is used both for encoding and decoding a message. Only you know this passphrase. The client app also stores your device ID and the received messages (active notifications, archived notifications), which you can export to a .csv file on your device. None of these data are transmitted anywhere. --------- Q: What data does the server app store? A: The server app - a Google App Engine backend - does not store any data (especially any personal data or passphrases), it takes your (encoded) requests and directly forwards them to the Google Cloud Messaging (GCM) infrastructure. There are only App Engine application logs, which reveal that someone sent something to the server, but not who and what. --------- Q: What data does the Google Cloud Messaging (GCM) infrastructure store? A: GCM stores your message until it is delivered to your device, but not longer than seven days. GCM also store the information required to know which device the message must be delivered to. GCM, like the server app, does not store your passphrase. The number of messages sent over the GCM infrastructure is by the way unlimited. --------- Q: If only I know the passphrase, what happens in case it gets lost? A: The passphrase needed for encoding and decoding of the messages is arbitrary and is only stored on your Android device. Once you entered a passphrase, it is no longer displayed for security reasons. If you forget it, you may just enter another one. But do not forget to use the same new passphrase for encoding your messages as well. You decide whether you want the message to be decoded by the backend or yourself. If you do not trust the backend, just encode the message yourself. Anyway, the passphrase is only stored on your Android device, just used for encoding the message by the backend and not transferred anywhere.