Legal
Privacy Policy
Last updated: November 13, 2026
This policy covers the PatchAlert app and this website. PatchAlert is published by ForgedLuxe LLC, a Florida company ("we"). Questions: support@patchalert.app.
In short
- You do not create an account with a name, email, or password. The app uses an anonymous account ID.
- We store the locations and products you pick, your alerts, and the outcomes and short notes you record, so the app can alert you and track patching.
- No ads, no analytics or advertising tools, and we do not sell your data.
- You can delete everything in the app: Settings, Delete my data. Accounts not opened for 24 months are deleted automatically.
- Data is stored on Google's servers in the United States.
What we store
| Data | What it is | Why |
|---|---|---|
| Anonymous account ID | A random ID created the first time you open the app. | To keep your data separate from everyone else's. |
| Push ID | An ID for each device where you allowed notifications. | To send you alerts. |
| Locations | For each location: the name you type, the products you pick, their vendors, and vendors you follow. Nothing else: no addresses, IP addresses, or network details. | To know which catalog entries match what you run. |
| Alerts and patch history | A copy of each matching catalog entry, which of your locations it affects and their names at that time, and whether you opened it. | To show your alerts, countdowns, and the remediation report. |
| Outcomes and notes | For each alert and location, the outcome you record (patched, mitigated, not affected, or deferred), when you recorded it, a review date if you deferred it, and an optional note you type, up to 200 characters. Notes are free text: do not enter passwords or personal information. | To keep your record, show it in the app and the report, and return a deferred alert to open on its review date. |
| Review marks and dismissed cards | Catalog entries you marked reviewed, and new-product cards you dismissed, each with the time. | So they stay reviewed or dismissed. |
| AI summary counter | How many summaries your account requested today. | To apply a daily limit. |
| Last opened | When the app was last opened. | To delete accounts nobody has used for 24 months. |
On your device the app also keeps a copy of this data (so it works offline), a few settings, the alert notifications it received, and report PDFs you exported.
Server logs
Our server logs record technical events, the time of requests from the app, your device's IP address, and in some cases your anonymous account ID. They never include location names, product lists, or push IDs.
If you email us
If you email support, we keep your email address and your message so we can answer you. Our email provider handles email for us.
What we do not collect
The app does not ask for or store your name, email address, phone number, contacts, or device location (only an email you choose to send us is kept, as described above). The app has no analytics, crash reporting, or advertising software. PatchAlert never scans, probes, or looks up any network, domain, or IP address.
Who processes data for us
- Google (Firebase and Google Cloud): the anonymous account, data storage, our server, push notifications, and checks with Google Play that requests come from the genuine app. Google processes this data for us under its terms, and its servers receive your device's IP address when the app connects.
- Anthropic (AI summaries): some catalog entries get a plain-language summary. Only public text from the CISA catalog entry is sent to Anthropic. No account ID, location, product list, or anything else about you is sent.
- Vercel (this website): Vercel hosts patchalert.app and processes standard server logs for it, including IP addresses. The website has no cookies, tracking, or analytics. Its only script is our own small one for the page animation; it stores nothing and sends nothing.
- Our email provider: handles email you send to support.
Where data is stored
Data is stored on Google's servers in the United States.
We do not sell or rent your data, and we do not share it for advertising. We may disclose data if the law requires it.
AI-generated summaries
Some summaries are AI-generated from catalog text. The original catalog description stays available, and AI never decides whether you get an alert.
How long we keep data
- Your account data: while you use the app. If the app is not opened for 24 months, the account and all its data are deleted automatically, the same way as Delete my data.
- Server logs: 30 days.
- Backups: we do not keep backups, so deleted data is not kept in a backup of ours.
Uninstalling the app does not delete server data. Use Delete my data first, or the data is deleted after 24 months without use.
Your choices and rights
- Delete in the app: open Settings and choose Delete my data. This deletes your locations, alerts, outcomes and notes, review marks, dismissed cards, push IDs, last-opened time, AI summary counter, and anonymous account from our servers, and clears the app's data on this device.
- Ask by email: email support@patchalert.app to ask what data we hold for you, for a copy of it, or to delete it. We respond within 30 days.
- Your account ID: accounts are anonymous, so we cannot find your data from your name or email address. Include your account ID, shown in the app under Settings, About. Without it we may not be able to find your data.
- Notifications: you can turn alert notifications off at any time in Android settings.
Security
Data travels over encrypted connections. Each account can read and change only its own data, and we check that requests come from the genuine app.
Children
PatchAlert is a tool for IT workers. It is not intended for anyone under 18 (see the Terms), and we do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the data.
Where PatchAlert is offered
PatchAlert is offered in the United States.
Changes
If we change this policy, we will update the date above and post the new version here.
Contact
ForgedLuxe LLC, Florida. Email: support@patchalert.app