Privacy policy

BitReview's developer does not collect, receive or store any of your data. The app talks only to Bitbucket Cloud, on your behalf.

BitReview has no analytics, advertising, tracking or crash-reporting services, and no accounts or servers of its own.

BitReview is published by Picassosoft. Picassosoft, and not Atlassian, is responsible for how the app handles your information.

Your Atlassian account email and API token, or OAuth tokens if you sign in that way. They are encrypted with Android Keystore, or stored as device-only Keychain items on iOS, and are not included in device backups.

Your Bitbucket profile and workspace list, so the app opens without waiting for the network.

App settings, such as the selected workspace and theme, and which files you marked as viewed in each pull request.

Copies of Bitbucket data you opened, kept in memory for a few minutes so screens load quickly. They are gone when the app closes.

BitReview connects only to Bitbucket Cloud (bitbucket.org and api.bitbucket.org, operated by Atlassian), over HTTPS. It sends your credentials, requests for the data you open, and anything you choose to post, such as comments, approvals and merges.

Atlassian's privacy policy covers that data: https://www.atlassian.com/legal/privacy-policy

Some Bitbucket content, such as pipeline logs and attachments, is served from Atlassian storage hosts. The app follows those links without sending your credentials.

Links you open from the app, such as "Open in browser", go to your browser.

None through the app. If you contact support, the developer receives the information you choose to provide in that communication.

Signing out deletes the stored credentials, profile, workspace list and in-memory copies. Settings and viewed-file marks stay until you uninstall the app, which removes everything.

You can revoke the API token at any time at https://id.atlassian.com/manage-profile/security/api-tokens. Data in your Bitbucket account is held by Atlassian and governed by your Bitbucket account and Atlassian's policies.

BitReview uses HTTPS for every request, sends credentials only to Bitbucket hosts, and stores them with the platform credential stores. No security control can guarantee absolute protection. Keep your device updated and locked, and give the API token only the scopes you need.

BitReview is a developer tool and is not directed to children under 13.

BitReview is an independent app. It is not affiliated with, endorsed or sponsored by Atlassian. Bitbucket is a trademark of Atlassian.

Material changes will be reflected by updating the effective date and the policy linked from the store listing.

Picassosoft — Sean Park. Support and privacy requests: ceo@picassosoft.com.