Who we are
Sheaf is made by kode-th, a one-person software studio in Thailand. Contact: kodeth.app@gmail.com.
What we collect
| Data | Where it comes from |
|---|---|
| Name, email, avatar and GitHub user ID | GitHub, when you sign in |
| GitHub sign-in tokens, stored encrypted | GitHub, when you sign in |
| IP address and browser name of each session | Your browser, when you sign in |
| Accounts and organizations where the app is installed | GitHub, when you install the app |
| Titles, numbers, labels, states, authors, links, comment counts and the first lines of the body of issues and pull requests | GitHub, through the API and webhooks |
| Alert titles, packages, severities and links | GitHub, through the API and webhooks |
| Titles and links of the pull requests you merged, the issues you closed and the reviews you gave, for This week | GitHub, through webhooks |
| Your Done, Snooze, Read and Planned marks, and your Inbox and Snooze settings | You, in Sheaf |
What we do not collect
- Your code or any file content.
- The text of comments and reviews, or the full body of an issue or pull request.
- Secret values from secret scanning alerts.
- Data from repositories you did not select.
- Your card number. Settings shows the card brand and last four digits that Polar returns, and Sheaf does not store them.
- Analytics, tracking pixels or advertising IDs.
How we use it
Only to run Sheaf: to sign you in, to show your inbox and to keep it in sync with GitHub. We do not sell your data and we do not use it to train models.
How long we keep it
- Issues, pull requests and alerts: until the item closes, or until you uninstall the app from that account.
- Closed work for This week: until you uninstall the app from that account.
- Your marks and settings: until you delete your account.
- Sessions: until they expire, you sign out, or you sign the device out in Settings.
- Your account: until you delete it in Settings, or ask us to.
Your rights
In Settings, then Profile, you can download a copy of your data as JSON and delete your account. You can also ask us to correct your data or delete it. Email kodeth.app@gmail.com from the address on your GitHub account and we answer within 30 days. These rights follow the Thai Personal Data Protection Act and the EU GDPR.
Changes
If this policy changes, the date at the top changes too. For a large change we email you first.