Privacy Policy — Domain Canary

Domain Canary is a local-first app. It does not require an account, does not include ads or analytics SDKs, and does not send your tracked domains or notes to SudoCod servers. Data stays on your device except for the network checks you trigger and optional backups you (or your device) enable.

Domain Canary is sold as a one-time paid app (not a subscription). The listed price may vary by country or storefront. Purchase is a single payment through the platform store (Google Play or the Apple App Store).

Payment is processed by the app store, not inside Domain Canary and not by SudoCod directly. The app does not collect, store, or transmit payment card numbers, billing addresses, or other payment credentials.

SudoCod may receive limited purchase or payout reports from Google or Apple (for example that a paid download or purchase occurred, and settlement details for the developer). Those reports do notinclude your app's on-device domain list or notes.

There is no in-app subscription, recurring charge, or in-app product catalog in Domain Canary. After you buy the app once on a store, you use it under that purchase (subject to that store's refund and license rules). Purchases on Google Play and the App Store are separate; buying on one platform does not automatically grant a license on the other unless SudoCod later offers an explicit cross-platform arrangement.

When you use the app, it may store locally:

• Hostnames you add to track
• Optional notes you enter
• SSL certificate details obtained from checks (for example expiry, issuer, subject, SANs, TLS version)
• Domain registration details obtained via RDAP (for example registrar, expiry, status, name servers)
• Reminder settings (whether notifications are on, and day thresholds)
• Local notification history used to avoid duplicate reminders

This data is stored in the app's on-device storage (database and preferences / equivalents). It is not uploaded to SudoCod.

iOS note:The same categories of data are intended for the iOS app. Exact storage APIs (for example SwiftData, Core Data, or UserDefaults) may differ; the data types and "local only" principle stay the same unless this policy is updated.

To perform checks you request (or refresh), the app may:

1. Open a TLS connectionto the hostname you entered (typically port 443) to read the server's certificate. That host's server will see a connection from your device (including your IP address), as with any normal HTTPS client.
2. Query public RDAP endpoints (for example services such as rdap.org or registry RDAP servers) with the domain name you entered, to look up public registration/expiry information.

These requests are made only for features you use. The app does not phone home to SudoCod for telemetry, crash reporting, advertising, or account sync.

This network behavior is intended to be the same on Android and iOS.

If you grant notification permission and keep reminders enabled, the app schedules local checks on your device and may show notifications that include hostnames approaching expiry. Reminder evaluation uses data already stored on the device.

• System backup / device transfer
  • Android:If backup is enabled, Android may include the app's local database and settings in system backups (for example Google Backup or OEM device transfer). Controlled by your device / Google account settings, not by SudoCod servers.
  • iOS (when available):If you enable iCloud Backup or transfer/restore via Finder/iTunes (or similar), Apple's backup mechanisms may include app data according to iOS backup rules and your Apple ID settings. Controlled by Apple / your device settings, not by SudoCod servers. If the iOS app later uses optional iCloud containers for sync, that will be disclosed here before shipping that feature; no iCloud sync is promised in this policy until implemented.
• Manual export/import: You can export a backup file (for example JSON) and choose where to save it (Files, cloud storage apps, AirDrop, etc.). Import merges or replaces local data from a file you select. You control who can access exported files. Cross-platform import/export between Android and iOS may be offered if formats are compatible; that does not send files through SudoCod.

The app only requests access needed for its features. It does not request contacts, location, camera, microphone, or your photo library for core expiry tracking.

Domain Canary is not directed at children under 13. We do not knowingly collect personal information from children through this app.

SudoCod does not sell your data. The app does not share your tracked list with third parties for advertising. Third parties that may receive limited technical information in the course of a check you initiate include:

• The servers for hostnames you choose to check (TLS handshake)
• Public RDAP operators when a domain lookup runs
• Your backup provider or storage destination if you enable system backup or export a file there
• Google or Apple, for store purchase and (if enabled) platform backup — under their respective policies

When Domain Canary is submitted to the App Store, SudoCod will complete Apple's privacy nutrition labels based on the shipped iOS build. The intended answers for a local-first, no-analytics build are:

• Data Not Linked to Youmay include data used only on device for app functionality (or "Data Not Collected" for categories the app never collects), depending on how Apple classifies on-device-only data at submission time
• No tracking for advertising
• Purchase history handled by Apple for the App Store transaction itself

Exact label selections will match the final iOS implementation and will be kept consistent with this policy.

Data remains on your device until you delete domains in the app, clear app storage / offload and delete the app, or uninstall. Uninstalling removes local app data (system or iCloud backups you already made may still exist until you delete them through your account or device backup settings). Exported files remain wherever you saved them until you delete them.

We may update this policy when the app's behavior changes (including when the iOS app launches or gains new capabilities). The effective date at the top will be revised when we do. Continued use after an update means you accept the revised policy.

Questions about this policy or the app:

• Web: https://sudocod.com
• Developer: SudoCod