Last Updated: 27.09.2026
AndroCode is a code editor that runs entirely on your Android device. We do not collect, transmit, or store any personal information about you, and we operate no server of our own for anything to reach. Your code and files stay on your device unless you deliberately send them somewhere yourself — for example, by pushing to a Git remote, installing a package, or pulling a container image.
There are a small number of ways data can leave the device, every one of them either under your direct control or caused by a component you chose to use, and none of them involve us. This policy describes each of them plainly, along with what the app keeps on your device and what it does not do.
What Data We Collect
None. AndroCode does not collect personal information, usage statistics, analytics, crash reports, or telemetry of any kind. There is no account to create, no sign-up, and no registration. The app has no first-party tracking and no way to identify you.
How the App Works
AndroCode embeds a self-contained Linux environment on your device and runs a code editor inside it. The editor is a locally hosted instance of the open-source VS Code-based editor, served to its own interface over localhost (127.0.0.1) — your device talking to itself. No data is sent to any server we operate as part of normal use, because there is no such server.
All code execution — whether shell commands, Python, Node.js, or any other tooling — happens entirely on your device.
The app requests a small set of Android permissions for specific purposes. INTERNET covers the user-initiated cases listed under Network Access below, and the loopback traffic between the editor interface and the local server. FOREGROUND_SERVICE and FOREGROUND_SERVICE_SPECIAL_USE keep that local environment and your editor session alive while you work. POST_NOTIFICATIONS is used for the status notification that lets you see the session is running.
AndroCode can also access files on your device if you choose to. Storage access is never used automatically: the app’s default workspace lives in its own private area and needs no storage permission. If you want to reach folders elsewhere on your phone, the app exposes a mirror of your device’s shared storage, and doing that requires Android’s storage permissions (MANAGE_EXTERNAL_STORAGE on modern Android, and the older READ_EXTERNAL_STORAGE WRITE_EXTERNAL_STORAGE on older versions). You are asked before any of this is granted, and you can decline.
There is no permission here for location, contacts, the camera, the microphone, the phone state, or any device identifier.
Network Access
AndroCode requires the INTERNET permission for the following purposes only:
Environment and Editor Setup (User-Initiated)
During first-run setup (and when you choose to repair or extend your installation), the app downloads the components it needs. The base Linux runtime is fetched from the Termux project’s published releases on GitHub, and the editor itself is fetched from the code-server project’s releases on GitHub. These are one-time downloads you trigger by installing or setting up the app; the files are verified before use, and nothing about you or your code is sent. GitHub’s privacy policy applies to those downloads.
Extension Marketplace (User-Initiated)
The editor can browse, search for, and install extensions. This is standard editor behaviour you start yourself: when you install an extension, the editor connects to the extension registry it is configured to use (Open VSX by default) and downloads the extension. The request is made by the editor, not by any tracking code. Open VSX has its own privacy policy, which applies to that exchange.
The editor can also check for updates to extensions you have installed. Whether and when this happens follows the editor’s own settings, which you can change (for example extensions.autoCheckUpdates and extensions.autoUpdate). What leaves the device is the list of extensions being checked — never the contents of your files.
Signing In to a Service From the Editor (User-Initiated)
If an extension or built-in feature asks you to sign in (to GitHub, for example), the sign-in happens in your device’s browser, not inside the app. AndroCode never sees your password: you type it into the provider’s own page.
What comes back to the app is a single opaque value that the editor itself issued and is waiting for. The app reads only what it needs to return that value to the editor, does not store it, and does not send it anywhere else. It accepts a callback only for a sign-in the app itself started, within a short time window, so another app on your device cannot inject one. Any tokens the editor keeps afterwards are stored locally in the app’s private storage.
AI and Chat Features (User-Initiated)
Because the editor is the full VS Code-based editor, it supports the same AI and chat extensions available to it — GitHub Copilot Chat, for example. These are third-party features provided by the extension’s publisher (GitHub, in that case), not by AndroCode. They have no account and offer nothing until you sign in to the relevant provider, which happens through the browser flow described above.
Once you are signed in and you use such a feature, what you type and the code the extension attaches as context go to that provider, under the provider’s own terms and privacy statement. That exchange is between you and the provider. AndroCode does not read it or keep a copy, and it is the only category of feature here that sends content you write to a service other than one you pointed it at yourself. If you would rather not use it, disable the extension from the editor’s Extensions view; the editor works without it.
Git Operations (User-Initiated)
When you push, pull, clone, or fetch, the bundled Git client reaches the remote you configured: GitHub, GitLab, a self-hosted server — whatever you named. For an https remote the connection passes through a proxy that runs on your device at 127.0.0.1; it tunnels the encrypted bytes without reading them. Nothing leaves your device except the connection to the remote you chose. AndroCode adds no destination of its own and keeps no record of where you push.
Package Installation (User-Initiated)
When you run commands like npm install or pip install in the terminal, those package managers connect to their respective registries (npmjs.com, pypi.org, and so on) to download packages. This is standard developer tooling behaviour and is entirely under your control. Like every request such tools make, the registry receives your device’s IP address and the tool’s User-Agent, which describes the versions of the tools in use. The registry’s own privacy policy applies to those requests.
Container Images (User-Initiated)
AndroCode includes a container runtime so you can run containers on your device. When you pull a container image, it is downloaded from the registry that image names — Docker Hub by default — using the same mechanisms as standard Docker tooling. The connection goes to the registry you specified. The registry’s privacy policy applies.
SSH Connections (User-Initiated)
If you use the bundled SSH client to connect to remote servers, those connections are initiated by you and go directly to the server you specify. AndroCode does not proxy, monitor, or log SSH connections.
Internal Communication (Localhost Only)
The editor interface communicates with the local server process over localhost (127.0.0.1). This traffic never leaves your device. The server listens on the loopback interface only, so nothing on your network can reach it, and it requires a token held in the app’s private storage before it will answer a request.
Android Backup
AndroCode opts out of Android’s backup service, so none of your files, settings, or projects are uploaded to your Google account’s backup by this app. Your code stays on your device. If you want a copy of your work elsewhere, that is up to you — a Git remote, for example — and nothing the app does sends it there without your action.
What We Do NOT Do
- We do not collect analytics or usage statistics
- We do not send crash reports to any external service
- We do not use any third-party tracking SDKs
- We do not serve advertisements
- We do not collect device identifiers, IP addresses, or location data
- We do not use cookies for tracking purposes
- We do not share any data with third parties. The only content that leaves the device to a third party is what you yourself send — to a Git remote, a package registry, a container registry, or an AI/chat provider you signed in to — and each of those is described in the sections above
- We do not send editor telemetry. The editor’s telemetry is switched off and given no endpoint to report to
Data Stored on Your Device
The following data is stored locally on your device, within the app’s private area:
- Your project files: Stored in the app’s private internal storage by default (which other apps cannot read, and which clearing the app’s data wipes). If you choose to open a folder from elsewhere on your device, the app works with that location through the storage access you granted
- Editor settings and preferences: Stored locally as configuration files
- Installed extensions: Downloaded from the extension registry and stored locally
- SSH keys: If you generate SSH keys using the built-in tool, they are stored in the app’s private
~/.ssh/directory. They never leave your device unless you explicitly copy or use them - Terminal history: Stored locally within the app
- Container images and layers: If you pull container images, they are stored locally on your device
- Extension data: Any data created by installed extensions is stored locally
All of this data is removed when you uninstall the app or clear the app’s data through Android Settings.
Third-Party Services
AndroCode itself includes no third-party analytics, advertising, or tracking SDKs. The third-party services it integrates are:
- The editor and its runtime: The app runs an open-source VS Code-based editor (code-server) and a Linux environment based on the Termux project. These components are fetched from their publishers’ release channels during setup and run entirely on your device
- GitHub: Used for downloading the editor and runtime components during setup, and reached whenever you use Git, extensions, or AI/chat features that point at GitHub. Governed by GitHub’s privacy policy
- Open VSX and other extension registries: Used when you browse for or install editor extensions. Governed by the registry’s own privacy policy
- Package registries (npm, PyPI, and others): Reached when you install packages in the terminal. Each is governed by its own privacy policy
- Container registries (Docker Hub and others): Reached when you pull container images. Each is governed by its own privacy policy
Extensions you install are third-party software. Each extension may have its own privacy practices. We recommend reviewing an extension’s description and privacy information before installing it.
Children’s Privacy
AndroCode is a software development tool intended for developers. It is not directed at children under the age of 13, and we do not knowingly collect any information from children. Because AndroCode collects no data from any user, there is no risk of children’s data being collected.
Data Security
Because AndroCode does not collect or transmit user data, there is no central database or server to secure. Your files and settings are protected by Android’s app sandboxing, which prevents other apps from accessing AndroCode’s private storage. We recommend using your device’s built-in security features (screen lock, encryption) to protect your data.
Changes to This Policy
If we make changes to this privacy policy, we will update the “Last Updated” date at the top of this document. Material changes will be noted in the app’s release notes on the Google Play Store. The current version of this policy is always available on the Google Play Store listing.
Your Rights
Because AndroCode does not collect any personal data, there is no personal data to access, correct, delete, or port. If you want to remove all app data from your device, you can uninstall the app or clear its data through Android Settings > Apps > AndroCode > Clear Data.
Contact
If you have questions about this privacy policy, please contact us at:
- Email: [email protected]