This Privacy Policy explains how App Rejection Fix (“we”, “us”) handles information when you use apprejectionfix.com (the “Site”) and the services offered through it. App Rejection Fix is operated by Keshav Infotech (the “Operator”).
1. Who operates this service
The Site and the service are operated by Keshav Infotech, a partnership firm, 608 Dhanrajni Complex, Dr. Yagnik Road, Rajkot, Gujarat 360007, India. For privacy questions contact hello@apprejectionfix.com.
2. Information you submit
When you submit a rejection for review or send a general inquiry, we collect what you enter: your name, email address, optional company name, the platform, the rejection or enforcement message, app details (name, package or bundle identifier, store URL, technology), previous rejection or appeal history, the help you are asking for, and any free-text you provide. We use this to review your case, respond to you and, if you engage us, deliver the service.
3. Uploaded files
You may upload screenshots or PDF documents of rejection notices. Uploads are stored on private storage that is not publicly accessible, not indexed by search engines and not exposed at predictable URLs. Files are validated on upload (type, size and content) and are viewable only by authorised reviewers through an authenticated administrative interface. Do not upload files containing passwords, keys, secrets, payment credentials or your users’ personal data; if you do, we will delete them and ask for a redacted version.
4. Rejection messages
Rejection messages you paste or upload may contain names, email addresses or other details included by the platform. We use that content only to diagnose your case. It is not published, not used for marketing, and not shared except as described in section 7.
5. Rejection Decoder
Text you paste into the Rejection Decoder is processed on our servers to classify it. We retain the pasted text encrypted at rest, together with the classification result and technical metadata, so that we can improve the decoder’s patterns and understand where it fails. The stored text is hidden from staff by default; any explicit reveal by an administrator is recorded in an audit log. Decoder text is never sent to analytics providers. Decoder records are deleted automatically after 90 days, unless the session was converted into a submission that you asked us to review (that submission then follows section 9).
6. Analytics, cookies and technical data
The Site uses a session cookie required for forms and security (CSRF protection). We do not use any advertising service. The only analytics currently active is Cloudflare Web Analytics — a cookieless, aggregated performance measurement run by Cloudflare (our CDN and security provider, section 7) as part of serving the Site; it does not identify you. If we introduce any other analytics service, this policy will name it first, and analytics events will never include rejection text, uploaded files, names, email addresses or app identifiers.
Separately from third-party analytics, we keep first-party operational measurement on our own server: the page you started from, the page you landed on, the referring site and campaign parameters (which we normalise into a traffic-source label such as “Google”, “Bing” or “AI assistant”), the pages of this Site you passed through on the way to a form, and anonymous counts of interaction events such as a form being started, a file being attached, a validation error occurring, the Decoder being used or a form being submitted. These events carry only categorical values (page, platform, category, confidence, button identifier) and a keyed session hash — never what you typed, your files, your name or your email address. If you choose to answer the optional “How did you hear about us?” question, that answer is stored with your submission. We also record a keyed hash of your IP address (not the address itself) for abuse prevention. This measurement is not shared with any third party. We do not sell personal data.
7. Service providers and sharing
We use a small number of infrastructure providers to run the Site: our web and mail server is a dedicated server rented from Zare (Hydra Communications Limited, United Kingdom) and administered by the Operator; Cloudflare, Inc. provides DNS, content delivery and security in front of the Site; notification email is sent from our own mail server on that infrastructure. Apart from Cloudflare Web Analytics (section 6) we do not use third-party analytics, and we use no advertising or malware-scanning services. Providers process data on our instructions. We do not share your information with Google LLC or Apple Inc.; we are not affiliated with either company. We may disclose information if required by law.
8. Security
We use HTTPS, private file storage with content validation, hashed passwords for administrator accounts, access controls, rate limiting and audit logging. No method of transmission or storage is completely secure; do not send us secrets.
9. Retention
Submissions and inquiries are retained while your case is open and for 12 months after it is resolved or closed, then deleted automatically. Uploaded files are deleted automatically 90 days after your case is resolved or closed. Abandoned upload drafts are deleted automatically after 24 hours. You may ask us to delete your submission and files at any time (section 11).
10. International processing
The Operator is based in India. Our server is located in the United Kingdom, and Cloudflare operates a global network, so information may be processed in those and other countries where our providers’ systems operate. Providers act on our instructions under their published terms and security commitments; if you contact us we will explain where your information is held.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete or export your information, to object to or restrict processing, and to complain to a supervisory authority. To exercise these rights, email hello@apprejectionfix.com from the address you used. We will verify your identity before acting.
12. Children
The Site is intended for app developers and businesses and is not directed at children. We do not knowingly collect information from anyone under 18 years of age; if you believe a minor has submitted information, contact us and we will delete it.
13. Case studies
We publish a case study only if you have expressly given permission on your submission (anonymous or named) and approved the text. You can withdraw permission at any time before publication by contacting us.
14. Changes to this policy
We may update this policy. The “last updated” date at the top reflects the current version. Material changes will be indicated on this page.
15. Contact
Email hello@apprejectionfix.com or use the contact page.