TestRoster: Privacy Policy
Effective date: August 22, 2026
TestRoster (the "App") is an Android app by Ümit Can Erim (the "Developer") for running Google Play closed testing. This policy explains what data is processed and why.
No account required
The App opens with a guest session: an anonymous user record is created in the background, and no name or email is requested. Email is collected only if you add an account. An account is needed for three things: inviting real testers to your own closed test, joining someone else's test as a tester, and buying a subscription.
Data processed
| Data | When | Why |
|---|---|---|
| Email, name | Only if you add an account | Account management and authentication |
| Hashed device identifier | When the app runs | Notifications and abuse detection (no raw device or advertising ID is stored) |
| Test session duration | If you grant usage access | Measuring that testing actually happened |
| Task and feedback content | When you write it | Delivering it to the developer of the tested app |
| Purchase records | If you subscribe | Subscription management and legal retention |
| Error and diagnostic logs | When an error occurs | Diagnosis and support |
Usage access permission
Android's "usage access" permission is optional and is used only to measure time spent in the app being tested. Without it you start the timer manually and the record is marked "low confidence". The App does not read the screen content of other apps and does not use AccessibilityService.
Identity privacy
The developer whose app you test never sees your real identity, only your alias (e.g. tester-4f2a91c3). Your email address is never shown to a developer on any screen or in any export.
Google Group
The tester list for closed testing is a single Google Group: testroster-testers@googlegroups.com. Joining happens on Google's side and is subject to Google's own privacy policy. Members' email addresses are hidden from other members; only the group owner can see them.
Data sharing
Data is never sold. Sharing happens in two places only: the feedback and bug reports you write are delivered to the developer of the app you tested; infrastructure providers (Supabase for hosting and database, Google Play for purchases) process data under their own policies.
Retention and deletion
Records are kept for the campaign and legal retention periods. You can request deletion of your account and data from inside the App; personal data is deleted, while purchase records that must be retained by law are kept in anonymised form.
Children's privacy
The App is aimed at developers and does not knowingly collect personal data from anyone under 13.
Contact
Questions and data requests: contact@erimworks.com