Developer Privacy Notice
A transparent, plain-English summary of what data Koda processes, your legal rights under global data protection laws (including the Philippines DPA RA 10173, EU GDPR, and US CCPA), and our local-first computational commitments.
Your Code Stays Local
Source files, AST graphs, and Git trees are processed entirely on your machine.
No Model Training
We never use or license your private source code to train public AI models.
Zero Data Brokers
We do not sell, rent, or trade your personal information to third parties.
Full Deletion Rights
Exercise your GDPR/CCPA rights to access or erase account records anytime.
1. Data Controller Identity
Under European Union General Data Protection Regulation (EU GDPR) and UK data protection law, the primary data controller for personal information collected through our web services is:
Koda
Designated Lead Developer & Security Administrator: John David L. Perez (Tribrix23)
Direct Contact Email: tribrix23@gmail.com
Developer Portal: github.com/Tribrix23
2. Personal Data Processed & Legal Bases
We only process personal data when we have an explicit lawful basis under Article 6 of the GDPR:
| Data Category | Purpose of Processing | GDPR Legal Basis |
|---|---|---|
| Web Server Access Logs | Mitigate DDoS attacks, route regional CDN traffic, and secure infrastructure. | Legitimate Interests (Art. 6(1)(f)) |
| Software Installer Downloads | Delivering Windows (.exe) executables and validating package checksums. | Contract Performance (Art. 6(1)(b)) |
| Voluntary Crash Reports | Identifying and resolving IDE bugs through scrubbed stack traces. | Explicit Consent (Art. 6(1)(a)) |
| Support Communications | Responding to user feedback, bug reports, and Discord inquiries. | Legitimate Interests (Art. 6(1)(f)) |
3. The Local-First Code Guarantee
Unlike web-based editors that transmit source code to remote servers, Koda Softwares operates as a localized native desktop workstation:
- Local AST Parsing: Graph navigation and file dependencies are parsed locally in memory.
- Local Diff Computation: Git split diffs and hunk staging are calculated via your local Git engine.
- Isolated Cell Execution: Computational notebooks execute in local child processes on your workstation.
4. Third-Party Recipients & Data Transfers
We do not sell personal data to advertisers or commercial brokers. We share data strictly with infrastructure service providers bound by strict Data Processing Agreements (DPAs):
- Cloud Hosting & CDN Providers: Anonymized edge request routing and binary downloads.
- User-Directed Git Services: Direct communication with GitHub or GitLab initiated solely by your explicit Git commands.
5. International Data Transfers
When data is transferred across international borders, we ensure adequate protection through standard contractual clauses (SCCs) approved by the European Commission, combined with strict TLS 1.3 transport encryption.
6. Retention & Deletion Periods
Purged automatically
Rotated & scrubbed
Stored in local storage
7. Exercising Your Legal Privacy Rights (Philippines, EU, US & Global)
Under the Philippines Data Privacy Act (RA 10173), EU/UK GDPR, California CCPA/CPRA, and international privacy laws, you retain full sovereignty over your data:
To submit a verified privacy request, send an email to tribrix23@gmail.com. We respond to all verified requests within 30 days without fees.
9. Supervisory Authorities & Complaints
If you believe our processing of your personal data infringes applicable data protection regulations, you have the right to lodge a formal complaint with the appropriate statutory regulatory authority:
National Privacy Commission (NPC)
5th Floor Delegation Building, PICC Complex, Pasay City, Metro Manila 1307
Web: privacy.gov.ph • Complaints: complaints@privacy.gov.ph
Your national Data Protection Authority (DPA) within the European Economic Area (EEA) under the European Data Protection Board, or the Information Commissioner's Office (ICO) in the UK (ico.org.uk).
California Privacy Protection Agency (CPPA) or the Consumer Protection Division of your state Attorney General.
Singapore PDPC (pdpc.gov.sg), Canada OPC (priv.gc.ca), Australia OAIC (oaic.gov.au), or Brazil ANPD.
10. Contact Details & Inquiries
John David L. Perez (Tribrix23)
Lead Developer & Data Protection Officer • Koda