Privacy Policy

FireGo: Firebase Manager  ·  Last updated: August 27, 2026  ·  See also our Terms of Service

FireGo: Firebase Manager ("FireGo", "the App") is a mobile client that lets you sign in with your own Google account and manage your own Firebase and Google Cloud projects. This Privacy Policy explains what information the App accesses, how it is used, and your rights as a user. By using the App you agree to the practices described here.

1. Information We Collect

The App collects and stores the following:

• Google account information — your email address, display name, and profile photo URL, provided by Google Sign-In so the App knows who is signed in and can show your avatar.
• OAuth access token — issued by Google when you sign in, stored encrypted on your device only, and used to authenticate API calls made on your behalf.
• Locally cached project data — your Firebase project list, favorites, recently viewed projects, project aliases, FCM send history, and Remote Config snapshots, cached on-device to make the App faster and usable offline.
• App preferences — theme, developer mode, and App Lock settings, stored on-device.
• Advertising identifier — collected by the Google Mobile Ads SDK on devices where ads are shown, for ad serving and measurement (see Section 5).
• Purchase status — handled by Google Play Billing when you buy a premium subscription or the lifetime unlock (see Section 6).

The App does not collect or have access to the contents of your Firebase projects — Firestore documents, Authentication users, Storage files, and so on — beyond what is displayed to you live while you use the App. None of that project data is copied to, stored by, or passed through any server we operate.

2. How We Use Your Information

Your Google OAuth token is used solely to authenticate requests made directly from your device to the official Google Cloud and Firebase REST APIs (Firebase Management API, Identity Toolkit, Firestore, Realtime Database, Cloud Storage, Cloud Messaging, Remote Config, Cloud Functions, Firebase Hosting, and Security Rules). All communication happens directly between your device and Google's servers over HTTPS.

The App has no backend server or database of its own — it is a pure client. FireGo's developer never receives, logs, or has access to your Firebase project data or your OAuth token.

3. Data Storage & Security

• OAuth access token — encrypted at rest using Flutter Secure Storage (Android Keystore / iOS Keychain). Never displayed in full or written to logs.
• Cached project metadata and preferences — stored locally on your device (SharedPreferences); this cache contains only information already visible to you as the signed-in project owner/collaborator (project names, IDs, counts) — never credentials or tokens.
• App Lock — if you enable this optional setting, access to the App is gated by your device's own screen lock / biometric prompt (fingerprint or face). This authentication is handled entirely by your device's operating system; FireGo never receives, stores, or has access to any biometric data.
• All API calls use HTTPS / TLS.
• The App has no backend servers or databases of its own.

4. Third-Party Services

The App integrates the following third-party SDKs and APIs, each governed by its own privacy policy:

• Google Sign-In & Google/Firebase REST APIs — app authentication and all Firebase project management functionality. Google Privacy Policy
• Firebase — used for app identity only (via firebase_core); the App does not use Firebase Analytics or Crashlytics for its own telemetry. Firebase Privacy & Security
• Google Mobile Ads (AdMob) — in-app advertising SDK, used to show app-open and interstitial ads to non-premium users. Privacy Policy
• Google Play Billing / In-App Purchase — processes premium subscription and lifetime-purchase payments. Privacy Policy

5. Advertising Data

Non-premium users may see app-open and interstitial ads served through Google Mobile Ads (AdMob). To serve and measure these ads, the SDK may collect:

• Your device's advertising identifier (Android Advertising ID / iOS IDFA, where available).
• General device and app context signals (e.g. device type, general location derived from IP, ad interaction data) used by Google to serve and measure ads.

This data is collected and processed by Google, not by FireGo's developer. Once you purchase any premium tier (monthly, yearly, or lifetime), ads — and this associated data collection — stop entirely for your account.

6. In-App Purchases & Subscriptions

FireGo offers an optional, ad-free "Premium" upgrade as a monthly subscription, a yearly subscription, or a one-time lifetime purchase. All purchases are processed entirely by Google Play Billing (or, on iOS, the App Store). FireGo never sees or stores your payment card details — it only receives the purchase status and product ID needed to unlock the ad-free experience on your device.

7. Children's Privacy

FireGo is a developer/admin tool intended for general audiences and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal data through the App, please contact us and we will take prompt steps to remove it.

8. Your Rights & Data Deletion

You may at any time:

• Sign out from Settings to delete your locally stored OAuth token.
• Uninstall the App to remove all locally cached data from your device.
• Revoke FireGo's access to your Google account entirely at myaccount.google.com/permissions.
• Request information about, or deletion of, any data we may hold by contacting us (see Section 11).

9. Data Retention

Your OAuth token and cached project data are retained locally only for as long as you remain signed in on that device. Signing out or uninstalling the App permanently deletes them from device storage. We do not retain any copy of this data ourselves, since none of it ever reaches a server we operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be reflected in the App and on this page with a revised "last updated" date. Continued use of the App after changes constitutes your acceptance of the updated policy.

11. Contact

For privacy questions or concerns, please contact us at support@yourdomain.com, or through the app's Play Store listing.