Acordo do desenvolvedor

This agreement applies to developers who publish apps on the Platform operated by «OPERATOR NAME». To become a developer you apply, and your application must be approved. The same account can be both a user and a developer.

Your app runs on your infrastructure. The Platform does not host or run your app's code; it lists your app, reviews it and provides the session bridge between you and the user. You are responsible for your app's operation, security, backups and content.

The manifest you submit is reviewed. Review usually concludes within 3-5 business days and at the latest within 7 business days. A decision to request changes or to reject is never made without a reason. Review is not a guarantee that your app is free of errors.

The Platform gives you two separate signed tokens. Both are verified with the same public key, and both carry not the user's real identity but a pseudonymous identity derived for you (sub).

• Panel token (purpose: "panel"): issued when the user opens your app inside the Platform. It lives 120 seconds and is issued only for your app.
• Connection token (purpose: "dispatch"): arrives in the Authorization header of the call when a connection writes data to your app. It lives as long as the connection; once the user deletes the connection it is never sent again.

When you use these tokens:

• You check what the token was issued for (purpose) and never accept one token in place of the other.
• You remember the panel token's identifier (jti) for at least its lifetime and refuse it if it is replayed.
• You drop the panel token from the address bar as soon as the panel opens.
• You send Referrer-Policy: no-referrer on your panel page.
• Your panel address is https and cannot be the Platform's own address.

Trying to match the identity in a token with another developer's, attempting to reverse it and asking the user to reveal their real identity outside the Platform are prohibited.

For the data users give your app, you are the data controller. Publishing your own privacy policy, answering users' data requests and complying with the law are your obligations.

You must give the address of that policy on your store page, and the address must keep working: the user has to be able to read what will happen to their data before installing your app. Installing means their data starts flowing into your system.

The Platform does not set your retention and deletion policy; it only has to be reasonable and written in your privacy policy. No fixed period is imposed.

You can reply once to each review of your app. You cannot hide reviews or have them deleted; you can report a review you believe is abusive, and the Platform decides. Using incentives, rewards or pressure to influence ratings or reviews is prohibited.

The Platform is free of charge: you are not charged a commission or a listing fee, and paid apps cannot be published. Taking payment by sending the user outside the Platform is not accepted during this period either. When pricing is introduced, the terms will be announced before they take effect.

These are two separate situations with different consequences:

• Removal from the store: the app is not shown in the store and cannot be newly installed; existing users keep using it.
• Suspension: if this agreement is breached, the Platform may suspend the app. A suspended app cannot be newly installed and no identity token is issued for it, so it does not open inside the Platform and cannot be the target of connections. The reason is recorded and sent to you.

You can remove your app from the store and leave the developer programme at any time. Leaving does not end the obligations you have taken on towards your users; you are expected to keep their data accessible for a reasonable period.

You are responsible for damage caused by your app. As an intermediary, the Platform gives users no warranty about how your app works. This agreement is governed by the laws of «GOVERNING LAW», and the courts of «VENUE» have jurisdiction over disputes.