Legal

Trust & Safety

Effective date: June 7, 2026

QuickPatch gives developers the ability to update their applications’ interpreted Dart code instantly, over the air. With that capability comes responsibility. This page sets out our Acceptable-Use Policy, our app-store compliance position, how we secure the platform, and how we handle abuse and vulnerability reports. It is incorporated into the Code Push Terms of Service.

How the platform stays safe

QuickPatch updates only interpreted Dart code - on iOS through an on-device interpreter, and on Android as a signed data patch. It never downloads or modifies native binary code. Every patch is cryptographically signed and its signature is verified on the device before the patch is applied, so a device will refuse a patch that is unsigned, tampered with, or not signed by the expected key. Patches are staged and applied on next launch with on-device re-verification, and a server-side control can disable or roll back a patch across the fleet.

App-store compliance

Apple’s rules (App Review Guideline 2.5.2 and Developer Program License Agreement §3.3.1(b)) and Google Play’s policies permit over-the-air updates to interpreted code as long as an update does not change the primary purpose of the app or add features or functionality inconsistent with how the app was reviewed and advertised. The bright line is the app’s purpose, not the update mechanism. This is the same basis on which established code-push tools operate.

You can ship

  • Bug and crash fixes;
  • UI/UX improvements, copy and styling changes, and layout fixes;
  • Performance and logic tuning;
  • A/B tests and gradual rollouts of changes consistent with your app’s purpose;
  • Content and configuration updates.

You must not ship

  • Updates that change your app’s primary purpose (for example, turning one kind of app into a different kind of app);
  • Features or functionality inconsistent with how your app was reviewed or advertised;
  • Hidden or gated functionality intended to evade app review;
  • Malware, spyware, or code that harms, surveils, or defrauds End Users, or that exfiltrates data without disclosure and consent;
  • Anything unlawful, infringing, or deceptive, or that violates app-store policies or our terms.

Your responsibility

You are the publisher of your application. Ensuring each update complies with the app-store policies that apply to you and with the law is your sole responsibility. Softever provides the technical means to deliver interpreted-code updates; it does not review, endorse, or assume responsibility for your updates.

Enforcement

Using QuickPatch to violate app-store guidelines, the law, or our terms is a breach of the Code Push Terms of Service and may result in suspension or termination of your account and disabling or rollback of the offending patch. We may act immediately, with or without prior notice, in cases of suspected abuse, legal risk, security risk, or harm to End Users.

Report abuse and responsible disclosure

To report misuse of the Service or a suspected security vulnerability, contact support@quickpatch.dev. We support good-faith security research and responsible disclosure: if you investigate only your own accounts or test data, avoid privacy violations and service disruption, and give us reasonable time to remediate before public disclosure, we will not pursue legal action against you for that research. Please do not access, modify, or delete other customers’ data.