QuickPatch CLI Terms of Service

Effective date: June 7, 2026

These terms (the “CLI Terms”) govern your installation and use of the QuickPatch command-line interface and associated developer tooling (together, the “CLI”), provided by Softever. By installing, copying, or using the CLI you agree to these CLI Terms. If you use the hosted over-the-air service, the Code Push Terms of Service also apply, and in case of conflict those terms control for the hosted service.

1. License grant

Softever grants you a worldwide, non-exclusive, non-transferable, revocable license to install and use the CLI to develop, build, release, and patch applications that you own or are authorized to manage. The CLI’s source code is distributed under permissive open-source licenses (including Apache-2.0 and MIT); those licenses govern the source code, are included with the distribution, and nothing in these CLI Terms limits any right you have under them.

2. Open-source and third-party components

The CLI downloads, installs, and orchestrates third-party software in order to build and patch your applications, including a pinned Flutter SDK, Dart toolchain, and QuickPatch engine/runtime artifacts. Each such component is licensed by its respective owner under its own terms, and the applicable LICENSE and NOTICE files are preserved and distributed with those components. Softever is not responsible for third-party software and makes no warranty regarding it.

3. Accounts and authentication

Some CLI commands authenticate to the hosted service using your account credentials or an API key. You are responsible for keeping those credentials and any local signing keys confidential, and for all activity performed through the CLI under your account. Do not share credentials or embed them in source control or distributed artifacts.

4. Acceptable use

You will use the CLI only for lawful purposes and in compliance with these CLI Terms, the Trust & Safety policy, and all app-store policies applicable to your applications. You will not use the CLI to build or distribute malware, to infringe third-party rights, to circumvent any platform’s review process, or to attempt to gain unauthorized access to the Service or to other customers’ data.

5. Updates and telemetry

The CLI may check for and install updates to itself and to its managed toolchains so that it stays compatible with the Service. The CLI may transmit limited operational and diagnostic data (for example, version, command outcomes, and errors) to operate, secure, and improve the CLI; this data is handled in accordance with our Privacy Policy.

6. Reservation of rights

Except for the rights expressly granted here and under the applicable open-source licenses, Softever and its licensors retain all right, title, and interest in the CLI. “QuickPatch” and related marks are trademarks of Softever; these CLI Terms do not grant you any trademark rights.

7. No warranty

THE CLI IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, TO THE MAXIMUM EXTENT PERMITTED BY LAW. You are responsible for testing every build and patch before distribution.

8. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, Softever WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF DATA, REVENUE, OR PROFITS, ARISING OUT OF OR RELATED TO YOUR USE OF THE CLI, EVEN IF ADVISED OF THE POSSIBILITY.

9. Termination

These CLI Terms apply while you use the CLI. They terminate automatically if you breach them. On termination you must stop using the CLI; the open-source licenses governing the source code survive in accordance with their own terms.

10. Export and changes

You will comply with applicable export-control and sanctions laws in your use of the CLI. We may update these CLI Terms; material changes will be posted here with a new effective date, and continued use after that date constitutes acceptance. Questions: support@quickpatch.dev.

Privacy Policy

Effective date: June 7, 2026

This policy explains how Softever (“we,” “us”) collects, uses, shares, and protects personal data when you use the QuickPatch website, dashboard, CLI, and code-push service (together, the “Service”). It also explains the limited data exchanged with End-User devices that receive patches.

1. Who we are

Softever, Rampur, Uttar Pradesh, India, is the controller of personal data described in this policy for our own customers and website visitors. Where we process personal data on behalf of a business customer (for example, telemetry from their Application’s End Users), we act as a processor under the Data Processing Addendum and that customer is the controller.

2. Data we collect

• Account data - your name and email (for example, via Google sign-in), organization, and the API keys we issue to you.
• Project data - application identifiers, Release and Patch metadata, version numbers, and the build and patch artifacts you upload to deliver updates.
• Billing data - if you purchase a paid plan, billing contact and transaction records (payment-card data is handled by our payment processor, not stored by us).
• Telemetry and update-delivery data - operational events such as patch availability checks, download and install outcomes, and errors, used to operate and secure the Service.
• Technical and log data - IP address, device and browser information, and request logs collected when you use the website, dashboard, CLI, or API.

End-User devices that receive patches contact our servers to check for and download updates. This may include the device IP address and basic application and Release identifiers. We do not intend the Service to collect End-User personal data beyond what is necessary to deliver updates, and we do not use it to build profiles of End Users.

3. How we use data

• To provide, maintain, secure, and improve the Service;
• To authenticate you and communicate about your account, including service and security notices;
• To meter usage, bill paid plans, and prevent abuse and fraud;
• To monitor, investigate, and enforce our Terms and the Acceptable-Use Policy;
• To comply with legal obligations and respond to lawful requests.

4. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the bases of: performance of a contract (to provide the Service); our legitimate interests (to secure and improve the Service and prevent abuse, balanced against your rights); compliance with a legal obligation; and, where required, your consent (which you may withdraw at any time).

5. Sharing and subprocessors

We share personal data with service providers who help us operate the Service - including cloud hosting and compute, object storage and content delivery, authentication, analytics, error monitoring, and payment processing - under contracts that require them to protect the data and use it only to provide their service to us. Our current subprocessors include Vercel (website and dashboard hosting), Railway (API hosting), Cloudflare R2 (object storage and content delivery), Google (account sign-in), and Razorpay (payment processing); an up-to-date list is available on request. We may also disclose data to comply with law or to protect rights, safety, and the integrity of the Service. We do not sell personal data and do not share it for cross-context behavioral advertising.

6. International transfers

We operate from India and may process and store data in India and in the regions where our cloud providers operate. Where we transfer personal data out of the EEA, UK, or other regulated regions, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK Addendum.

7. Retention

We retain personal data for as long as your account is active and as needed to provide the Service, then delete or anonymize it within 90 days, unless a longer period is required by law, to resolve disputes, or to enforce our agreements. Operational logs and telemetry are retained for up to 12 months.

8. Your rights

Depending on where you live (for example, under the GDPR/UK GDPR or the CCPA/CPRA), you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact support@quickpatch.dev; we will respond as required by applicable law. We will not discriminate against you for exercising your rights.

9. Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and cryptographically signed patch artifacts that are verified on-device. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. See our Trust & Safety policy for how to report a vulnerability.

10. Children

The Service is intended for businesses and is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact support@quickpatch.dev and we will delete it.

11. Changes and contact

We may update this policy; we will post the updated version here with a new effective date and, for material changes, provide additional notice. Questions or requests: support@quickpatch.dev.

Data Processing Addendum (DPA)

Effective date: June 7, 2026 · For customers who require a DPA under GDPR/UK GDPR and similar laws.

This DPA forms part of the agreement between Softever (“Processor”) and the customer (“Controller”) for use of the Service (the “Agreement”), and applies to the extent Softever processes Personal Data on the Controller’s behalf. Capitalized terms not defined here have the meaning given in the Code Push Terms of Service. In case of conflict on data-protection matters, this DPA controls.

1. Definitions

“Personal Data,” “processing,” “controller,” “processor,” “data subject,” and “personal-data breach” have the meanings given in applicable data-protection law, including the EU General Data Protection Regulation (GDPR) and the UK GDPR (“Data Protection Law”).

2. Roles and instructions

The Controller determines the purposes and means of processing; the Processor processes Personal Data only on the Controller’s documented instructions, including those set out in the Agreement, this DPA, and the Controller’s use of the Service’s features, unless required to act otherwise by law (in which case the Processor will inform the Controller unless legally prohibited). The Processor will inform the Controller if, in its opinion, an instruction infringes Data Protection Law.

3. Details of processing

• Subject matter and duration - provision of the over-the-air code-push Service for the term of the Agreement and any wind-down period.
• Nature and purpose - hosting, storing, transmitting, signing, caching, and delivering the Controller’s Releases and Patches, and related telemetry, to operate and secure the Service.
• Categories of data subjects - the Controller’s authorized users and, where applicable, End Users of the Controller’s Applications.
• Categories of Personal Data - account identifiers; application and Release identifiers; technical and log data (including IP address); and update-delivery telemetry, as described in the Privacy Policy. The Controller will not upload special-category data or use the Service to process it.

4. Processor obligations

• Process Personal Data only on the Controller’s documented instructions;
• Ensure persons authorized to process Personal Data are bound by confidentiality;
• Implement and maintain appropriate technical and organizational security measures (Section 6);
• Assist the Controller, taking into account the nature of processing and the information available, with data-subject requests and with the Controller’s obligations regarding security, breach notification, and data-protection impact assessments;
• Make available information necessary to demonstrate compliance with this DPA.

5. Confidentiality

The Processor will keep Personal Data confidential and limit access to personnel who need it to provide the Service and who are subject to confidentiality obligations.

6. Security measures

The Processor implements measures appropriate to the risk, which may include: encryption of data in transit; access controls and least-privilege administration; cryptographic signing and on-device verification of patch artifacts; network and application security controls; logging and monitoring; and regular review of its security program. A summary is available on request; details may be provided under confidentiality.

7. Sub-processors

The Controller authorizes the Processor to engage the sub-processors identified in the Privacy Policy (currently Vercel, Railway, Cloudflare R2, Google, and Razorpay) to process Personal Data. The Processor will impose data-protection obligations on each sub-processor that are no less protective than this DPA and remains responsible for their performance. The Processor will give the Controller notice of intended additions or changes to sub-processors so the Controller may object on reasonable grounds.

8. Data-subject requests

Taking into account the nature of the processing, the Processor will assist the Controller by appropriate measures, insofar as possible, to respond to requests from data subjects exercising their rights under Data Protection Law. If the Processor receives such a request directly, it will, unless legally prohibited, promptly forward it to the Controller and not respond except on the Controller’s instruction.

9. Personal-data breach

The Processor will notify the Controller without undue delay after becoming aware of a personal-data breach affecting the Controller’s Personal Data, and will provide information reasonably available to assist the Controller in meeting its breach-notification obligations.

10. International transfers

Where the Processor transfers Personal Data out of the EEA, UK, or Switzerland to a country without an adequacy decision, the parties incorporate by reference the EU Standard Contractual Clauses (and the UK Addendum and Swiss amendments as applicable), with the Processor (or its relevant entity) as data importer, completed with the details of this DPA and the Agreement.

11. Deletion and return

On termination of the Agreement, the Processor will, at the Controller’s choice, delete or return the Personal Data and delete existing copies within 90 days, except to the extent retention is required by law. Personal Data in routine backups is deleted in accordance with the Processor’s backup-rotation schedule.

12. Audits

The Processor will make available information necessary to demonstrate compliance with this DPA and allow for and contribute to audits, including inspections, conducted by the Controller or an auditor it mandates, subject to reasonable notice, frequency, confidentiality, and security-protective terms.

13. Liability and execution

Each party’s liability under this DPA is subject to the limitations and exclusions of liability in the Agreement. To request a countersigned copy of this DPA, contact support@quickpatch.dev.

Trust & Safety

Effective date: June 7, 2026

QuickPatch gives developers the ability to update their applications’ interpreted Dart code instantly, over the air. With that capability comes responsibility. This page sets out our Acceptable-Use Policy, our app-store compliance position, how we secure the platform, and how we handle abuse and vulnerability reports. It is incorporated into the Code Push Terms of Service.

How the platform stays safe

QuickPatch updates only interpreted Dart code - on iOS through an on-device interpreter, and on Android as a signed data patch. It never downloads or modifies native binary code. Every patch is cryptographically signed and its signature is verified on the device before the patch is applied, so a device will refuse a patch that is unsigned, tampered with, or not signed by the expected key. Patches are staged and applied on next launch with on-device re-verification, and a server-side control can disable or roll back a patch across the fleet.

App-store compliance

Apple’s rules (App Review Guideline 2.5.2 and Developer Program License Agreement §3.3.1(b)) and Google Play’s policies permit over-the-air updates to interpreted code as long as an update does not change the primary purpose of the app or add features or functionality inconsistent with how the app was reviewed and advertised. The bright line is the app’s purpose, not the update mechanism. This is the same basis on which established code-push tools operate.

You can ship

• Bug and crash fixes;
• UI/UX improvements, copy and styling changes, and layout fixes;
• Performance and logic tuning;
• A/B tests and gradual rollouts of changes consistent with your app’s purpose;
• Content and configuration updates.

You must not ship

• Updates that change your app’s primary purpose (for example, turning one kind of app into a different kind of app);
• Features or functionality inconsistent with how your app was reviewed or advertised;
• Hidden or gated functionality intended to evade app review;
• Malware, spyware, or code that harms, surveils, or defrauds End Users, or that exfiltrates data without disclosure and consent;
• Anything unlawful, infringing, or deceptive, or that violates app-store policies or our terms.

Your responsibility

You are the publisher of your application. Ensuring each update complies with the app-store policies that apply to you and with the law is your sole responsibility. Softever provides the technical means to deliver interpreted-code updates; it does not review, endorse, or assume responsibility for your updates.

Enforcement

Using QuickPatch to violate app-store guidelines, the law, or our terms is a breach of the Code Push Terms of Service and may result in suspension or termination of your account and disabling or rollback of the offending patch. We may act immediately, with or without prior notice, in cases of suspected abuse, legal risk, security risk, or harm to End Users.

Report abuse and responsible disclosure

To report misuse of the Service or a suspected security vulnerability, contact support@quickpatch.dev. We support good-faith security research and responsible disclosure: if you investigate only your own accounts or test data, avoid privacy violations and service disruption, and give us reasonable time to remediate before public disclosure, we will not pursue legal action against you for that research. Please do not access, modify, or delete other customers’ data.

Cancellation & Refund Policy

Effective date: June 7, 2026

This policy explains our no-refund policy and how subscriptions to the QuickPatch hosted code-push service, operated by Softever, can be cancelled. It forms part of the Code Push Terms of Service. Pricing and plan details are at https://quickpatch.dev/pricing.

1. Subscriptions and billing

QuickPatch is a subscription software-as-a-service product. Paid plans are billed in advance on a recurring basis (monthly or annually, as selected at checkout) and renew automatically until cancelled. Usage above your plan’s included allowance is billed as overage, as described on the pricing page. A free plan is available so you can fully evaluate the Service before purchasing a paid plan.

2. No refunds

All fees paid for the Service are non-refundable. Because QuickPatch is a digital service that is delivered and accessible to you as soon as your plan is active, we do not provide refunds or credits for any subscription fees, usage-based overage, partial billing periods, or unused time, whether or not you use the Service during the period you have paid for. We encourage you to use the free plan to evaluate QuickPatch before you subscribe.

3. Cancellation

You can cancel your paid plan at any time from the Billing & usage section of your dashboard, or by emailing support@quickpatch.dev. When you cancel, your plan is not renewed at the end of the current billing period — this stops all future charges. Your paid features remain active until the end of the period you have already paid for, after which your account moves to the free plan. We do not charge any cancellation fee, and we do not refund the fees already paid for the current period.

4. Incorrect or duplicate charges

The no-refund policy above does not apply to genuine billing errors. If you are charged more than once for the same period, charged an incorrect amount, or charged after a valid cancellation due to a technical or payment-processing error, contact support@quickpatch.dev within 7 days of the charge. We will verify and reverse any such erroneous charge through our payment processor (Razorpay); this is a correction of a billing mistake, not a refund of the Service.

5. How to contact us

For any cancellation or billing question, email support@quickpatch.dev from the address associated with your account and include your account email and the relevant invoice or transaction reference. We aim to respond within 2 business days.

Shipping, Delivery & Exchange Policy

Effective date: June 7, 2026

QuickPatch, operated by Softever, is a digital software-as-a-service product. No physical goods are sold or shipped. Everything we provide is delivered electronically, so there are no shipping charges, carriers, or delivery addresses involved.

1. What we deliver

Access to the QuickPatch service is delivered electronically through your online account at quickpatch.dev, the QuickPatch command-line interface (CLI), and the over-the-air patch-delivery API. There is no physical product, media, or hardware.

2. When access is provided

When you sign up, access to the free plan is provisioned immediately to your account. When you subscribe to a paid plan, the plan’s features and increased limits are activated on your account as soon as your payment is confirmed by our payment processor (Razorpay) - typically within a few minutes. If a payment succeeds but your plan does not activate, contact support@quickpatch.dev and we will resolve it promptly.

3. Service availability

The Service, the dashboard, and patch delivery are available online wherever you have internet access, subject to maintenance and the terms of the Code Push Terms of Service. Over-the-air patches you publish are delivered to your applications’ end-user devices over the internet on the devices’ next update check.

4. Exchanges & returns

Because QuickPatch is a digital service and not a physical product, there is nothing to return or physically exchange. If you want to change your plan, you can upgrade or downgrade at any time from the Billing & usage section of your dashboard; plan changes take effect as described on the pricing page. Billing adjustments, cancellations, and refunds are handled under our Cancellation & Refund Policy.

5. Questions

For anything related to access, delivery, or plan changes for the Service, email support@quickpatch.dev.

Contact Us

Effective date: June 7, 2026

QuickPatch is operated by Softever. We are happy to help with questions about the Service, your account, billing, privacy, or security.

Business details

• Business name - Softever (operating the QuickPatch service)
• Address - Rampur, Uttar Pradesh, India
• Email - support@quickpatch.dev
• Website - quickpatch.dev

What to contact us about

• Sales & general questions - support@quickpatch.dev
• Billing, cancellations & refunds - support@quickpatch.dev (see the Cancellation & Refund Policy)
• Privacy & data requests - support@quickpatch.dev (see the Privacy Policy)
• Security & vulnerability reports - support@quickpatch.dev (see Trust & Safety)

Response time

We aim to respond to all enquiries within 2 business days. For account-specific requests, please write from the email address associated with your account so we can verify and assist you faster.