HTTPBuddy Privacy Policy

HTTPBuddy (hereinafter referred to as “the App”) is a lightweight HTTP/API debugging tool. We value your privacy and are committed to protecting your data security through a simple and transparent policy.

1. App Description and Features

HTTPBuddy is an iOS utility designed for debugging HTTP requests and WebSocket connections. It offers the following core and auxiliary features:

Core Features:

• HTTP Client: Compose and send HTTP requests with custom methods, headers, query parameters, and request bodies, and inspect status codes, headers, and formatted responses.
• WebSocket Client: Establish WebSocket connections, send/receive messages, and use Ping/Pong/Close for connection debugging.
• History & Replay: Automatically record request and WebSocket session history for quick access and replay.
• Phase Timing: Measure and display the time spent on connection establishment, TLS handshake, request sending, and response receiving.
• Load Testing: Simulate concurrent requests or a target QPS to evaluate API performance.

Auxiliary Features:

• Data Export: Export requests and sessions in HAR format or as raw HTTP text.
• API Sync: Connect Postman or Apifox using your own API credentials to fetch interface lists and import request templates.
• Scripts & Expression Injection: Support scripts and dynamic expression injection in requests.

2. Privacy Commitments

To protect your privacy, we adhere to the following strict guidelines:

• Zero User Data Collection: We do not collect, store, or transmit any of your personal identifiable information, device information, or usage habit data.
• No Registration or Login Required: The App does not require an account system. You can access all features without registration, ensuring complete isolation between your identity and your data.
• Local Processing: All request records, session history, scripts, and configurations are stored locally on your device using SwiftData. Your data is never uploaded to our servers or synced to iCloud.

3. Data Storage

• Local Storage: All data is persisted on-device via SwiftData. CloudKit/iCloud synchronization is explicitly disabled.
• Third-Party API Credentials: If you choose to connect Postman or Apifox, the API keys and IDs you enter are stored locally on your device and are used only to communicate directly with those third-party services. We do not access, collect, or store these credentials.

4. Third-Party Services

When you actively connect Postman or Apifox in the API tab, HTTPBuddy communicates directly with those services using the credentials you provide. Your interactions are governed by the respective privacy policies of those third-party services. We encourage you to review their policies before use.

5. Purchases

The App offers an optional one-time Pro Lifetime purchase handled entirely by Apple’s App Store (StoreKit). We do not process or store any payment information; all transactions are managed by Apple.

6. Data Security

Since all operations are executed locally, your data security is protected by your device’s operating system (iOS).

7. Contact Us

If you have any questions or suggestions regarding this Privacy Policy, please contact us at:

• Email: support@xling.net

8. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be notified by updating this page. We recommend checking this page periodically for any changes.

Last Updated: August 19, 2026