Legal

Privacy Policy

Last updated October 9, 2026

Overview

NativeLab is a GitLab client for iOS. This policy explains what data the app and this website handle, where it is stored, and who can see it. The short version: your GitLab data stays between your device and your GitLab instance.

Data the app handles

NativeLab talks directly to the GitLab instance you sign in to, using OAuth 2.0 with PKCE or a personal access token you provide. Projects, issues, merge requests, diffs, and comments are fetched from that instance and shown on your device. We do not run a server that sees, stores, or proxies any of it.

Your OAuth access and refresh tokens, or your personal access token, are stored in the iOS Keychain on your device. They are sent only to your GitLab instance when the app makes API requests, and they are removed when you sign out.

Analytics

This website records anonymous page views to understand which pages are read. The app itself sends no analytics, crash reports, or telemetry to us. No personally identifiable information is collected in either case.

Third parties

We do not sell, share, or transfer any data to third parties. The only external service the app communicates with is the GitLab instance you choose.

Changes to this policy

If this policy changes, the updated version is published on this page with a new date. Continued use of the app after a change means you accept the updated policy.

Contact

For privacy questions, write to privacy@nativelab.app.