Spitfire

Spitfire mobile app terms of use

Effective: 9 October 2026

These terms govern the use of the Spitfire Android app (tr.spitfire.app, the "App") offered by [PLACEHOLDER: company name] ("Spitfire", "we"). By installing or using the App you accept these terms.

1. What the App does

The App is the mobile client of the Spitfire controller your organization runs on its own server: it follows and stops runs, starts saved tests, shows results and findings, shares report links and, if you want, receives notifications. Spitfire is not a hosted service; the App does not work on its own and needs a Spitfire 0.5.17 or later controller that the phone can reach. The use of the controller software is subject to the terms of the license under which your organization obtained Spitfire.

2. Accounts

  • No account is created in the App. Your organization gives you an account on the controller (or its single sign-on setting creates one at your first sign-in); your account, your permissions and closing the account are your organization's administrator's decision. Deletion: account and data deletion.
  • You are responsible for keeping your sign-in details secret and for following your organization's rules. What you do in the App is written to the controller's audit log under your name.

3. Acceptable use

  • A test started from the App sends real traffic to its target systems. Only start tests against systems you are authorized to test, and only as far as your organization allows. For tests that write data the App shows the list of operations and asks for confirmation; the consequences of confirming are your and your organization's responsibility.
  • The App may not be used to attack or disrupt other people's systems, or for any unlawful purpose.
  • Trying to get around the security of the App, the controller or the notification server is not allowed. Reverse engineering the App is allowed only as far as applicable law permits.

4. Notifications

Notifications travel end-to-end encrypted from your organization's controller or gate through Spitfire's notification server (relay.spitfire.tr) and Google Firebase Cloud Messaging. A notification may arrive late or not at all (network, Google's service, the phone's battery settings); do not rely on them as the only alerting channel for critical systems.

5. Price

The App is free; it has no in-app purchases and no ads. The controller's license is separate from the App and is not bought in the App.

6. Privacy

What data the App keeps and where is described in the mobile app privacy policy. Your organization is responsible for the data on the controller.

7. Intellectual property

All rights in the App and in the Spitfire name and logo are reserved by [PLACEHOLDER: company name]. You are given a personal, non-exclusive, non-transferable and revocable right to use the App in line with these terms.

8. Limitation of liability

The App is provided free of charge and as is. To the extent the law allows, Spitfire is not liable for what the tests you start do to their target systems, for the controller being unreachable, for the loss of data on the controller, or for notifications arriving late or not at all. Your statutory rights as a consumer are not affected.

9. Changes and ending

If these terms change, the new version is published on this page with its effective date; using the App after the change means you accept it. You can stop using the App at any time by uninstalling it. Your organization may close your account if you use the App against these terms.

10. Governing law

These terms are governed by the laws of the Republic of Türkiye. For consumer transactions the consumer arbitration committees and consumer courts set out in Law No. 6502 have jurisdiction, otherwise the courts and enforcement offices of [PLACEHOLDER: city].

11. Contact

For questions: the contact address at the bottom of the page. Address: [PLACEHOLDER: company address]. For your account and data on the controller, contact your organization's Spitfire administrator.