Terms of Service

These Terms of Service ("Terms") are a binding agreement between you and TestersWiz ("TestersWiz", "we", "us"), the operator identified at the top of this page. TestersWiz is currently operated by an independent developer based in the United States. If operation transfers to a company, that company will take over these Terms and we will tell you before it happens.

You accept these Terms when you tick the box at sign-up confirming that you agree to them, or when you accept an updated version we present to you. If you do not agree, do not create an account or use TestersWiz (the "Service").

If you already have an account. This version applies to you when you accept it, or 14 days after we notify you of it if you keep using the Service, whichever is sooner, as the Terms you accepted before provided. The changes to the arbitration agreement in section 20 apply only as section 20.8 says.

Age. You must be at least 18 years old and able to form a binding contract. The Service is not directed to children. If we learn that an account belongs to someone under 18, we will close it and delete its data as described in the Privacy Policy.

Businesses. If you use the Service for a business, you accept these Terms for that business and confirm you are authorised to do so; "you" then includes the business. The Data Processing Addendum forms part of these Terms for business customers who submit personal data to the security tools.

Documents that form part of these Terms. The Acceptable Use Policy, the Community Guidelines, the Moderation Policy, the Copyright and DMCA policy and, for business customers, the Data Processing Addendum. The Privacy Policy and Cookie Policy explain how we handle personal data; they are notices, not contract terms. If these Terms conflict with another document, these Terms win, except that the Data Processing Addendum wins on the processing of personal data.

• You sign in with a Google account. Use the Google account you will test with: it is the one that joins tester groups and opts into closed tests.
• One account per person. Operating more than one account, or letting anyone else use yours, is prohibited.
• Keep your Google account secure. You are responsible for activity on your TestersWiz account. Tell us straight away at [email protected] if you think someone else has used it.
• You may not sell, transfer or lend your account.

TestersWiz is a marketplace that connects Android developers who need testers for Google Play closed testing ("Developers") with people willing to test their apps ("Testers"). One account may act in both roles, but you may never test your own app.

A Developer lists an app for free. Its tester seats are filled either by a reciprocal "trade", where two Developers each agree to test the other's app, or by a Tester who volunteers. Testers opt in through Google Play with the Google account they registered, keep the app installed for the campaign, and submit screenshot check-ins as evidence of participation.

How long a listing lasts. Testing runs in 14-day rounds. When a round is confirmed, the listing reopens for the next group of testers. A listing stays open for at least six months, and after that until it has served 28 testers who completed a test; it never ends on a date alone. You can cancel your own listing while it is recruiting.

The Service also includes messaging between members, a feed, public profiles and public listing pages (both of which you control), notifications by email and, if you allow it, by browser push, and the free and paid tools in sections 7 and 8. Features may be introduced gradually and may not all be available to every account.

Testers are independent users. Nothing in these Terms creates an employment, agency, partnership or contractor relationship between TestersWiz and any user, or between Developers and Testers.

• Give accurate app information (name, package ID, opt-in link) and keep a working closed-testing track.
• List only apps whose content is lawful and complies with Google Play's Developer Program Policies. Apps containing malware, deceptive behaviour or illegal content are prohibited and will be removed.
• Treat the Google email addresses and screenshots you receive from Testers as confidential: use them only to run and verify your test, and do not add Testers to mailing lists or share their details.
• Verify tester opt-ins promptly and confirm or dispute the campaign within a reasonable time after day 14. Disputes must be made in good faith with specific reasons.
• Compliance with Google Play's policies remains your responsibility (section 14).

• Participate genuinely: opt in with the Google account you registered, install the app on a real Android device you use, use it during the campaign, and submit authentic, unedited screenshots from that device.
• Screenshots should show the app under test. Avoid capturing other people's personal information, notifications or messages; crop or retake a screenshot that does.
• No emulators, automation or account sharing, and no more than one account per person.
• Dropping out mid-campaign affects your public record. If your seat came from a trade, dropping out fails the trade and records a strike against you.

Testing is free, in both directions. You never need to pay to list an app: the Wizbit a listing costs can always be earned by testing another Developer's app. Testing an app earns no money. We do not charge Developers for tester seats and we do not pay Testers for testing. Buying Wizbits does not affect who gets a seat, how quickly a campaign fills, where a listing appears, or any reputation signal.

Tester seats cannot be bought. They are earned by reciprocal trade or filled by volunteers. We will not sell them, and you may not pay or reward another user, on or off the platform, for a seat, a check-in, a review or an opt-in. Doing so is grounds for termination and is separately prohibited by Google Play's policies — a risk that falls on your app, not ours.

What Wizbits are. Wizbits are credits for use within the Service, under a limited, personal, revocable permission we grant you. They are not currency, property or an investment, cannot be exchanged for cash or redeemed for anything outside the Service, and cannot be sold, transferred or given to another account. You can earn them, or buy them in packs.

How Wizbits are earned. By testing another Developer's app: one for the install proof you file when you join the test, and one when the test is completed, which that Developer confirms. We decide whether the install Wizbit is awarded when the proof is filed or only once the Developer confirms your install, and we review install proofs either way. Earning is capped over a rolling period. We may withhold, adjust or revoke Wizbits obtained through error, fraud or abuse, including where the install proof they were awarded for is rejected on review.

What Wizbits can be used for. Three things: putting a listing live, a Database Security Audit (6 Wizbits) and a stress test of your app (12 Wizbits). Wizbits never buy testers. Admitting a tester to your campaign costs nothing, and seats are filled by trades and volunteers, never sold. Reciprocal trades never cost Wizbits. We may change what Wizbits can be used for and how many a use costs, with notice where the change is material. Unused Wizbits are lost when you close your account and are never paid out, except as set out under Buying Wizbits below.

Buying Wizbits. We sell Wizbits in packs. Payments are taken by our payment processor, Stripe, whose checkout page shows the total you will pay, including any sales tax or VAT, before you confirm. Bought Wizbits are added to your account as soon as the payment settles and are used exactly like earned ones. Because they are delivered at once, at checkout you ask us to add them immediately and acknowledge that you lose your right to withdraw once they are added. Bought Wizbits are not refundable, except where the law requires: for example, if Wizbits you paid for never reach your account, we add them or refund you. If a payment for Wizbits is refunded or reversed, including by a chargeback, we remove the Wizbits it paid for, even if that takes your balance below zero, and we return them if a chargeback is decided in our favour. Bought Wizbits do not expire while we sell them. If we close your account for a reason other than your breach of these Terms, or stop offering Wizbits, we refund the bought Wizbits you have not used.

Trades. Accepting a trade creates a testing commitment on both sides. If a party fails to hold up their side — dropping out, failing to opt in, withholding opt-in verification, or cancelling the relevant campaign — the trade fails, the other party is released, and a strike is recorded against the party at fault. Repeated strikes within a rolling window may pause your ability to start new trades.

Cancellation. While a campaign is recruiting, the Developer may cancel it; applicants and trade partners are released. Cancelling a campaign that a live trade depends on counts as failing that trade.

The Play pre-flight, the Security Briefing, the launch readiness checklist, the prompt library, the report exports and the security track are available at no charge. They do not provide tester seats, marketplace priority, faster matching, badges or reputation.

The Security Briefing asks you about your app and returns security topics your answers suggest are relevant. We do not examine your code, binary or servers when you use it.

The security track. For a campaign, it guides you through two kinds of check. For the dependency check, we send the package names and versions you paste — nothing else — to OSV.dev, a public vulnerability database operated by Google, and show you the known vulnerabilities it returns. For the dynamic checks, we give you instructions for tools that you run. We never run them. You may run them only against apps, servers and accounts you own or have written permission to test, and you are solely responsible for doing so lawfully and safely.

Guidance, not an audit. The security and compliance prompts are educational guidance you run yourself against your own code. They are not a penetration test, a security audit, a certification, or legal advice, and no result they produce is a warranty that your app is secure, accessible, or compliant with any law. They improve over time and will still miss things: no automated review, ours included, finds every vulnerability. You remain responsible for your own application, and for obtaining professional security and legal advice where your circumstances call for it. Any change you make in response to it is your decision and your responsibility; test it before deploying it.

Changes. We may change or withdraw free tools. If we start charging for a tool, we will say so before it takes effect, it will apply only to new purchases, and nobody will be charged without agreeing to a price.

8.1 What it is. The Database Security Audit analyses database configuration that you paste: the output of a read-only query we show you, or a schema-only SQL dump. It currently supports Supabase (PostgreSQL). It does not connect to your database and does not read rows of your data. What you paste is analysed in memory and is not stored; only the findings are. It is static analysis only: we do not connect to your servers, backend or database, and we do not attempt to exploit anything.

8.2 How findings are decided. Findings, their severity and confidence, and the overall verdict are decided by our own automated rules, and the same input produces the same result. Where a finding matches behaviour that is normal for a framework or a common setup, the report downgrades it or sets it aside and shows why. The audit makes no AI call.

8.3 You may only submit what you are authorised to submit. Before every audit you confirm that the database is yours or that you have its owner's permission. Submitting configuration you are not authorised to submit breaches these Terms and may infringe the owner's rights and the law where you are.

8.4 What you must not submit. Malware or anything designed to harm our systems or anyone else; passwords, API keys or other credentials, especially ones that are not yours; other people's personal data, including rows of your customers' data; or anything else the Acceptable Use Policy prohibits. We may refuse, stop or delete a submission we reasonably believe breaks this section, and suspend the account that made it.

8.5 The limits of the analysis. The audit reads policies and permissions as text, judges whether data is sensitive from column names only, and is only as complete as what you paste. A report does not test, and does not show to be secure, your backend, authentication, business logic, infrastructure or runtime behaviour. Each report lists what it did not check.

8.6 What a report is — and is not. A report is produced automatically. It may contain false positives and will not find every vulnerability. It is not a penetration test, a security audit, a code review, a certification, or legal, regulatory or compliance advice, and it is not a substitute for any of them. We do not promise that your app, backend, database or data are secure or compliant, or that Google will approve your app.

8.7 Your responsibilities. You remain responsible for your apps, databases and submissions; for your credentials, including rotating any key a report shows was exposed; for deciding whether and how to act on a report; for your compliance with the law; and for every declaration you make to Google Play or a regulator. The ready-made prompts are suggestions for AI coding tools we do not control; review and test any code they produce before you release it.

8.8 Confidentiality and who processes your submission. We treat what you submit as confidential and use it only to provide the audit to you. Configuration you paste is processed in memory by our application servers, hosted by Vercel, and is not sent to any AI provider. We do not sell your schemas or reports, we do not use them to train AI models, and we share them only with the providers named in the Privacy Policy or where the law requires it. We may use aggregate statistics that identify no database, customer or person to improve the audit.

8.9 How long we keep it. Audit results are deleted 365 days after they are created. Configuration you paste is never stored. PDFs are generated when you open them and are not stored. You can delete an audit at any time from its page, and deleting your account deletes all of them.

8.10 The App Security Check has ended. We stopped offering the App Security Check (the automated analysis of uploaded Android apps) and its free checks on 5 October 2026, and deleted every uploaded app, scan result and report we held for it. We keep only the payment records the law requires us to keep.

8.11 Price. An audit costs 6 Wizbits. They are taken when the audit is saved, and an audit that cannot be analysed costs nothing. Wizbits can be earned or bought (section 6). We may change the number of Wizbits an audit costs, and the page shows the price before you paste anything.

8.12 Refunds for purchases made before 5 October 2026. If you bought an App Security Check or a Database Security Audit before 5 October 2026 and believe you are owed a refund, email [email protected] from the address on your account and a person will review it. Nothing in these Terms limits rights the law where you live gives you and that cannot be waived, including your rights if digital content or a digital service was faulty or not as described.

8.13 Using your reports. Your audits are yours to use, copy and share for any lawful purpose, as long as you do not remove their disclaimers or present them as a manual audit, penetration test or certification.

8.14 Changes. We may change what the audit examines, how reports are presented, and its price in Wizbits.

8.15 Stress tests. From one of your own listings you can ask us to stress-test the app, for 12 Wizbits taken when you ask. We install it from the listing's testing link and run it, one app at a time, through thousands of fast, random taps, swipes and system events, looking for crashes, freezes and “app isn't responding” errors, then email you what we found. Random input can press any button the app shows, so give us a test account and a build that cannot charge real money, contact real people or change real data; what the app does in response to that input is your responsibility. Do not send passwords or other people's data with a request; if we need a test account, we ask by email. If we decline a request, the Wizbits are returned; once we have sent the results, the service is complete. The results describe how the app behaved during that run. A stress test does not cover everything a person or a different device might do, and sections 8.5 to 8.7 apply to it as they do to an audit: it is not a guarantee, a certification or a security audit, and acting on it is your decision.

You must follow the Acceptable Use Policy and the Community Guidelines. In particular, you must not:

• Commit fraud of any kind: fake or manipulated screenshots, claiming participation that did not happen, collusion between accounts, or self-dealing.
• Manipulate ratings or reviews on Google Play. TestersWiz never asks Testers to rate, review or install apps outside a closed test.
• Farm Wizbits: extra accounts, sham reciprocal tests, install proofs for apps you did not install, or any other way of obtaining Wizbits for testing that did not happen.
• Circumvent Google Play's policies or misrepresent testing activity to Google.
• Harass or abuse anyone, scrape the Service, probe or attack its security outside the rules of our Security Policy, or interfere with its operation.

You own what you submit. App names, descriptions, images, screenshots, feedback, posts, messages, profile text, apps and schemas you submit remain yours.

The licence for the marketplace. For content you submit to the marketplace and community features, you grant TestersWiz a non-exclusive, worldwide, royalty-free licence to host, store, reproduce, display and distribute it as needed to operate and improve the Service, and — for content you choose to make public, such as a public listing or profile — to show it publicly and in link previews, including through our content delivery providers. The licence ends when the content is deleted, except for copies that others have made through the Service as permitted (for example a message in a shared conversation) and backups kept for a limited time.

The licence for security tools. For apps, files and configuration you submit to the Database Security Audit, the licence is limited to what is needed to analyse them and produce your report. We never publish them, use them to promote the Service, or use them to train AI models.

Public pages. A new listing gets a public page by default, and the listing form says so before you submit. A new profile becomes public once you choose a handle. You can make a listing or profile private at any time. Your opt-in link and tester group are never shown publicly. Search engines may keep a copy for a while after you unpublish, which is outside our control.

Video reviews (optional). When you list an app, you may tick a box to let us publish a video review — a “roast” — of that app on YouTube, Instagram or TikTok. The box is unticked unless you tick it. If you tick it, you grant us a non-exclusive, worldwide, royalty-free licence to record, edit and publish a review of that app, including footage of the app in use and its name and icon. You can withdraw it by emailing [email protected]: we will not publish a new review of that app afterwards, and we will take down a review of it from our own channels on request. Copies others have already downloaded or shared cannot be recalled. Reviews are honest opinion about the app; we will not make false statements of fact about you or your app, and we will correct any you point out.

Your promises. You confirm that you own or are licensed for everything you submit, that it does not infringe anyone's rights or break the law, and that it complies with these Terms.

Removal. We may remove content that breaches these Terms, the Acceptable Use Policy or the Community Guidelines, or on valid legal notice — see the DMCA process and the Moderation Policy. We do not silently edit your words.

After you leave. Deleting your account deletes your profile, listings and their images, tests and check-in screenshots, trades, feedback and posts you wrote, likes and follows, notifications, bug reports, Wizbits, audits and briefings. Two things are kept: messages you sent in a chat stay in the other person's copy of the conversation, shown as from “Deleted user”, because a chat can be the only record of what was agreed; and payment records are kept as described in the Privacy Policy. A published video review stays up until you ask us to take it down.

If you send us ideas or suggestions about the Service, we may use them without obligation to you. This does not apply to your apps, reports or other content, which section 10 covers.

The Service relies on third parties, including Google (sign-in, Google Play and OSV.dev), Stripe, Supabase, Vercel, Resend, Upstash, Ahrefs, the push services run by browser makers, and third-party open data. Links to other sites and services are for convenience. We are not responsible for third parties' availability, accuracy or conduct, and your use of their services is governed by their terms.

The Service, its software, checks, rules, templates, text and design, and the TestersWiz name and logo belong to us or our licensors. These Terms give you a personal, non-transferable right to use the Service as they allow, and no other rights. Google Play is a trademark of Google LLC; TestersWiz is not affiliated with or endorsed by Google.

Google alone decides whether an app is granted production access. TestersWiz provides human testing and evidence of it. We do not promise that completing a campaign will satisfy Google's requirements, and refunds are not owed based on Google's decisions. A security report likewise does not mean Google will accept your app, its target API level or its Data Safety declaration.

We may restrict, suspend or close an account that breaches these Terms, shows credible signs of fraud, or creates risk for other users, third parties or the platform. When we restrict your account or remove your content, we will tell you what we did and why, unless the law or a real safety risk prevents it, and you can ask a person to review the decision as the Moderation Policy describes.

You can delete your account at any time from Settings, once any campaign you run or seat you hold has finished, so that leaving never breaks another member's test. Unused Wizbits are deleted with your account and are never refunded or paid out.

Sections 6 (Wizbits have no value), 8.6, 8.7, 10, 13 and 16 to 24 survive the end of this agreement.

To the extent the law allows, the Service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Service will be uninterrupted or error-free, or that any scan, report, guidance or tool will detect every vulnerability, misconfiguration or policy problem.

If you are a consumer in the EU, the EEA or the UK, this section does not affect your statutory rights, including that digital content and digital services must be as described, fit for purpose and of satisfactory quality.

To the extent the law allows: (a) we are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill; (b) we are not liable for any security incident, data breach, store rejection or removal, regulatory action or third-party claim relating to your app, its backend or its users, whether or not a report identified the underlying issue; and (c) our total liability for all claims arising out of the Service is limited to the greater of one hundred US dollars (US$100) and the total you paid us in the twelve months before the claim arose.

What we do not limit. Nothing in these Terms limits or excludes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for gross negligence or wilful misconduct, or for anything else that cannot be limited or excluded by law.

EU, EEA and UK consumers. If you are a consumer there, the limits in the first paragraph do not apply to you. Instead, we are responsible for loss or damage you suffer that is a foreseeable result of our breach of these Terms or our failure to use reasonable care and skill, and we are not responsible for loss or damage that is not foreseeable. We do not supply the Service for business use to consumers, so we are not liable to consumers for business losses.

If you use the Service for a business, you will defend and indemnify TestersWiz against third-party claims, and related losses and reasonable legal costs, arising from your content, your apps, submissions you were not authorised to make, or your breach of these Terms. If you are a consumer, you are responsible for losses you cause by breaching these Terms to the extent the law where you live allows. Neither applies to the extent a claim is caused by our own breach or negligence.

These Terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws rules, and by the Federal Arbitration Act as section 20 says. Subject to section 20, disputes will be resolved in the state or federal courts located in Delaware.

If you are a consumer, you also keep the protection of the mandatory laws of the country where you live, and you may bring proceedings in its courts. If you live in the EU, the EEA or the UK, nothing in these Terms deprives you of that choice.

PLEASE READ THIS SECTION CAREFULLY. It affects your legal rights. If you live in the United States, it requires most disputes to be resolved by individual arbitration rather than in court, and it waives your right to a jury trial and to take part in a class action. You can opt out within 30 days and keep every one of those rights — see 20.6.

20.1 Talk to us first. Before starting arbitration or a court claim, email [email protected] describing the problem and what you want. We will do the same before bringing a claim against you. Neither side may start a formal proceeding until 30 days after that notice.

20.2 Agreement to arbitrate. If we cannot resolve it, you and TestersWiz agree that any dispute arising out of or relating to these Terms or the Service will be resolved by binding individual arbitration administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules (and, where 25 or more similar demands are filed, its Mass Arbitration Supplementary Rules). This agreement binds us exactly as it binds you. The Federal Arbitration Act governs its interpretation and enforcement.

20.3 What is excluded. Either of us may bring a qualifying claim in small-claims court, or ask a court for an injunction against misuse of intellectual property, unauthorised access or a breach of confidentiality. Nothing here stops you contacting a regulator or government agency.

20.4 Class action and jury waiver. Claims must be brought individually, not as a plaintiff or class member in any class, collective, consolidated or representative proceeding, and the arbitrator may not consolidate claims or preside over a representative proceeding. You and we both waive any right to a jury trial. If this paragraph is found unenforceable for a particular claim, that claim alone is severed from arbitration and proceeds in the courts in section 19.

20.5 Costs. Where you are a consumer and your claim is for US$10,000 or less, we will pay the AAA filing, administration and arbitrator fees, and we will not seek our legal costs from you unless the arbitrator finds the claim frivolous. If the fee structure would make arbitration more expensive for you than court, tell us and we will cover the difference.

20.6 How to opt out — 30 days. Email [email protected] with the subject line Arbitration opt-out and the email address on your account within 30 days of first accepting these Terms. No form or reason is required, and it will not affect your account. If you opt out, section 19 governs and you keep every right this section would have waived.

20.7 Outside the United States. If you live outside the United States, or if mandatory consumer law where you live makes an arbitration agreement or class waiver unenforceable against you, this section does not apply to you.

20.8 Survival and changes. This section survives termination. If we change it, the change applies only to disputes arising after it takes effect, and you get a fresh 30-day opt-out.

You can report content you believe is illegal or breaks these Terms using the report buttons in the product or by emailing [email protected] with the location of the content and why you believe it is illegal. We review reports promptly, act on them, and tell you what we decided. Copyright complaints follow the DMCA process.

For the purposes of the EU Digital Services Act, our single point of contact for users and for authorities is [email protected]; we accept communications in English. How we moderate, the tools we use and how to appeal are set out in the Moderation Policy.

You may not use the Service if you are located in, or ordinarily resident in, a country or region subject to comprehensive US sanctions, or if you are on a US, EU or UK sanctions or restricted-party list, or if you act for anyone who is. You may not use the Service for any purpose prohibited by export control or sanctions laws. We may refuse or end service to comply with those laws.

We may change the Service. We may also update these Terms. For a material change we will tell you by email or in the product at least 14 days before it takes effect, and ask you to accept the new version. If you do not accept it, you may stop using the Service and delete your account, and we will refund unused paid credits bought under the previous Terms. A change we must make for legal or security reasons may take effect sooner. Changes to section 20 follow section 20.8.

• Entire agreement. These Terms and the documents in section 1 are the whole agreement between you and us about the Service.
• Severability. If a court finds part of these Terms unenforceable, the rest remains in effect and that part is enforced to the fullest extent permitted.
• No waiver. Not enforcing a right straight away does not waive it.
• Assignment. You may not transfer these Terms. We may transfer them to a company that takes over the Service, including one we form, if your rights are not reduced; we will tell you first.
• Events outside our control. We are not responsible for delay or failure caused by events beyond our reasonable control; we will tell you and minimise the effect.
• Electronic communications. You agree that we may send notices by email to the address on your account or in the product, and that these satisfy any requirement for notice in writing.
• No third-party rights. No one other than you and us has rights under these Terms.
• Language. These Terms are written in English. A translation, if we provide one, is for convenience.

Questions, refund and withdrawal requests, legal notices and disputes: [email protected]. We aim to answer support requests within 24 hours.