ShareMask Privacy Policy

Data Controller: Prinix Labs. Inquiries may be directed to [email protected].

This Privacy Policy applies to the ShareMask mobile application and the public website at sharemask.prinixlabs.com, developed and published by Prinix Labs ("we", "us", or "our"). ShareMask is designed with privacy-by-design principles to process media on-device, minimize data exposure, and provide transparency regarding third-party software development kit (SDK) diagnostic telemetry.

1. Media and Information You Choose to Process

ShareMask opens photos, videos, and PDFs that you explicitly select from your device storage, gallery, or share into the application from other apps. It analyzes them directly on your device to help identify faces, human heads, confidential text, barcodes, and other sensitive details for redaction.

• Local Processing: Media decoding, facial detection, optical character recognition (OCR), temporal motion tracking, and redaction rendering run locally on your device hardware.
• App-Private Persistence: Projects, recognized values, mask definitions, watchlists, user preferences, thumbnails, and exported files may remain in app-private sandbox storage so you can review edits or resume projects.
• No Server Analysis: ShareMask does not upload your media, recognized text, masks, watchlists, or project state to our servers or any cloud service for analysis or inference.

2. SDK Diagnostics and Technical Telemetry

On-device processing does not mean that the app makes no network requests. ML Kit sends performance and usage metrics to Google separately from media processing. ShareMask does not provide a switch that disables ML Kit metrics.

ShareMask uses Google ML Kit for on-device machine learning detection features (e.g. text and face detection APIs).

• Google ML Kit Disclosures: Google ML Kit may collect and send device information, per-install identifiers, diagnostic metrics, performance statistics, and feature-use events to Google over encrypted connections. This diagnostic telemetry is separate from your media and recognition results. Your photos, videos, and recognized text are not transmitted.
• For full details on Google's collection and handling of ML Kit diagnostics, review the official Google ML Kit Android Data Disclosure and the Google Privacy Policy.
• No Advertising or Analytics Trackers: ShareMask does not integrate third-party advertising networks, in-app ad tracking SDKs, or third-party behavioral analytics services.

3. Subscriptions and Billing Verification (Android)

Subscription verification uses the Google Play purchase token to provide the paid access you request. It does not require uploading your media. Purchases, restoring access and checking subscription status need network access; paid access may need to be verified again after restarting the app.

If you choose to purchase or subscribe to ShareMask Pro on Android:

• Google Play In-App Billing: Payment processing and subscription management are handled entirely by Google Play. ShareMask never receives, processes, or stores your credit card, debit card, or payment credentials.
• Stateless Verification: ShareMask transmits the Google Play purchase token over an encrypted HTTPS connection to a stateless Prinix Labs verification endpoint hosted on Google Cloud Run. The verifier queries the Google Play Developer API strictly to validate the subscription status and entitlement expiry date. The application code does not store your purchase token in a permanent ShareMask user account or database. Standard operational cloud infrastructure access logs (such as request timestamps and IP addresses) may be temporarily retained by hosting providers for routing, reliability, and security diagnostics.
• Zero Media Linkage: The billing verification service does not receive your media, recognized OCR content, or personal files.
• Platform Availability: In-app subscription purchases are currently offered exclusively through Google Play on Android. An iOS subscription flow is not currently active and will be reviewed under separate disclosures prior to any iOS commercial availability.

4. Exports, Metadata Handling, Privacy Receipts, and Sharing Boundary

When you export protected media from ShareMask:

• Metadata Removal Setting: By default, ShareMask removes photo EXIF metadata (such as GPS coordinates, camera model, and timestamps) and requests removal of video container metadata during export; you can turn this setting off in export preferences. Inspect exported files before sharing if metadata is sensitive.
• Generated Filenames: Exports receive generated filenames rather than the original source filename. Generated filenames include the export date and time.
• Rendered Output Layers: Exports render your selected redactions directly into the output image, video frames, or rasterized PDF pages. Automated detection can miss sensitive details, and blur or pixelation may leave information recognizable; review every export before sharing and use an opaque covering where details must be completely concealed. Originals and copies shared elsewhere remain separate.
• Privacy Export Receipts: If you copy or share an export receipt, it can include the output filename, timestamp, custom profile name, output dimensions, mask/category counts and file hash. Check the receipt before sharing. Custom profile names can themselves contain identifying or descriptive information. Copies sent to another app or person are outside ShareMask's control.
• Recipient Control & Sharing: When you save an export to your device gallery or share it to another application (such as WhatsApp, Slack, Gmail, or cloud storage), that destination receives the file. The destination's storage, backup, and privacy policies apply. Email attachments you choose to send to support or third parties are processed by the applicable mailbox provider and recipients.
• Advisory Notice: Automated machine learning detection is an advisory aid and may not detect every private element due to variations in lighting, angle, occlusion, or resolution. Always visually inspect exported copies before transmitting them to third parties.

5. Operating System Backups and Sandbox Exclusions

To reduce unintended inclusion of local project data in cloud backups, controls are configured within the application:

• Android: ShareMask configures Android cloud-backup exclusions for app-private data (android:allowBackup="false" and Android 12+ cloud backup exclusion rules). Device transfer and operating system backup behavior remain subject to platform behavior.
• iOS Platform Note: Local document directories include non-backup file attributes; iOS backup behavior is not yet verified for release.
• Scope Limitation: These controls are configured for app-private sandbox data. Gallery/shared copies follow their destination's backup settings.

6. Data Retention, Storage, and In-App Cleanup

• App-Private Project Data: Projects, thumbnail artifacts, recognized coordinate cache, and temporary render files reside in app-private sandbox storage. ShareMask provides an in-app cleanup control in Settings that clears project history, associated app-private thumbnail/export artifacts on a best-effort basis, and selected temporary scanning files.
• Settings, Watchlists & Profiles: Custom watchlist terms, privacy profiles, and application preferences are stored locally in app-private storage and remain on device until separately cleared or until the application is uninstalled.
• Original Media & Gallery Exports: Original source media and media you choose to export to your device gallery or photo library remain in your device storage and are not deleted by in-app project cleanup controls. You manage or delete them through your device's photo gallery or file manager.
• Uninstalling the App: Removing or uninstalling ShareMask deletes the application's private sandbox storage, subject to operating system cleanup behavior.
• No Server Account Deletion Needed: Because Prinix Labs does not maintain user accounts, user profiles, or remote media repositories, there is no remote user account or server-side media database to delete.

7. Privacy Rights and Data Control

If the GDPR applies to your personal data, you may request access, correction, erasure, restriction of processing, and portability where applicable. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. These rights have conditions and exceptions; we may need information to verify a request. Contact [email protected]. You may also complain to a data protection supervisory authority, particularly in the EEA country where you live or work, or where an alleged infringement occurred.

We do not receive your locally processed media or recognition results and cannot retrieve them from your device in response to a request. Rights requests can still apply to information we do receive, such as support correspondence and service request records. Google handles its own records under its privacy policies.

We respect your privacy and design our software to keep data under your direct supervision:

• On-Device Access & Management: Because your photos, videos, and PDFs remain on your device, you maintain direct custody over your files. You can edit, mask, export, or delete projects directly within the app.
• Scope of Deletion: The in-app cleanup feature is designed to clear local project histories and temporary scan artifacts. It does not delete copies previously exported to device storage, shared with third-party applications, or operational records held by Google Play.
• Do Not Sell or Share Personal Data: Prinix Labs does not sell, rent, or trade personal data or user media with third parties for cross-context behavioral advertising or monetary consideration.
• Email Support Correspondence: You may request deletion of correspondence from our active support mailboxes by contacting [email protected]. We review requests and delete information when it is no longer needed, subject to applicable recordkeeping obligations. Email-provider backups may follow a separate retention lifecycle. (Note: Email removal does not affect Google Play purchase or transaction records, which are managed separately by Google under Google Play policies).
• Inquiries: If you have questions regarding your data privacy rights, you may contact our privacy team at [email protected].

8. Age Rating & Minor Users

ShareMask is intended for people aged 13 and older. It does not require a ShareMask account or upload selected media to our servers. Because automated detection features utilize Google ML Kit, Google ML Kit may collect the device, app, identifier, diagnostic, and usage information described in Section 2 when its features are used. ShareMask does not solicit or knowingly harvest personal profile information from children under the age of 13. If you believe a child under 13 has provided personal data, please contact our team at [email protected].

9. Website Hosting, Technical Logs & Email Retention

When you visit the public website at sharemask.prinixlabs.com or contact us via email:

• Website Fonts: The website's fonts (Inter and JetBrains Mono) are served from our own domain together with the pages. The website does not request fonts from Google Fonts or any other third-party font service.
• Hosting Infrastructure & Logs: The website is hosted via global content delivery network (CDN) infrastructure (Vercel). The hosting provider automatically collects standard technical request logs (such as IP address, browser type, referring URL, and request timestamp) to serve pages, maintain network performance, and defend against denial-of-service (DDoS) attacks. These provider-managed operational edge logs are retained in accordance with the hosting provider's infrastructure operations and security policies. Prinix Labs does not export these operational records into a separate database or marketing system.
• No Tracking Cookies: The website does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioral analytics scripts.
• Support & Direct Inquiries: If you contact us via email ([email protected], [email protected], or [email protected]), your email address, message content, and any diagnostic details you provide are used solely to answer your questions and provide technical assistance.
• Email Retention Criteria: Support and privacy email correspondence is retained only for as long as necessary to investigate and resolve your inquiry, troubleshoot reported technical issues, or satisfy applicable recordkeeping obligations. You may request deletion of correspondence from our active support mailboxes at any time by contacting [email protected]. We review requests and delete information when it is no longer needed, subject to applicable recordkeeping obligations. Email-provider backups may follow a separate retention lifecycle.

10. International Processing

International processing: The configured billing verification service uses Google Cloud's United States region. Google, website hosting and email providers may process service information outside your country, including outside the EEA. Local media processing does not make those separate services EU-only. Contact [email protected] for information about the arrangements and safeguards applicable to your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications in our software architecture, platform capabilities, or legal requirements. Material changes will be published on this website with an updated effective date. We encourage you to review this page periodically.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact Prinix Labs:

• Developer: Prinix Labs
• Privacy Inquiries: [email protected]
• Support & General: [email protected] or [email protected]
• Website: sharemask.prinixlabs.com