Privacy Policy for PrimeSuite

PrimeSuite ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose information when you use our mobile application, PrimeSuite: App Lock & Scanner.

1. Information We Collect

PrimeSuite is designed to respect your privacy. We do not require you to create an account or provide personal contact information (like name or email) to use the core features of the app.

1.1 Data Collected Automatically

• Device Information: We may collect technical data about your device, such as model, OS version, and hardware specifications, for the "Device Info" functionality within the app and for crash diagnostics (see Section 2.2).
• Usage and Diagnostic Data: We collect anonymous app usage events (such as which features are opened) and diagnostic data through Google Firebase to improve app performance and stability. This data does not personally identify you. See Section 2.2 for details.

1.2 App Lock Feature Data

• Installed Application List: To provide the "App Lock" functionality, PrimeSuite accesses the list of installed applications on your device (QUERY_ALL_PACKAGES). This allows you to select which specific apps you wish to protect with a PIN or biometric lock. This list is processed locally on your device and is never transmitted to our servers or shared with any third parties.
• Usage Monitoring: When the App Lock feature is enabled, the app uses "Usage Stats" permission to detect when a protected application is launched. This data is processed locally on your device in real-time and is never transmitted to our servers or shared with any third parties.
• PIN and Security Answer: Your App Lock PIN and security answer are never stored in plain text. They are stored only as salted cryptographic hashes inside encrypted storage on your device, and they never leave your device. They are also excluded from device backups.
• Biometric Data: If you enable biometric unlock, authentication is performed entirely by the Android operating system. PrimeSuite never accesses, stores, or transmits your fingerprint or face data.

1.3 On-Device Processing (ML Features)

Features such as the Document Scanner, Text Recognition (OCR), Background Remover, and QR/Barcode Scanner use Google ML Kit. Image and text analysis for these features is performed on your device. Your photos, scanned documents, and recognized text are not uploaded to our servers.

2. Third-Party Services

We use the following third-party services to monetize, maintain, and improve the app:

2.1 Google AdMob & UMP (Advertising)

• Our app displays advertisements provided by Google AdMob. For users in the European Economic Area (EEA), the UK, and Switzerland, we use Google's User Messaging Platform (UMP) to obtain and manage consent for personalized advertising. Ads are only requested after applicable consent requirements are met.
• Data Collection: AdMob may collect your advertising identifier, IP address, and device information. If you grant Location permission, AdMob may collect precise or approximate location data to tailor the ads you see, subject to your consent choices managed via UMP.
• Personalized Ads: Based on your consent, Google may use advertising identifiers to serve ads tailored to your interests. You can change or withdraw your consent at any time from the app's settings (Privacy Options).
• Google's Privacy Policy: https://policies.google.com/privacy

2.2 Google Firebase (Analytics & Crash Reporting)

• Firebase Analytics: Collects anonymous usage events (such as screen views and feature usage counts) and general device information (model, OS version, country) to help us understand how the app is used and improve it.
• Firebase Crashlytics: If the app crashes, a crash report is sent to Google Firebase. Reports include the technical state of the app at the time of the crash, device model, OS version, and an app-instance identifier. Crash reports do not include your documents, photos, PINs, or App Lock data.
• Firebase Privacy Information: https://firebase.google.com/support/privacy

2.3 Exchange Rate Service (Currency Converter)

The Currency Converter feature fetches up-to-date exchange rates from the Open Exchange Rate API (open.er-api.com). Only a standard network request is made; no personal data, identifiers, or conversion history are sent to this service. Fetched rates are cached locally so the feature also works offline.

2.4 Network Information Service (Speed Test)

The Internet Speed Test feature contacts ipinfo.io to display your public IP address, internet service provider, and approximate (city-level) network location. This lookup uses your IP address, which is inherent to any internet request. We do not store this information on our servers; it is shown to you in the app only. Speed measurements are performed against public test servers and involve transferring anonymous test data only.

• ipinfo.io Privacy Policy: https://ipinfo.io/privacy-policy

2.5 Google Play Services (In-App Review & Updates)

We use Google Play's in-app review feature, which may occasionally invite you to rate the app. This is operated by Google Play and is subject to Google's Privacy Policy.

3. Data Safety & Permissions

The app requests permissions only for specific features, and only when you use those features:

• Storage/Media: To save and load photos in the Image Studio and to save scanned documents.
• Camera: To use the Document Scanner, QR/Barcode Scanner, and AR measuring features.
• Installed Apps (QUERY_ALL_PACKAGES): Solely to display the list of apps you can protect with App Lock. The core purpose of App Lock requires showing all installed apps so you can choose which to lock.
• Usage Access: Solely to detect when a locked app is opened, so the lock screen can be shown.
• Display Over Other Apps: Solely to show the App Lock screen on top of a protected app.
• Location: To provide network information, True North compass functionality, and local sun times. If location permission is granted, our advertising partner (Google AdMob) may also use this data to serve more relevant ads, subject to your consent choices.
• Notifications: To show the persistent App Lock service status notification required by Android.

We do not request any permission that is not needed for a user-facing feature.

4. Data Retention and Deletion

Your privacy and control over your data are important to us.

4.1 Data Retention

• Local Data: Most information processed by PrimeSuite (unit conversion history, scanned documents, app lock settings, notes, and edited images) is stored locally on your device. We do not maintain copies of this data on our servers. It remains on your device until you delete it or uninstall the application.
• Third-Party Data: Diagnostic, analytics, and advertising data collected by third-party services (Google AdMob, Google Firebase) is retained according to their respective privacy policies. Firebase Analytics data is retained for a limited period defined by Google before automatic deletion.

4.2 Data Deletion

• In-App Deletion: You can delete locally stored data at any time through the app's settings (including "Clear Cache") or by clearing the app's storage in your device settings.
• Requesting Deletion: We do not collect personal identifiers or maintain user accounts on our servers, so there is typically no user-specific data for us to delete manually. If you believe we have inadvertently collected any personal information, you may contact us at support@moshitech.me to request its permanent deletion.
• Uninstalling: Uninstalling PrimeSuite removes all locally stored data from your device.

5. Data Security

• App Lock credentials are stored as salted hashes inside Android's encrypted storage (Android Keystore-backed encryption).
• Sensitive app data (App Lock settings and credentials) is excluded from cloud backups and device-to-device transfers.
• Network communication with third-party services uses HTTPS encryption.

6. Children's Privacy

PrimeSuite is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at support@moshitech.me and we will delete it.

7. Your Rights (EEA/UK Users)

If you are in the European Economic Area or the UK, you have the right to access, correct, or delete personal data, and to withdraw advertising consent at any time via the in-app Privacy Options. Because PrimeSuite stores data locally on your device, most of these rights can be exercised directly through your device and the app's settings.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated Effective Date. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@moshitech.me