Privacy Policy

Secure Text is built so that your private content stays on your device. To be absolutely clear:

WE DO NOT:

• Operate servers that receive, store, or process your messages, media, voice notes, or files
• Collect, access, read, or use your plaintext or ciphertext for any purpose
• Store your private keys, OTP pads, group keys, SecureVault contents, or passcodes on any developer-controlled server
• Sell, rent, license, or monetize your personal content or cryptographic material
• Use analytics SDKs, advertising SDKs, crash reporting SDKs, or behavioral tracking on core App features
• Profile you, build advertising audiences, or track you across other companies' apps and websites
• Access your data remotely — we have no backdoor, no cloud dashboard, and no administrative panel for your content

WE CANNOT:

• Read your encrypted messages even if we wanted to
• Recover your keys, pads, or Vault if you lose your device
• Fulfill data-access requests for content we never possessed
• Delete your on-device data remotely

The ONLY routine data that leaves your device to third parties is: (1) Apple In-App Purchase / subscription data processed by Apple and RevenueCat, and (2) information you voluntarily send us by email. Everything else is local.

You are solely responsible for your data. The Developer is NOT responsible for loss, leak, corruption, or unauthorized disclosure of your data caused by: device loss, theft, or damage; panic wipe or duress PIN; App deletion; failure to back up keys or pads; misconfiguration; bugs; clipboard exposure; third-party messenger metadata; iCloud backups; nearby transfer errors; metadata/Vault export; jailbreak or device compromise; or any other cause — except where mandatory law requires otherwise.

1. INTRODUCTION & DATA CONTROLLER

Secure Text ("SecureText") is published by Bugra Acemoglu, individual developer ("Developer," "we," "us," "our"). This Privacy Policy explains what happens to information when you use the App, including on-device processing, App extensions, and the very limited third-party services involved in subscriptions.

Data Controller:

• Bugra Acemoglu (individual developer)
• Istanbul, Republic of Türkiye
• Email: [email protected]
• Website: https://sites.google.com/view/SecureText/main-menu (hosted by Google; we do not control Google's infrastructure)

2. PLAIN LANGUAGE SUMMARY

• Your content (messages, keys, pads, Vault) → stays on your device. Never sent to us.
• Encryption/decryption → 100% local on your Apple device.
• Subscriptions → Apple + RevenueCat see purchase metadata only. Not your messages.
• Support → only if you email us voluntarily.
• No analytics, no ads, no crash SDKs, no fingerprinting.

3. WHAT DATA IS PROCESSED ON YOUR DEVICE ONLY

The following is created and processed locally. It is NOT transmitted to developer-controlled servers:

4. WHAT WE NEVER COLLECT ON OUR SERVERS

We have no servers for user content. We never collect, store, or process on developer-controlled infrastructure:

• Plaintext or ciphertext messages, notes, or media
• Private keys, shared secrets, OTP pads, or group key files
• Contact lists, QR payloads, or keyboard typing history
• Clipboard contents
• SecureVault contents
• GPS/location data
• Biometric templates (handled entirely by iOS Secure Enclave)

5. LIMITED DATA PROCESSED BY THIRD PARTIES (NOT YOUR CONTENT)

5.1 Apple Inc.

App distribution, In-App Purchases, Secure Enclave, Keychain, iCloud Backup (if you enable it), WidgetKit, notifications framework, App Store review prompts. Governed by Apple's privacy policy.

5.2 RevenueCat, Inc.

Used solely to validate Pro subscription entitlements. Receives:

• Anonymous RevenueCat app user ID
• Product IDs, purchase/renewal dates, entitlement state (pro/founders)
• Apple transaction/receipt metadata for validation
• Basic device/app metadata per RevenueCat's fraud-prevention practices

Does NOT receive: messages, keys, contacts, pads, Vault data, or clipboard content. Legal basis (GDPR Art. 6): Contract — delivering Pro features you purchased. Privacy Policy: https://www.revenuecat.com/privacy/

5.3 Support Email (Voluntary)

If you contact [email protected], we receive what you send (email address, message, attachments). Used only to respond. Retained up to 24 months, then deleted unless legally required to keep longer. Legal basis: Legitimate interests (customer support).

5.4 User-Initiated Links

Tapping App Store, legal, or support URLs opens third-party sites (Apple, Google Sites). We do not track those visits.

5.5 Local Notifications (Optional)

If you grant permission, the App schedules a LOCAL trial-end reminder on your device (no remote push server, no message content in the notification). Derived from RevenueCat/StoreKit trial dates. Cancelled on panic wipe or subscription change. Legal basis: Consent (notification permission).

6. NO ANALYTICS, NO TRACKING, NO CRASH REPORTING

We do not integrate: Google Analytics, Firebase Analytics, Facebook SDK, Amplitude, Mixpanel, Sentry, Crashlytics, or any advertising/tracking SDK. Debug logging (print/console) occurs locally during development builds only and is never transmitted to Developer servers. NSPrivacyTracking is false. We do not engage in cross-app tracking. Exception — Apple platform services only: If you participate in TestFlight beta testing, Apple may collect opt-in crash logs and diagnostic data through Apple's own systems (not Developer servers). If you opt in to Apple's App Analytics in your device privacy settings, Apple may provide aggregated, anonymized App Store analytics to developers. We do not receive your message content, keys, or Vault data through these channels.

7. CRYPTOGRAPHIC PROCESSING (ALL LOCAL)

Libraries: Apple CryptoKit, SwiftKyber (ML-KEM-768, open-source). Algorithms: AES-256-GCM, P-256 ECDH, ML-KEM-768 hybrid, ChaCha20-Poly1305, HKDF-SHA256, PBKDF2. Formats: STMSG, STMSG:v2, STMSG:otp3, STGRP:v1, .qsafe (QSF2/QSFS), .stvoice, .stenc, .tx.pad, .rx.pad. Secure Enclave protects P-256 identity key. Developer cannot extract it. Jailbreak detection (PT_DENY_ATTACH, filesystem checks) may block crypto operations on compromised devices. Not infallible.

8. NEARBY PEER-TO-PEER (LOCAL NETWORK ONLY)

Bonjour services: _st-pad-xfer._tcp, _st-otp-xfer._tcp, _st-key-xfer._tcp, _st-vault-xfer._tcp. Uses MultipeerConnectivity over Wi-Fi/Bluetooth. Encrypted payloads; no developer server. Ephemeral peer display names (UUID-based) visible during discovery on your local network.

9. APP PERMISSIONS

• Face ID / Touch ID: App unlock, Secure Enclave key authorization. Biometrics never leave device.
• Camera: QR key scanning; Vault photo/video capture.
• Microphone: Voice message recording before encryption.
• Photo Library (Add Only): Save decrypted media from Share Extension.
• Local Network & Bluetooth: Nearby pad/key/vault transfer.
• Notifications (optional): Local trial reminder only.
• Keyboard Full Access: Required for App Group communication and clipboard workflows. No keystroke logging; no transmission to Developer servers.

10. APP EXTENSIONS DETAIL

10.1 Keyboard Extension

Reads: text field content (textDocumentProxy), system pasteboard (ciphertext, images, .qsafe files). Writes: encrypted text to host app field; pasteboard items (up to 10 min, NOT localOnly). Pro gate: encryption requires Pro; most decryption available on free tier. Reads Pro entitlement from App Group mirror (not direct RevenueCat calls).

10.2 Share Extension (Pro Only)

Activation: images (≤20), movies (≤10), audio (≤10), files (≤10), text from any host app. Processing: entirely local. Temp files in App Group. Decrypted output may save to Photos. Free users see paywall gate only.

10.3 Widgets

Home Screen + Lock Screen widgets display: contact/group names, avatar thumbnails, OTP-enabled counts, Pro flag. Read-only JSON from App Group. No crypto. No network. Deep links may prefill encrypt from clipboard.

11. DESTRUCTIVE SECURITY FEATURES

• Panic Wipe / Failed-Attempt Wipe: Deletes all keys, pads, stores, App Group data, Keychain items. Irreversible.
• Duress PIN: Silent forensic wipe of real data, then decoy shell with placeholder identity. Irreversible. Appears as normal unlock.
• OTP Pad Exhaustion: Pads consumed by use; cannot be reused.

Developer cannot recover data after any of these events.

12. BACKUP, ICLOUD & FILE SHARING

• OTP pad directories and SecureVault ciphertext folders: marked isExcludedFromBackup (not in iCloud/device backup).
• Keychain items with ThisDeviceOnly: not restorable to new devices via backup.
• Other App data MAY be included in iCloud Backup if you enable it. Developer has no access to your Apple account.
• UIFileSharingEnabled: App documents may be visible via Finder file sharing.
• Metadata export (.stmeta): plain JSON of names + public keys. Optional Vault/ folder may contain DECRYPTED files if exported while Vault unlocked — entirely your responsibility.

13. LEGAL BASES (GDPR / UK GDPR)

• Contract (Art. 6(1)(b)): Subscription entitlement processing.
• Legitimate Interests (Art. 6(1)(f)): App security, abuse prevention, support.
• Legal Obligation (Art. 6(1)(c)): Compliance with valid legal process.
• Consent (Art. 6(1)(a)): Optional notification permission.

No automated decision-making with legal/significant effects. No profiling.

14. DATA PROCESSORS & SHARING

Processors: Apple (platform), RevenueCat (subscriptions), email provider (support). We do not sell personal data. We do not share content data with anyone — we never possess it. International transfers: RevenueCat/Apple may process in the US and other countries with appropriate safeguards (SCCs, etc.).

15. DATA RETENTION

• On-device content: until you delete the App, panic/duress wipe, or manually remove.
• Main app clipboard: ~15 seconds (localOnly).
• Keyboard clipboard writes: up to 10 minutes.
• RevenueCat/Apple records: per their policies.
• Support emails: up to 24 months.
• Trial reminder: cancelled on wipe/subscription change.

16. YOUR RIGHTS (GDPR, UK GDPR, KVKK, CCPA)

You may have rights to access, rectify, erase, restrict, object, port, and complain to a supervisory authority — for data we actually hold (subscriptions, support emails). For on-device content we never possessed: delete the App or use in-app wipe. We cannot access it for you. Contact: [email protected] (response within 30 days or as required by law).

Supervisory authorities: EEA: https://edpb.europa.eu/about-edpb/about-edpb/members_en UK: https://ico.org.uk/ Turkey (KVKK): https://www.kvkk.gov.tr/

17. CALIFORNIA (CCPA/CPRA)

We do not sell or share personal information for cross-context behavioral advertising. California residents may request access/deletion of information we hold. No discrimination for exercising rights.

18. CHILDREN

The App is not directed at children and is rated 17+ on the App Store due to unrestricted encrypted communication and file-handling capabilities. We do not knowingly collect personal information from anyone under 17 (or under the minimum age required in your jurisdiction, if higher). If you believe a minor contacted us, email us and we will delete the communication.

19. SECURITY

We apply reasonable measures for the tiny amount of data we control (support inbox, developer accounts). Your content security depends on your device, passcode, biometrics, key management, and operational security — not on our servers, because we do not host your content.

20. CHANGES

Updates reflected in "Last updated" date and, where appropriate, in-app notice.

21. LIMITATION OF LIABILITY (PRIVACY)

To the maximum extent permitted by law, Developer is not liable for privacy or security incidents outside our reasonable control: device compromise, third-party messengers, clipboard exposure, iCloud backups, user export/sharing, nearby transfer, bugs, or Apple/RevenueCat infrastructure — subject to non-waivable mandatory rights.

22. CONTACT

Email: [email protected] Subject: "Privacy Request — Secure Text"