SecretScan Privacy Policy

App Developer

SecretScan is built and operated by P/E Dmytro Polianskyi, a private person entrepreneur.

Short Version

• SecretScan does not upload your Photos.
• SecretScan does not upload OCR text.
• SecretScan does not require a SecretScan account.
• SecretScan uses Firebase Analytics for a minimal product-validation funnel and does not track users across apps or websites.
• Analytics never includes Photos data, OCR text, finding details, or Photos identifiers. Firebase assigns a pseudonymous app-instance identifier.
• OCR runs on your iPhone using Apple's on-device Vision framework.
• Findings are stored locally in a locked vault.
• iCloud originals may be requested through Apple's Photos framework when needed for better image quality. SecretScan does not upload anything to iCloud.

Product Validation Metrics

To determine whether the product solves a real problem, release builds may send one-time milestones for Photos permission, starting and completing a scan, whether a scan produced at least one high- or critical-risk finding, opening such a finding, completing a remediation, seeing a paywall, and completing a verified purchase.

The custom events contain only the event name, a coarse paywall or remediation reason when applicable, and Boolean context indicating whether an actionable finding was detected, opened, or remediated earlier. They do not contain Photos or OCR data, finding categories or counts, Photos identifiers, or account identifiers.

Firebase Analytics automatically assigns a pseudonymous app-instance identifier and may process app lifecycle and purchase events, app and device information, a masked IP address used to derive coarse location, and transport diagnostics. SecretScan disables IDFA and IDFV collection, denies advertising storage and personalization, and does not set a user ID. The data is used only to measure and maintain the product, not for advertising, profiling, or cross-app tracking. Firebase Analytics is operated by Google under its applicable terms and privacy documentation.

Information The App Reads

When you start a scan, SecretScan asks the Photos library for images matching your settings. This may include screenshots or text-heavy photos, the date range you selected, and original-quality images when the iCloud originals setting is enabled.

The app uses those images to run on-device OCR and detect risky text patterns such as passwords, recovery phrases, API keys, recovery codes, payment cards, IDs, addresses, medical information, and bank details.

Information The App Stores

SecretScan stores findings in a local locked vault on your device. A finding may include:

• the Photos local identifier for the image.
• the image creation date and pixel size.
• the detected category and risk level.
• the review status you choose.
• redacted evidence snippets that help explain why an item was flagged.

The Photos local identifier is a pointer to an item in your Photos library. It is private metadata, so SecretScan stores it in protected local storage.

Information The App Does Not Store

SecretScan does not intentionally persist:

• original images.
• thumbnails.
• full OCR text.
• unredacted secrets.
• cloud copies of findings.
• user accounts.
• analytics or tracking identifiers.

iCloud Photos

If iCloud originals are enabled, SecretScan may ask Apple's Photos framework for a full-resolution image. This can cause Photos to download the original from iCloud to your device.

SecretScan does not upload your image or extracted text. iCloud transfer is handled by Apple's Photos system.

Redaction And Deletion

Saving a redacted copy creates a new item in Photos. It does not delete the original.

Deleting the original uses Apple's Photos deletion flow. Deleted items normally move to Recently Deleted, depending on Photos behavior and system confirmation.

Purchases

Lifetime Pro uses Apple's StoreKit. Purchase and entitlement handling is done through Apple systems. SecretScan does not require an account for Pro.

Children's Privacy

SecretScan is not directed to children. The app does not knowingly collect personal information from children.

Changes To This Policy

This policy may be updated when SecretScan's behavior changes or when clarification is needed. The updated date at the top of this page shows when the latest version was published.

Contact

For support or privacy questions, contact liweba@gmail.com.