Privacy Policy

1. Overview

This Privacy Policy explains how ConnectHID ("we", "our", or "us") handles information when you use our mobile application PrivateSpace: Vault & Browser ("the App"). By installing or using the App, you agree to this policy.

2. What Stays on Your Phone

The following is stored only on your device and is never sent to us:

• Vault contents: photos, videos, audio, PDFs, other files and notes you add. They are encrypted on the device with keys held in the Android Keystore.
• Your PIN, security-question answer and lock settings. We cannot see or reset them for you.
• Break-in photos: if you turn on this feature, a photo taken after a wrong PIN is kept in the vault on your phone only.
• Private Browser data: open tabs are reset when the App starts, and the browser does not keep history or cookies after you leave. Bookmarks and home shortcuts you save are stored on the device in encrypted storage.
• Decoy vault and app settings.

We do not require an account, and we do not ask for your name, phone number, address or contacts.

3. Device Permissions & How They Are Used

• Photos, videos and audio (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO, MANAGE_MEDIA): used only to find the files you choose to import into the vault and, if you agree, to delete the original copies from your gallery after they are safely encrypted. Nothing is uploaded.
• Camera (CAMERA): used for the in-vault camera and the optional break-in photo feature. Pictures go straight into the encrypted vault, not into your gallery.
• Microphone (RECORD_AUDIO): used only for voice input when you tap the microphone in a search or text box. Voice recognition is performed by the speech service built into your Android device (Google), under its own privacy policy. We do not record or store audio.
• Notifications (POST_NOTIFICATIONS) and foreground service (FOREGROUND_SERVICE_DATA_SYNC): used to show progress and keep a backup, restore, export or import running when you leave the App.
• Internet and network state: used by the Private Browser, Google Drive backup, billing and the third-party services below.
• Wake lock and wallpaper settings: used to keep long transfers running and for features you choose in the App.
• Biometrics: fingerprint or face unlock is handled by Android. The App receives only "success" or "failure", never your biometric data.

4. Google Drive Backup (Optional)

If you choose to back up, the App signs in with your Google account and uploads encrypted backup data to your own Google Drive. Backups are encrypted on your phone before upload, and they are stored in your Drive (including the hidden app-data area) under your Google account. We do not receive a copy, we cannot read it, and we have no access to your Drive. You can delete backups from the App or from Google Drive at any time. Your Google account name and email are shown inside the App on your phone only. Signing in is also used for an optional PIN-recovery method that runs entirely on your device. Google's handling of your Drive and account is governed by the Google Privacy Policy.

5. Third-Party Services & SDKs

The App uses the following Google services. They may collect the data described, under their own policies:

• Google Play Billing: processes purchases and subscriptions for PrivateSpace Pro. We never see or store your card or payment details. We learn only whether Pro is active.
  Google Privacy Policy
• Google Mobile Ads (AdMob) and Google User Messaging Platform: serve ads in the free version. AdMob may collect pseudonymous identifiers (such as the Android Advertising ID), approximate location derived from your IP address, and ad interaction data to show and measure ads and to prevent fraud. Where required (for example in the EEA and UK), the App asks for your consent first, and you can change your choice in the App. Pro removes ads. You can reset your Advertising ID or opt out of personalised ads in your Android settings.
  How Google uses data from ads
• Firebase Analytics and Crashlytics (Google LLC): help us fix crashes and understand which features are used. Information collected includes anonymous app events (for example, that the Pro screen was opened or a purchase was completed), device model, Android version, app version and crash reports. It never includes your vault contents, file names, notes, PIN, or the web addresses you visit.
  Firebase Privacy Information
• Google Play services (in-app review and updates): may show a rating prompt or an update prompt through Google Play.

6. Private Browser

The Private Browser loads websites directly from your phone. The sites you visit can see your normal connection details (such as your IP address), as with any browser, and they have their own privacy policies. The App's built-in ad blocker works on the device. We do not receive or store the addresses you visit.

7. Security

Vault files are encrypted on the device, the App blocks screenshots and the recent-apps preview, and it locks automatically when you leave it. No method is perfectly secure. If you forget your PIN and have set up neither a recovery method nor a backup, we cannot recover your vault, because we do not have your keys.

8. Data Retention & Deletion

• Your data stays on your phone until you delete it. Uninstalling the App or clearing its storage deletes the vault.
• Deleted vault items stay in the in-app Recycle Bin for 30 days and are then removed.
• Backups in your Google Drive stay until you delete them (App → Settings, or Google Drive).
• Analytics and crash data held by Google is kept under Google's retention rules. To ask us about this data, contact us below.

9. Children's Privacy

The App is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will help remove it.

10. Your Rights (GDPR & CCPA / CPRA)

If you live in the European Economic Area, United Kingdom or California, you may have rights to access, correct or delete your personal data, and to withdraw consent. We keep no personal profile of you and we do not sell personal information. You can withdraw ad consent in the App, reset your Advertising ID in Android settings, and delete your local and Drive data yourself as described above. For anything else, contact us.

11. Changes to This Policy

We may update this policy from time to time. The latest version is always on this page, with the date above. Changes apply from the date they are posted.

12. Contact Us

Questions or requests about this policy:

Email: [email protected]
App: PrivateSpace: Vault & Browser