🛡️ 100% On-Device Privacy Guaranteed

Privacy Policy

Effective Date: August 15, 2026

📍 Scope of This Policy

This policy covers two things: (1) The LoyalCloak Apps — our iOS app, Android app, desktop apps, and web app. For document processing, our non-negotiable zero-data guarantee applies in full: your documents never leave your device, text buffers exist only in transient RAM, and no document data or PII is ever collected or transmitted. (2) Website & Entrypoint Analytics — our informational website and web app entrypoint use privacy-first, 100% cookieless aggregate measurement (Vercel Web Analytics). No cookies are stored on your device, no advertising identifiers are used, and no personal data is collected.

🔒 Our Non-Negotiable Privacy Promise (Apps)

LoyalCloak was built around a single non-negotiable principle: Your document data never leaves your device. All parsing, regex scrubbing, PII redaction, and token optimization execute 100% locally in transient RAM using a high-performance native Rust engine. Zero network calls, zero tracking, zero cloud telemetry.

1. Information We Do NOT Collect (Apps)

Because the LoyalCloak Apps operate entirely on-device, the Apps do not collect, process, transmit, or store any of the following:

Document Content & Text: Your PDFs, DOCX, EPUB, HTML, images, and text inputs remain strictly in RAM during sanitization and are discarded immediately upon completion.
Personal Identifiable Information (PII): Email addresses, phone numbers, credit card numbers, SSNs, and IP addresses detected during scrubbing are masked locally and never stored or transmitted anywhere.
Telemetry & Usage Data: We do not collect crash reports, usage analytics, feature tracking, or session logs.
Device Identifiers: We do not record your IP address, IDFA, Advertising ID, or hardware serial numbers.

2. In-App Purchases & Billing Data

LoyalCloak offers optional Pro upgrades processed through official billing systems:

        Mobile payments are handled via Apple App Store (StoreKit) & Google Play Store Billing via RevenueCat. Web billing is handled via Paddle (Merchant of Record).
      

We do not receive or store your credit card details, banking information, or billing address. RevenueCat and Paddle receive only anonymous entitlement tokens to confirm your active Pro subscription state. An encrypted entitlement token is cached locally in your device's secure storage to enable offline access.

3. Third-Party Services & Network Activity (Apps)

The LoyalCloak Apps contain zero third-party tracking, advertising, or cloud-analytics SDKs.

The only permitted external network calls are standard in-app purchase receipts verified directly by Apple StoreKit, Google Play Billing, or Paddle via RevenueCat. If network access is offline, LoyalCloak honors your locally cached Pro entitlement without requiring an active internet connection.

4. Data Security & Storage Architecture

LoyalCloak enforces strict security architecture controls:

RAM-Only Processing: Intermediate text buffers, parsed tokens, and sanitized outputs exist only in transient memory (RAM).
No Disk Copies: The app and platform share extensions do not persist raw or intermediate document copies to local disk.
On-Device Rust Native Core: Document parsing and regex masking run within memory-safe Rust native code compiled directly into the application binary / WebAssembly.

5. Your Data Rights (GDPR / CCPA / CPRA)

Under global privacy regulations (including GDPR, CCPA, and CPRA), individuals have rights to access, delete, or port their personal data.

Because the LoyalCloak Apps collect, transmit, and retain zero personal data, we hold no app data to provide, export, or delete. Your data remains 100% under your sole ownership on your device at all times.

6. Website & Entrypoint Analytics (100% Cookieless)

To understand aggregate visitor volume, popular pages, device types, and referring sources, LoyalCloak uses privacy-first, cookieless analytics provided by Vercel Web Analytics.

Zero Cookies: We do not store, set, or read cookies on your browser.
Zero Tracking or Profiling: We do not use advertising identifiers, cross-site tracking, or behavioral profiling. IP addresses are discarded at the edge.
Zero Document Telemetry: No document contents, sanitization statistics, text inputs, or in-app actions are ever transmitted to analytics.
GDPR & ePrivacy Compliant by Design: Because our analytics collect no personal data and store no cookies, no invasive consent popups or cookie banners are required.

8. Contact Us

If you have any questions or security concerns regarding LoyalCloak's privacy architecture, please contact us at:

📧 Email: [email protected]