pii-maskPrivacy Policy
In short: the pii-mask app does not collect, upload or share any of your data. The text you paste is processed in your device's memory only.
1. Scope
This policy covers the pii-mask application for iOS and Android (the “App”) and this website (the “Website”). They handle data differently, so each is described separately.
2. Developer and contact
Developer: Pii Mask
Email: piimask.app@gmail.com
3. What the App processes
The text you paste and the masking map exist only in the App's memory while it runs, to produce the masked result and to restore an AI reply. They are never written to device storage and never sent to us or anyone else. They are discarded when you tap “Clear all” or when the system closes the App.
Settings stored on your device (in the operating system's app preferences: UserDefaults on iOS, SharedPreferences on Android):
| Item | Contents | Purpose |
|---|---|---|
| Options | Whether to mask suspect matches, detect names, keep a card's first and last 4 digits | Remember your preferences |
| Word lists | The “always mask / never mask / names” words you enter | Masking rules |
| Appearance, language | Light / Dark / Ink / System; Traditional Chinese / English | Display |
| Daily usage | The date, that day's count, and short hashes of results already counted (no text; cannot be reversed) | Free tier limit of 5 per day |
| Purchase status | Whether Lifetime is unlocked | Stay unlocked while offline |
Word lists may contain names or other words you type — use them with care. The Android App opts out of cloud backup of app data. On iOS, app settings may be included in iCloud or computer backups you have turned on; that is iOS behaviour and we cannot access those backups.
Clipboard: read only when you tap “Paste”, written only when you tap “Copy” (with the masked text). The App never reads the clipboard in the background.
4. Network and third parties
- The App contains no analytics, advertising, crash-reporting or tracking SDKs.
- The App's interface layer blocks outgoing connections with a content security policy; the Android App does not request the INTERNET permission.
- The iOS privacy manifest declares no tracking and no collected data types.
- Purchases: Lifetime is bought through the Apple App Store or Google Play. Payment data is handled by Apple or Google under their own privacy policies; we never receive your payment or account details. The App only asks the store service on your device whether the purchase exists.
5. Website
The Website is static. It uses no cookies, no analytics and no advertising tracking, and loads no third-party scripts. Tap-to-zoom screenshots use a small script we wrote and host on this site; it only switches images in your browser, stores nothing and sends no requests. Our hosting provider (Cloudflare Pages) may keep standard server logs (such as IP address, browser type and access time) to run the service and prevent abuse; we do not use them to identify anyone. If we ever add traffic statistics, we will update this policy first and describe them separately from the App.
6. Retention and deletion
We have no servers holding your data and no accounts, so there is no cloud data to request deletion of. You can clear text and edit word lists in the App at any time; uninstalling the App deletes all of the on-device settings above. Purchase records are kept by Apple or Google and can be viewed in your account there.
7. Children
The App is not designed for children under 13 and does not collect personal data from anyone.
8. Changes
If this policy changes, we will update this page and the “Last updated” date above; significant changes will also be noted in the App's release notes.
9. Language
This policy is also available in Traditional Chinese. If the two versions differ, the Traditional Chinese version prevails.