MaskID Privacy Policy

This policy explains how MaskID, developed by Lester Romero Bernardo (RomeroDev), handles information when you use the app. Apple independently manages App Store purchases, Apple Account data, and its iCloud services.

1. On-device processing

Capture, import, OCR, mask editing, and export are processed on your device. MaskID does not create advertising profiles or track people across apps or websites.

2. Local storage and security

Documents and working files are stored locally and encrypted at rest with device-bound keys protected by Keychain and iOS data protection. The Vault uses separate key and access controls. These local keys are not designed to migrate to another device.

3. Optional iCloud sync

If you have MaskID Pro and enable sync, MaskID uploads a restorable document package to your private CloudKit database. It can include metadata, original and working images, the source PDF when present, OCR-extracted text, and masks. Sync therefore includes document content, not just an index. The Vault stays on-device and is not synced. Apple provides iCloud and handles that data under its policies.

4. Files, Google Drive, and Dropbox

Camera, Photos, Files, and the Share Sheet are used when you choose those features. You can also connect Google Drive or Dropbox directly through OAuth authorization with PKCE; tokens are stored in Keychain and MaskID imports the file you select. These connections require internet access and are also subject to the provider's policies.

5. Purchases, diagnostics, and analytics

Apple processes purchases. RevenueCat receives pseudonymous purchase history to validate MaskID Pro access. Firebase Analytics is optional, off by default, and only enabled if you consent. Firebase Crashlytics is used separately for stability diagnostics. These services do not receive document content, images, OCR text, masks, or filenames.

6. Retention and deletion

Local documents remain on your device until you delete them. Temporary export copies are protected and removed when the relevant flow ends. Turning sync off in MaskID deletes its remote records when CloudKit accepts the request; if deletion fails, sync stays enabled and the app reports an error. Individual deletions are queued and retried when iCloud is available again. Removing the app deletes local data but does not itself request deletion of CloudKit copies; turn sync off in MaskID while online before uninstalling.

7. Choices and rights

You can revoke system permissions, disconnect providers, disable analytics, and manage optional sync using the available controls. If you do not enable iCloud, document content stays on-device; the Vault is not synced. Where applicable, you may request access, rectification, deletion, restriction, objection, portability, or withdrawal of consent by writing to the contact below. You may also complain to the Spanish Data Protection Agency or the competent authority where you live.

8. Children

MaskID is a general document utility and is not directed to children. Do not process a child's sensitive information without lawful authority and appropriate safeguards.

9. Security and limitations

No system eliminates every risk. Protect your device passcode and Apple Account, retain originals you need, verify each recipient, and review every exported page. OCR and technical checks can miss sensitive information.

10. Changes and contact

Material changes will be reflected by a new update date and, where appropriate, an in-app notice.

Data controller: **Lester Romero Bernardo (RomeroDev)**

Address: **Calle Madre Juana María Condesa Lluch 6, Valencia, Spain**

Privacy contact: **romerodev.app+maskid@gmail.com**