Google Play & Apple App Store Privacy Compliance Verified
Active HTTPS • Global AccessThis document is publicly hosted at shinraiapps.com/privacy, accessible worldwide without logins or geoblocking, presented in a standard non-editable format, and applies specifically to all apps published under Shinrai Apps / Shinrai Ops.
Privacy Policy for Shinrai Applications
1. Introduction & Trust Commitment
Shinrai (信頼) is the Japanese concept for trust, reliability, and fiduciary responsibility. At Shinrai Apps and our parent organization Shinrai Ops (shinraiops.com), we believe privacy is an absolute human right and an engineering principle, not an afterthought. This Privacy Policy explains how Shinrai Apps ("we", "us", or "our") collects, uses, protects, and discloses information when you download, install, or use any mobile applications published by us on the Google Play Store or Apple App Store (collectively referred to as the "Applications"), or when you visit shinraiapps.com. We encourage you to read this policy carefully. If you do not agree with our practices, your choice is simply not to use our Applications. By accessing or using our Applications, you agree to this Privacy Policy.
2. Scope & App-Specific Applicability
This Privacy Policy governs the general privacy architecture across the entire Shinrai Apps ecosystem as well as individual applications. Because our applications vary in functionality (ranging from offline-only zero-knowledge cryptographic tools to enterprise cloud monitoring companions), each application has a dedicated Data Safety declaration and an App-Specific Addendum: - Shinrai Authenticator (Package ID: com.shinraiapps.authenticator) - Zero-knowledge 2FA generator - Shinrai Cloud Monitor (Package ID: com.shinraiapps.cloudmonitor) - DevOps & infrastructure monitoring companion to shinraiops.com - Shinrai Vault & Notes (Package ID: com.shinraiapps.vaultnotes) - Private client-side encrypted vault - Shinrai NetGuard & DNS (Package ID: com.shinraiapps.netguard) - Local loopback DNS & tracker firewall - Shinrai Scan & Sign (Package ID: com.shinraiapps.scansign) - Offline neural document scanner & signer Each app's specific data collection matrix and permissions are detailed in Section 15 of this document and can be viewed directly at shinraiapps.com/privacy/[app-slug].
3. Categories of Data We Collect & How We Collect It
We adhere strictly to the principle of Data Minimization. We only collect the bare minimum information necessary to deliver the functionality you explicitly request. Depending on the application, we may process:
A. Information You Voluntarily Provide
Account registration details (e.g. business email address when logging into Shinrai Cloud Monitor enterprise accounts), customer support inquiries, bug reports submitted via our in-app feedback tool, and voluntary feature requests. For our offline utilities (Shinrai Authenticator, Shinrai Vault & Notes), NO account registration or personal identity is ever requested.
B. Automatic Device & Technical Telemetry (Optional & Aggregated)
Operating system version, hardware model, system locale/language, network connection state (Wi-Fi vs Cellular), and application version. We do NOT harvest unique persistent device hardware IDs (such as IMEI, MAC address, or hardware serial numbers). We do NOT use advertising identifiers (such as Google AAID or Apple IDFA) for behavioral tracking or ad targeting.
C. Crash Diagnostics & Error Logs (Opt-In)
When an application encounters an unexpected crash or exception, an anonymized diagnostic report may be generated. This report contains the stack trace, error location, device architecture, and memory state at the moment of failure. All cryptographic keys, user documents, usernames, tokens, and personal contents are strictly excluded from crash telemetry.
D. Permissions Requested
Any permission requested by our applications (such as Camera, Biometrics, Notifications, or VpnService) is requested dynamically at the time of feature use with a clear, plain-language on-screen explanation. Permissions can be revoked at any time via your device's operating system settings.
4. Purposes & Legal Bases for Data Processing
Under GDPR and international privacy statutes, we only process information when we have a valid legal basis. We use collected data strictly for:
A. Delivery of Core App Functionality (Contractual Necessity)
Enabling multi-factor verification codes, displaying infrastructure health metrics, synchronizing encrypted vaults across authorized devices, and rendering scanned documents.
B. Security, Fraud Prevention & System Integrity (Legitimate Interests)
Protecting against unauthorized account access, detecting malicious attacks, verifying mutual TLS cryptographic certificates, and enforcing rate limits on authentication endpoints.
C. Crash Analytics & Quality Assurance (Consent / Legitimate Interest)
Diagnosing application regressions, resolving software bugs, and optimizing battery and CPU performance across diverse Android and iOS hardware configurations.
D. Customer Support & Regulatory Compliance (Legal Obligation)
Responding to technical support tickets, processing verifiable data deletion requests, and complying with statutory obligations.
5. Third-Party Services & SDK Disclosures
Google Play Developer Policies require explicit disclosure of all third-party SDKs and service providers incorporated into our applications. We audit every third-party library to ensure compliance with our zero data brokerage standards:
Google Play Services (Google LLC)
Purpose: Core Android operating system frameworks, in-app billing verification (for premium subscriptions, if applicable), and essential library runtimes. Data collected: Standard OS-level telemetry governed by Google's Privacy Policy at https://policies.google.com/privacy.
Google Firebase Cloud Messaging (Google LLC)
Purpose: Delivery of critical infrastructure downtime push notifications in Shinrai Cloud Monitor. Data collected: Ephemeral device push token (FCM token). Does not inspect message content.
Google Firebase Crashlytics (Google LLC) - Opt-In
Purpose: Anonymized crash reporting and memory dump diagnostics. Data collected: Stack traces, operating system version, device model, and crash timestamps. Personal identifiers and cryptographic keys are scrubbed before transmission. Privacy policy: https://firebase.google.com/support/privacy.
NO Third-Party Advertising SDKs
We DO NOT integrate Google AdMob, Unity Ads, AppLovin, Facebook Audience Network, or any other third-party programmatic ad exchanges. Our applications are 100% free of invasive behavioral advertising.
NO Third-Party Data Brokers
We have never sold, rented, leased, or transferred any user data to data brokers, analytics aggregators, or marketing bureaus, and we never will.
6. Data Retention, Account Deletion & Erasure Rights
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:
Local Device Storage
Data created in offline applications (Shinrai Authenticator, Shinrai Vault & Notes, Shinrai Scan & Sign) resides entirely on your device. It is retained until you manually delete entries or uninstall the application. We hold zero copies.
Enterprise Account Telemetry (Shinrai Cloud Monitor)
Infrastructure metrics and audit logs are retained for 90 rolling days. Account credentials remain active while your organization's subscription is in good standing.
Mandatory Data Deletion Policy (Google Play Compliant)
In compliance with Google Play Store data deletion requirements, any user can request the complete and permanent deletion of their account and all associated data at any time. You can submit a request directly through our automated portal at https://shinraiapps.com/data-deletion or by emailing privacy@shinraiops.com. Requests are validated and executed within 30 calendar days.
7. Security Safeguards & Encryption Standards
Security is embedded into every line of code we write. We implement industry-leading technical and organizational safeguards:
Encryption in Transit
All network communications are secured using Transport Layer Security (TLS 1.3) with HTTP Strict Transport Security (HSTS) and strict certificate pinning.
Encryption at Rest
All sensitive data stored on-device is encrypted using AES-GCM-256 or ChaCha20-Poly1305 with keys anchored inside the Android Keystore System or Apple Secure Enclave.
Zero-Knowledge Architecture
Master passwords and encryption passphrases are never transmitted to our servers. Key derivation utilizes memory-hard Argon2id or PBKDF2 algorithms with high iteration counts.
Independent Code Audits & Vulnerability Reporting
Our core cryptographic routines and networking stacks undergo periodic independent source code security audits. We operate a responsible disclosure program at shinraiapps.com/security.
8. Children's Online Privacy Protection (COPPA & Families Policy)
Our Applications are designed and intended for general adult audiences, professionals, and enterprise engineering teams. We DO NOT target children under the age of 13 (or under the age of 16 in the European Economic Area / UK), nor do we intentionally solicit or collect personal information from children. If we learn that we have unintentionally collected personal data from a child under 13 without verified parental consent, we will immediately take steps to purge such data from our systems. If you are a parent or legal guardian and believe your child has provided us with personal data, please contact our Data Protection Officer immediately at privacy@shinraiops.com.
9. International User Rights (GDPR, UK-GDPR & CCPA/CPRA)
Regardless of your geographic location, Shinrai Apps provides robust privacy rights. You have the right to:
European Economic Area (GDPR) & UK Rights
Right of Access (Article 15), Right to Rectification (Article 16), Right to Erasure / Right to be Forgotten (Article 17), Right to Restriction of Processing (Article 18), Right to Data Portability (Article 20), and Right to Object (Article 21). You also have the right to lodge a complaint with your local supervisory Data Protection Authority (DPA).
California Privacy Rights (CCPA / CPRA)
California residents have the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, and the right to opt-out of the 'sale' or 'sharing' of personal information. As noted throughout this policy: WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION FOR ADVERTISING PURPOSES. We do not discriminate against users who exercise their privacy rights.
Exercising Your Rights
To exercise any of the above rights, visit https://shinraiapps.com/data-deletion or email privacy@shinraiops.com. We verify the identity of the requester to ensure no unauthorized person accesses your records.
10. Cross-Border Data Transfers
Shinrai Apps is supported by global infrastructure operated by our parent organization Shinrai Ops. If personal data is transferred outside the European Economic Area or Switzerland to countries that have not received an adequacy decision from the European Commission, we rely on standard contractual clauses (SCCs) approved by the European Commission or equivalent international data transfer agreements.
11. Policy Changes & Version History
We may periodically update this Privacy Policy to reflect modifications to our applications, technical infrastructure, or legal obligations. When changes are made, we will update the 'Last Updated' date at the top of this page. For material changes, we will provide prominent in-app notification or notice on shinraiapps.com prior to the changes taking effect. We encourage you to review this page regularly. Your continued use of our Applications following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.
12. Contact Information & Data Protection Officer
If you have questions, comments, or concerns regarding this Privacy Policy, our data practices, or wish to communicate with our Data Protection Officer, please reach out through any of the following channels: • Privacy Office Email: privacy@shinraiops.com • Technical Support: support@shinraiapps.com • Data Protection Officer (DPO): dpo@shinraiops.com • Parent Platform: https://shinraiops.com • Physical Mail: Shinrai Technologies Inc. Attn: Legal & Privacy Affairs 100 Montgomery St, Suite 1400 San Francisco, CA 94104 United States of America