Privacy Policy

Overview

Nullify is built on a simple principle: your documents are yours. We do not store, transmit, or retain the contents of any document you process. This policy explains what minimal data we do collect, and why.

1. Information We Collect

We collect only what is necessary to operate the app and improve it.

Document Data

Documents you upload are processed entirely on your device. The image is sent to our AI provider (AIProxy / Google Gemini) solely to detect personally identifiable information and return bounding box coordinates. We do not store, log, or retain your document content on any server. The image data is transmitted over an encrypted connection and discarded immediately after the AI returns its response.

Usage Analytics

We use TelemetryDeck to collect anonymous, privacy-preserving analytics — for example, how many documents were analyzed or how often the manual redaction tool is used. TelemetryDeck is designed to be GDPR-compliant by default: signals are hashed and cannot be traced back to an individual user. No personal identifiers are collected.

Subscription Data

Subscriptions are managed by RevenueCat. When you subscribe, RevenueCat processes your purchase through Apple's App Store. RevenueCat receives a pseudonymous user ID and your subscription status. We never see your payment details. Refer to RevenueCat's Privacy Policy for full details.

2. How We Use Your Information

• —To provide AI-powered PII detection within the app
• —To manage your subscription and free trial status
• —To understand how the app is used so we can improve it
• —To diagnose crashes and technical issues

3. Third-Party Services

4. Data Retention

Processed documents are stored locally on your device until you delete them via Settings → Clear History. After redaction, the original document and all detected PII metadata are deleted from device storage — only the redacted image is retained. We do not retain document data on any server at any time.

5. Children's Privacy

Nullify is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

6. Your Rights

Because we do not collect personal data beyond what Apple and our third-party providers process, most data access requests should be directed to those providers. For any questions or requests related to data we control, contact us at the address below.

Residents of the EU, UK, California, and other jurisdictions with privacy legislation may have additional rights including access, correction, and deletion of personal data held by our third-party providers.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be noted by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

8. Contact

Questions about this Privacy Policy can be sent to [email protected] or via the support page at nullify.savaskoc.de.