# Privacy Policy — Digi Brain

**Effective date:** 25 July 2026
**App:** Digi Brain — Home Inventory (Android package `com.zelda09.digital_brain`)
**Developer contact:** `contactus@useotools.com`

## The short version

Digi Brain is an offline app. Your inventory — item names, notes, photos, videos,
voice notes, locations, and everything in the Vault — is stored **only on your
phone**. There is no Digi Brain account, no Digi Brain server, and no cloud sync.
**We, the developer, do not collect, receive, see, sell, or share any of it.**

Three things do involve other companies, and they are explained in full below:

1. **Ads.** The app shows ads from Google AdMob, and Google receives device
   information to serve them.
2. **AI photo auto-fill** (off by default). If you switch it on and supply your
   own API key, the photo you choose is sent to the AI provider you picked.
3. **Voice search** (only when you tap the microphone) uses your phone's own
   speech recognition, which on most devices is provided by Google or Apple.

---

## 1. Information the developer collects

**None.** We operate no servers and no analytics. We have no way to identify you,
contact you, or read your data. We do not know how many items you have or what
they are.

## 2. Information stored on your device

All of the following stays on your phone, in the app's private storage:

- Items, quantities, nicknames, notes, and tags
- Your places (rooms, shelves, boxes) and QR label assignments
- Photos, videos, and voice notes you attach
- Optional GPS coordinates for places you choose to save a position for
- **Vault entries** (logins, cards, license keys, private notes) — encrypted
- App settings, including your language, theme, and AI configuration

Uninstalling the app, or clearing its data in Android settings, permanently
deletes all of it. Because we hold no copies, we cannot recover it for you.

### Vault encryption

Vault secrets are encrypted on your device using AES-256-GCM. The key is derived
from your passphrase with scrypt, and your passphrase **never leaves your phone**
and is never stored anywhere in readable form. If you create a recovery key, only
an encrypted copy of your vault key is stored — the recovery key itself is not
saved. If you lose both your passphrase and your recovery key, **nobody,
including us, can decrypt your vault.**

If you enable biometric unlock or "Keep vault unlocked," your vault key is stored
in the Android Keystore (a hardware-backed secure area), not in the app database.

## 3. Advertising — Google AdMob

The app displays a banner ad and occasional full-screen ads, served by **Google
AdMob**. To do this, the Google Mobile Ads SDK collects and processes data from
your device, which may include:

- Your **Advertising ID** (a resettable identifier)
- IP address and approximate (country/region-level) location derived from it
- Device model, operating system, language, and app version
- Ad events, such as whether an ad was shown, viewed, or clicked

This data goes to Google, not to us. We receive only anonymous, aggregated
earnings totals — never anything about individual users. Depending on your
device settings and any consent choice you were shown, Google may use this data
to personalize the ads you see.

- Google's privacy policy: https://policies.google.com/privacy
- How Google uses data from apps that use its services:
  https://policies.google.com/technologies/partner-sites

**Your controls:** on Android, go to *Settings → Privacy → Ads* to delete or
reset your Advertising ID, or to opt out of ad personalization. Ads may still
appear, but they will be less relevant.

## 4. AI photo auto-fill (optional, off by default)

Digi Brain can suggest an item's name, notes, and tags from a photo. This feature
is **disabled until you turn it on** in *Settings → AI photo auto-fill*, and it
requires you to enter your own API key or server address.

- **If you choose OpenAI or Anthropic:** the single photo you select, plus a
  short instruction, is sent directly from your phone to that provider using
  **your own API key**. Your use is governed by that provider's privacy policy
  and your account with them. We are not a party to it and never see the photo,
  the response, or your key.
  - OpenAI: https://openai.com/policies/privacy-policy
  - Anthropic: https://www.anthropic.com/legal/privacy
- **If you choose a local or custom server** (for example Ollama or LM Studio on
  your own computer): the photo is sent only to the address you entered, normally
  a machine on your own network. Nothing goes to any third party.
- **If you choose on-device processing:** the photo is analyzed on your phone and
  is not transmitted anywhere.

API keys you enter are stored in the Android Keystore on your device and are sent
only to the provider they belong to. AI suggestions are never applied
automatically — you review and accept each field.

## 5. Voice search (optional)

When you tap the microphone on the search screen, your speech is transcribed by
your phone's built-in speech recognition service.

Digi Brain asks for **on-device recognition** whenever your device supports it
and the language pack is installed — in that case the audio **never leaves your
phone**. If on-device recognition isn't available (older devices, or a language
you haven't downloaded), the app falls back to your platform's standard
recognizer — provided by Google on most Android devices and by Apple on iOS —
which means **the audio may be sent to and processed by that company** under its
own privacy policy.

Either way, this happens only while you are actively holding a voice search, and
Digi Brain itself never records, stores, or transmits the audio — it receives
only the resulting text, which becomes your search query and is then discarded.

To keep voice search fully offline on Android, install your language for offline
speech recognition in your device settings (*System → Languages & input → On-device
speech recognition*).

## 6. Backup to your own computer (optional)

The PC backup feature sends your database and media files over your local Wi-Fi
network directly to a companion script running on **your own computer**. The
transfer does not pass through us or any third party, and nothing is uploaded to
the internet. Keeping that backup copy secure is up to you. CSV export likewise
produces a file that you choose where to send or store.

## 7. Permissions and why they are needed

| Permission | Why | When |
|---|---|---|
| Camera | Scan QR labels; photograph items | Only when you open the scanner or take a photo |
| Photos / media | Attach existing pictures to items | Only when you pick a file |
| Microphone | Record voice notes; voice search | Only while recording or listening |
| Location (approximate/precise) | Save a GPS position for a place | Only when you tap "Use my current location" |
| Biometrics / device credential | Unlock the Vault with fingerprint or face | Only at unlock |

Your location is never tracked in the background and is never transmitted by the
app; it is saved locally with the place you attached it to. Every permission is
optional — declining one only disables that feature.

## 8. Children's privacy

Digi Brain is not directed at children under 13, and we do not knowingly collect
any information from them. Because the app collects nothing, there is nothing for
us to delete; a parent or guardian can remove all local data by uninstalling the
app.

## 9. Data retention and deletion

We retain nothing, because we receive nothing. Your data lives on your device for
as long as you keep the app installed. To delete everything:

1. Uninstall Digi Brain, **or**
2. Android *Settings → Apps → Digi Brain → Storage → Clear data*

To request deletion of advertising data held by Google, use the Google account
and ad-settings controls linked in section 3.

## 10. Security

Vault contents are encrypted with AES-256-GCM using a key derived from your
passphrase (scrypt). Keys and API keys are held in the Android Keystore. Because
everything is local, the security of your data also depends on your device's own
lock screen and on keeping your passphrase and recovery key safe. No method of
storage is perfectly secure, and we cannot guarantee absolute security.

## 11. Your rights

Since we hold no personal data, there is no account to access, correct, export,
or delete with us — you already have full, direct control of your data on your
device, and can export it to CSV at any time. For data processed by Google
(advertising) or by an AI provider you chose to use, please exercise your rights
directly with that company.

## 12. Changes to this policy

If this policy changes, the updated version will be posted at this URL with a new
effective date. Material changes will also be noted in the app's release notes.

## 13. Contact

Questions about this policy or about privacy in Digi Brain:
**`contactus@useotools.com`**