Privacy Policy

1. Definitions

The application is ScanLocker for iPhone, and we and us mean Zirkon LLC, its publisher. Your material is the pictures, documents and text you keep in it. Personal information is information that identifies you or could reasonably be linked to you.

2. What the application collects

The application collects nothing. It creates no account, asks for no name or email address and reads no identifier of you or of the device. It contains no analytics, advertising, crash reporting or third-party code, and nothing you photograph, type or save is transmitted to us.

Its App Store privacy label reads Data Not Collected. It does no tracking as Apple defines it under App Tracking Transparency, and the privacy manifests of the application and of its rendering extension declare no tracking, no tracking domains and no collected data types.

3. How the information is used

No information is collected, so none is used. Your material is processed, encrypted and read on your iPhone. We build no profile of you and make no automated decision about you.

4. Information received from third parties

We receive none. Apple’s sales reports reach us as counts by territory, with no name, email address or device identifier.

5. Sharing with third parties

We share no personal information with anyone, sell none and share none for advertising. These companies are involved.

• Apple distributes the application, takes payment for the full version, stores the backup of section 7 and holds the records of section 9. Apple’s privacy policy governs your Apple Account, your purchase and your iCloud storage.
• Cloudflare answers the STUN request of section 9.
• The hosting provider for this website records the web server information of section 20.

6. The connections the application opens

We operate no server. The application opens these connections.

• The App Store. The application asks Apple whether the full version has been bought on this Apple Account.
• Your own iCloud account. The backup of section 7 is written there once Automatic Backup is on.
• A pairing or a transfer you start. Section 9 describes the three routes.
• Listening for a paired iPhone. While the application is open and unlocked and an iPhone is paired, it waits on the Internet route of section 9 for up to eight paired iPhones, with nothing turned on. After you tap Bluetooth or Wi-Fi under Receive, it listens over Bluetooth, or searches this iPhone’s Wi-Fi network, until the application is quit. Both start off, and neither reaches the Internet.
• A page of this website. Tapping a link on the About tab opens one, and section 20 says what serving a page records.

7. The iCloud backup

Automatic Backup is off until you turn it on. While it is on, everything on both tabs outside Vault and the Trash Bin is copied to your own iCloud account, encrypted on your iPhone before it leaves. The name of the iPhone that wrote the backup, the number of items in it and the time it was made are stored beside it unencrypted. We cannot read, list or delete the backup.

A copy of each tab’s key goes to iCloud Keychain, so another iPhone signed in to your Apple Account can open the backup. A restoring iPhone is not asked for your PIN, so anyone who can restore this iCloud account’s Keychain can restore the backup.

Keeping a copy in iCloud

8. Copies you send out

A readable copy leaves your iPhone when you share items to another application, save pictures to Camera Roll or print, and whatever receives it holds it under its own rules. A Vault item cannot be shared, saved to Camera Roll or printed.

9. Transfers between iPhones

A transfer carries your contents, encrypted the whole way, to an iPhone you have paired, by one of three routes. No server of ours exists on any of them.

• Bluetooth reaches one iPhone nearby, and Wi-Fi reaches one iPhone on the same local network. Neither reaches the Internet.
• The Internet reaches a paired iPhone anywhere. While the application is open and unlocked and an iPhone is paired, Apple’s iCloud holds a small encrypted record of this iPhone’s network address, in the public database of the application’s own iCloud container, so the other iPhone can find this one. While a pairing code is active, that record is unencrypted. Apple sees that the record exists, when it was written and which iCloud account wrote it. Cloudflare’s STUN server at stun.cloudflare.com sees this iPhone’s network address and the time of the request. The two iPhones open one direct connection, and each learns the other’s network address. Where the networks allow no direct connection, the transfer passes through the same database as numbered encrypted records, each deleted once read. Neither Apple nor Cloudflare can read what is sent, and each iPhone deletes its records when the application locks and when it leaves the foreground.

Sending everything to another iPhone you have paired

10. Reading text and reading a PDF

Extract Text from Photo, Delete Text and the PDF import under Import each read on this iPhone. Extracted text stays on its screen until you send it out or save it as a Locker note, word positions are kept only while Delete Text is open, and the PDF is not kept.

11. International transfer

The application sends us no personal information, so we transfer none across a border. Apple stores an iCloud backup in the locations its own terms describe. Correspondence you send us is received and kept in the United States.

12. Storage and security

Pictures and Locker items are encrypted with AES-256-GCM under 256-bit keys held in your iPhone’s Keychain and restricted to that iPhone. We hold no copy of any key and cannot read what you keep.

The stored files stay out of the backup iOS makes of the iPhone, which holds the application’s settings and the count each check on the Security page keeps. The history of security events is its own encrypted file, also outside that backup, holding the kind and time of each event and the name of the item involved.

How ScanLocker protects what you keep in it

13. What the Security page notes

The Security page notes a screenshot or a screen recording taken while its switch is at No or with Vault open, and a sign that iOS has been modified. A share, a print or a save to Camera Roll is not noted, and none of the page’s eight checks reports to anyone.

14. Retention

Your material stays on your iPhone, and in your iCloud account, for as long as you keep it there. We retain nothing from your use of the application. Correspondence you send is kept for as long as answering it and honouring any commitment in it requires.

15. Deletion

Deleting an item, the application or the iCloud backup removes it from where it was kept. Correspondence is the only personal information we hold, and section 18 says how to have it deleted.

Deleting

16. Device permissions

The application can ask for six permissions, each when a task first needs it. Refusing one stops that task, each can be withdrawn in iPhone Settings, and no use of a permission is reported anywhere.

Camera

Tapping Capture or Multi asks for it.

Face ID

Turning Face ID / Passcode on asks for it.

Photo library, adding only

Saving a picture to Camera Roll or to an album asks for it.

Photo library, full access

Saving a picture to an album asks for it, because finding or making the album needs it.

Bluetooth

Pairing or transferring over Bluetooth asks for it.

Local network

Pairing or transferring over Wi-Fi asks for it.

Importing a picture from Camera Roll or a PDF uses the iPhone’s own picker, which needs no permission. The application asks for no other permission and sends no notification.

17. Children

The application is not directed at children under 13, and we knowingly collect no personal information from anyone of any age. A parent or guardian who believes a child has sent us correspondence may write to the address in section 23 to have it deleted.

18. Your rights

Depending on where you live, the law lets you know what personal information an organisation holds about you, receive a copy, have it corrected or deleted, restrict or object to its use, take it elsewhere and complain to a supervisory authority. These rights arise under the General Data Protection Regulation in the European Economic Area and the United Kingdom, under the California Consumer Privacy Act as amended, and under comparable laws elsewhere.

We hold nothing from your use of the application. Where we hold correspondence you sent, write to contact@zirkon.services from the address you wrote from and say what you want done, and we answer within 30 days. We sell no personal information, share none for cross-context behavioural advertising and treat nobody differently for exercising a right.

19. The lawful basis, where one is needed

Processing arises only from correspondence you send us. The basis is our legitimate interest in answering the person who wrote and, where a message concerns a purchase or our terms, the performance of that agreement. You may object at any time by asking us to delete the correspondence.

20. This website

This site sets no cookies, runs no script or analytics, embeds no tracking pixel and loads nothing from a third party. Our hosting provider records ordinary web server information, including the requesting network address, the page requested and the time, to deliver the site and defend it from abuse. We use it for nothing else, build no profile from it and pass it to nobody. Writing to a published address sends us your message and your email address, which are used only to answer you.

21. Breach notification

We hold no store of user material, so a breach affecting us could reach only correspondence sent to our addresses. We would notify the people affected and any authority their country’s law requires, within the time that law sets.

22. Changes to this policy

A change appears on this page under a new date. The Privacy Policy row on the About tab opens this page.

23. Contact

Write to contact@zirkon.services with any question about this policy or the application. The publisher’s postal address is 1209 Mountain Rd Pl NE STE R, Albuquerque NM 87110, United States, and its telephone number is 505-303-1051.