Privacy Policy
Effective Date: March 1, 2026 • Last Updated: March 2026 • Application ID: me.mindfulness.zentrail
Executive Summary: Absolute Zero Data Collection
Zentrail was deliberately engineered under the Privacy by Design doctrine. We collect, transmit, store, monetize, and log ZERO personal data. The application operates 100% offline and requests zero operating system permissions.
1. Information We Do NOT Collect
Unlike conventional modern applications, Zentrail maintains no remote infrastructure. We explicitly confirm that we do not collect, capture, or inspect:
- Personal Identifiable Information (PII): No names, email addresses, phone numbers, avatars, or physical addresses.
- Hardware & Network Identifiers: No IP addresses, MAC addresses, IMEI numbers, Android Advertising IDs (AAID), or device serials.
- Location Data: No GPS coordinates, Wi-Fi tri-angulation, cell tower IDs, or Bluetooth beacons.
- Usage & Behavioral Telemetry: No analytics funnels, screen duration records, click heatmaps, or session replay data.
- Biometric or Health Data: Any logs, inputs, or notes you record in Zentrail remain on your device only.
2. Operating System Permissions Verification
To eliminate the possibility of data exfiltration, Zentrail does not request any sensitive permissions in its manifest. Specifically:
Without INTERNET permission, the Android operating system kernel physically blocks the Application from establishing any network sockets or sending any HTTP/HTTPS requests.
3. Local Device Storage Architecture
All inputs, user preferences, and data records created inside Zentrail are stored exclusively in your device's isolated application sandbox (via SQLite databases and local SharedPreferences). This sandbox is enforced by Linux user-group permissions within Android. No other application on your device can access Zentrail's storage sandbox without root escalation.
4. Absence of Third-Party SDKs & Trackers
Zentrail contains zero commercial SDKs, zero advertising frameworks, and zero crash analytics libraries. Specifically, the Application DOES NOT contain:
- Google Firebase Analytics / Crashlytics
- Google AdMob or Meta Audience Network
- Mixpanel, Amplitude, or Segment
- Sentry, Bugsnag, or Datadog telemetry
5. Data Retention, Deletion, and Total User Control
Because your data never leaves your physical hardware, you maintain absolute control over retention and deletion:
- In-App Deletion: You may edit or delete individual entries directly through the Application's interface at any time.
- OS Storage Clearing: Navigating to Android Settings > Apps > Zentrail > Clear Storage immediately purges all local databases.
- App Uninstallation: Uninstalling the Application permanently erases the entire sandbox directory. No residual data survives on any remote server.
6. International Privacy Compliance (GDPR & CCPA/CPRA)
Although we operate no remote servers and process no personal data, we adhere to the spirit and standards of international data protection regulations:
- GDPR (General Data Protection Regulation): We act neither as a Data Controller nor as a Data Processor. No personal information enters the European Union or any third country. Your rights to access, rectification, portability, and erasure are fulfilled natively on your device.
- CCPA / CPRA (California Consumer Privacy Act): We do not sell, share, or broker your personal information. No consumer data is monetized or distributed to commercial data brokers.
7. Children's Online Privacy Protection (COPPA)
Zentrail is safe for users of all ages, including children under 13 (or under 16 in applicable jurisdictions). Because the Application collects zero personal information, requests zero permissions, and displays zero advertisements, it is inherently compliant with the Children's Online Privacy Protection Act (COPPA).
8. Security of Local Information
While the Application utilizes local sandbox storage, security of physical hardware remains your responsibility. We strongly encourage users to utilize device-level screen locks (PIN, pattern, or biometrics) and full-disk encryption (FDE) provided by Android to safeguard locally stored information against unauthorized physical access.
9. Changes to this Privacy Policy
Should any architectural changes occur in future versions, we will update this document with an amended Effective Date. However, our foundational commitment—providing 100% offline, zero-permission utilities—remains non-negotiable.
10. Contact & Privacy Officer
If you have any questions, security vulnerability disclosures, or inquiries regarding this Privacy Policy, please reach out via our open development repository: