Privacy Policy

1. Summary

• Your stego content stays on your device. We do not upload your cover images, stego images, or hidden text/payloads to our servers.
• Free tier includes advertising. Google AdMob may process device and advertising-related data subject to your consent choices (see Section 5).
• Stego Pro is an optional subscription processed by Apple or Google; RevenueCat helps us validate entitlements (see Section 6).
• We do not operate our own analytics product and do not build user profiles from your hidden content.

2. Data Controller

Japality Limited
Email: japalitylimited@gmail.com
Jurisdiction: Hong Kong SAR

For personal data processed by third-party services (Apple, Google, Google AdMob, RevenueCat), those providers act as independent data users or processors under their own policies. We disclose their role below so you can make informed choices.

3. Information We Do Not Collect Directly

We do not operate servers that receive or store:

• Your cover or stego images
• Hidden text or file payloads you embed or extract
• Diagnostics or reason codes generated during extraction (these remain on-device)

4. On-Device Processing

Steganography (embedding and extraction) runs locally on your device. Temporary memory buffers are released under normal operating-system lifecycle. Exported files remain under your control in device storage or services you choose to share them with.

Integrity checks (e.g., CRC) validate payload correctness; they are not encryption and do not conceal data from someone who possesses the stego file.

5. Advertising (Free Tier)

If you use Stego without an active Stego Pro subscription, the App may display ads through Google Mobile Ads (AdMob). Depending on your region and consent choices, AdMob and its partners may process:

• Device identifiers (e.g., advertising ID on Android; IDFA on iOS if you grant App Tracking Transparency permission)
• IP address and coarse location derived from IP
• Ad interaction and delivery data

On iOS we request App Tracking Transparency before personalized ads where required. You can change ad personalization via Settings → Ad Privacy in the App (Google User Messaging Platform). If you decline tracking or ads where permitted, you may still see non-personalized or limited ads, or no ads if the SDK cannot load them.

See Google’s privacy policy: policies.google.com/privacy

6. Subscriptions (Stego Pro)

Stego Pro removes in-app advertising. Purchases are handled entirely by Apple App Store or Google Play. We do not receive your payment card details.

We use RevenueCat to verify subscription status and deliver the ad-free entitlement. RevenueCat may receive:

• App user identifier assigned by RevenueCat
• Purchase and subscription status, product identifiers, renewal dates
• Device and store-receipt information needed to validate purchases

See RevenueCat’s privacy policy: revenuecat.com/privacy

Subscription management, cancellation, and refunds follow Apple or Google platform rules. See our Terms of Use.

7. Other Third-Party Services

• Apple / Google platforms — app distribution, in-app purchases, optional OS-level crash diagnostics you may enable in device settings.
• Google User Messaging Platform (UMP) — consent management for ads in applicable regions.

We do not embed Firebase Analytics, Google Analytics, or similar first-party usage analytics SDKs operated by Japality Limited.

8. Legal Basis (Hong Kong PDPO)

Where the Personal Data (Privacy) Ordinance (Cap. 486) applies:

• Contractual necessity / legitimate interests — providing the App, validating subscriptions, and displaying ads that fund the free tier.
• Consent — where required for personalized advertising (e.g., ATT on iOS, UMP in certain jurisdictions).

You may contact us to make a data access or correction request relating to data we control. For store or ad-network data, you may also use Apple, Google, or AdMob privacy controls.

9. Retention

We do not retain your stego content on our systems. Third-party retention periods are governed by their policies. Subscription records retained by Apple, Google, or RevenueCat follow their respective schedules.

10. Children

The App is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided information to us, contact us and we will assist with deletion where applicable.

11. Security

We minimize centralized data handling. You are responsible for securing exported stego files and complying with applicable laws. Steganography alone does not guarantee secrecy.

12. Prohibited Use

You must not use the App to conceal unlawful content or infringe others’ rights. You are solely responsible for lawful use. To the fullest extent permitted by Hong Kong law, Japality Limited is not liable for user misuse.

13. International Transfers

Third-party providers (Google, Apple, RevenueCat) may process data outside Hong Kong. Their cross-border safeguards are described in their policies.

14. Changes

We may update this Policy when features change (e.g., new ad formats or subscription tiers). The Effective Date will be revised. Material changes may be communicated in-app or on this page.

15. Contact

Japality Limited — japalitylimited@gmail.com

16. Governing Law

This Policy is governed by the laws of the Hong Kong Special Administrative Region.