Privacy Policy
Specific Privacy Policy for the FirmApp Application.
This privacy policy applies to the FirmApp app (hereby referred to as "Application") for mobile devices. The Application was developed and is operated by Arandu Labs LLC (hereby referred to as "Service Provider") as an Ad Supported service. This service is intended for use "AS IS".
CRITICAL PRIVACY DISCLOSURE (Zero-Knowledge Architecture):
FirmApp operates on a strictly local-first, zero-knowledge architectural model. Your scanned documents, captured digital signatures, images, and edited PDF files are processed exclusively within the secure local sandbox of your device's memory. Your documents and sensitive content never leave your device, are never uploaded or synced to external servers by Arandu Labs LLC, and are completely isolated from third-party advertising networks.
Information Collection and Use
The Application collects information when you download and use it. This telemetry is collected automatically through the integration of advertising and analytics SDKs (such as Google Mobile Ads / AdMob, Firebase, and Appodeal) in encrypted transit via TLS to ensure application stability, ad delivery, fraud prevention, and performance diagnostics:
- IP Addresses & General Geolocation: Collected automatically to estimate approximate location (country and city level) for contextual ad serving, ad delivery measurement, and network security.
- Unique Device & Advertising Identifiers: Android Advertising ID (AAID / GAID), App Set ID, and device hardware/operating system identifiers for attribution and ad frequency capping.
- App Performance & Diagnostics Telemetry: Technical metrics including application launch/close events, crash logs, interface latency/hang rate, and battery/power consumption diagnostics utilized in aggregated form for error mitigation.
- User Interaction & Ad Engagement Metrics: Interaction timestamps, pages visited within the Application, and aggregate engagement events with ad elements (e.g., taps and video completion rates).
The Application does not gather precise GPS location data from your mobile device.
The Application does not use Artificial Intelligence (AI) technologies to process your documents or personal data.
For account features (where applicable), the Service Provider may collect user-provided information such as Email, UserID, and Name for authentication and account maintenance.
Third Party Access & Taxonomy
When you use the Application, third-party technology providers and ad mediation networks integrated via SDKs collect and process technical telemetry (Third-Party Data). These entities act as independent data controllers operating under their respective privacy policies:
Please review the privacy policies of the third-party service providers and advertising networks utilized by the Application:
The Service Provider may disclose User Provided and Automatically Collected Information:
- As required by law, such as to comply with a subpoena, or similar legal process;
- When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- With their trusted service providers who work on their behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to strict confidentiality standards.
Advertising, Cookies & European User Consent (GDPR / TCF Feature 3)
The Application displays advertisements served by third-party advertising platforms, including Google AdMob and Appodeal. These companies may use cookies, web beacons, local storage, device identifiers, and network telemetry to serve contextual or personalized ads, control ad frequency, and measure campaign performance.
Google Data Processing Disclosure: Third parties (including Google LLC) may place and read identifiers or use IP addresses to collect information as a result of ad serving on this Application. To learn how Google processes data across partner sites and apps, please visit: How Google uses information from sites or apps that use our services.
IP Address Processing (IAB TCF Feature 3): In compliance with the European User Consent Policy and the IAB Europe Transparency and Consent Framework (TCF), users located in the EEA, UK, and Switzerland who consent to personalized advertising explicitly acknowledge that their IP addresses are utilized for automated ad delivery, measurement, and fraud mitigation under TCF Feature 3 ("Identify devices based on information transmitted automatically").
Managing and Revoking Consent (Consent Revocation Mechanism): You have the sovereign right to modify or revoke your consent preferences at any time without friction. To change your consent settings within the Application, navigate to Settings → Privacy & Consent and select "Manage Ad Consent Preferences". This action will immediately re-invoke the Google User Messaging Platform (UMP) CMP dialog, allowing you to alter or withdraw your consent.
Operating System Controls: You may also opt out of personalized advertising globally through your device settings (e.g., Google Settings → Ads → Delete or reset Advertising ID on Android, or Settings → Privacy → Tracking on iOS).
US State Privacy Rights (CPRA / VCDPA & "Do Not Sell or Share")
Under United States state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA) and the Virginia Consumer Data Protection Act (VCDPA), the technical transmission of device identifiers and IP addresses to third-party ad networks for cross-context behavioral advertising may be considered a "sale" or "sharing" of personal information.
Notice of Right to Opt-Out ("Do Not Sell or Share My Personal Information"): Arandu Labs LLC does not sell personal data for monetary compensation. However, you have the statutory right to opt out of the sharing of your data for personalized ads.
To exercise your opt-out right, you can use the in-app consent preferences menu or enable the Global Privacy Control (GPC) signal on your device. Our advertising infrastructure supports the IAB Global Privacy Platform (GPP) and transmits Restricted Data Processing (RDP) signals to Google AdMob, restricting data processing to service provider functions when an opt-out is detected.
Opt-Out Rights
You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
Data Retention & Deletion Policy
The Service Provider will retain technical logs and User Provided data only for as long as necessary to provide the services (technical crash logs are purged within 90 days, and aggregated analytics are retained between 14 and 26 months). If you wish to delete account data provided via the Application, you may submit a request through our automated portal at firmapp.arandulabs.dev/delete-account/ or contact us directly at [email protected].
Children's Privacy (COPPA Compliance)
The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.
The Application does not direct interest-based, behavioral, or remarketed advertising to children under 13 years of age. If the Service Provider discovers that a child under 13 has provided personal information, it will immediately be expunged from our servers. If you become aware that a child has provided us with personal data, please reach out to [email protected].
Security & Encryption in Transit
The Service Provider implements industry-standard physical, electronic, and procedural safeguards, including mandatory Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between the Application and third-party APIs.
Changes to this Privacy Policy
This Privacy Policy may be updated periodically to reflect legislative or operational changes. We will notify you of any revisions by updating the "Effective Date" at the top of this document. Continued use of the Application after changes are posted constitutes acceptance of the revised policy.
Your Consent
By using the Application, you consent to the processing of your information as outlined in this Privacy Policy.
Contact Us
If you have questions regarding privacy, data protection, or third-party practices, please contact Arandu Labs LLC at [email protected].