Privacy Policy
Protecting your digital integrity and privacy is not just a legal obligation; it is a core principle of our engineering philosophy.
1. DATA CONTROLLER & IDENTIFICATION
The entity responsible for the processing of your personal data is Arandu Labs LLC, a limited liability company organized and existing under the laws of the United States of America.
As the Data Controller, we determine the purposes and means of the processing of personal data for our various digital products, including mobile applications, websites, and cloud-based services.
Contact for Privacy Matters
For any inquiries, requests for the exercise of rights, or clarifications regarding this policy, you may contact our Privacy Compliance Office at:
[email protected]2. CATEGORIES OF DATA COLLECTED
We process data based on the principle of data minimization. We only collect information that is strictly necessary for the technical operation and improvement of our Services.
2.1 Device Information
When you access our Services, we may collect technical information about the device you use. This include:
- Hardware Model: Such as the manufacturer and model name of your smartphone or tablet.
- Operating System: Version and platform (iOS, Android, Windows).
- Unique Identifiers: Advertising IDs (IDFA for iOS or AAID for Android) and unique device tokens used for push notifications or analytics.
- Network Information: General geographical location (country level) derived from IP address, and connection type (e.g., Wi-Fi or LTE).
Precise Location Data
Location Data Collection: Some of our Services may collect precise geographic location information (such as GPS, Wi-Fi, or cell tower data) when you explicitly grant permission through your device settings.
Purposes: If you grant permission, we may use precise location data for ad personalization, analytics, and attribution purposes, and this data may be shared with our advertising partners. All location data is transmitted via encrypted channels.
2.2 Usage Data & Performance Metrics
To maintain the stability and quality of our Services, we collect anonymous metrics through third-party SDKs (Software Development Kits), specifically Firebase:
- Technical Logs: Detailed crash reports (Firebase Crashlytics) to identify and fix bugs.
- Interaction Metrics: Frequency of use, features accessed, and session duration.
- Performance Events: Application load times and resource utilization.
2.3 Local Content & Zero-Knowledge Architecture
CRITICAL PRIVACY DISCLOSURE: For applications like FirmApp and financial tools, Arandu Labs LLC employs a "Zero-Knowledge" local architecture.
Your files (PDFs, images, documents, financial records, or signatures) are processed LOCALLY ON YOUR DEVICE. Arandu Labs LLC does not upload, store, or have access to your personal documents on our servers. The processing occurs within the sandbox of your device, ensuring maximum confidentiality.
3. COOKIES AND TRACKING TECHNOLOGIES
Arandu Labs LLC and our trusted partners use various technologies to collect and process information as part of our Services. These technologies include:
- Cookies: Small text files stored on your device that help us recognize you and remember your preferences.
- Web Beacons: Small electronic images embedded in web pages and emails that allow us to track usage and deliver content.
- IP Addresses: Numerical identifiers assigned to your device when connecting to the internet, used for analytics and security purposes.
- Device Identifiers: Unique identifiers such as Advertising IDs (IDFA for iOS, AAID for Android) used for advertising and analytics.
- SDKs: Software Development Kits integrated into our mobile applications to enable third-party services.
Third-Party Cookies: Third parties, including Google and our advertising partners, may place and read cookies on your browser or device as a result of ad serving on our websites and applications. These third parties may collect information about your online activities across different websites and applications to serve personalized advertisements and analyze usage patterns.
Google's Use of Data
For information about how Google uses data when you use our partners' sites or apps, please visit:
How Google uses data when you use our partners' sites or apps4. LEGAL BASIS FOR PROCESSING
Under global regulations (GDPR/CCPA), we rely on the following legal bases to process your information:
- Contractual Necessity: Processing is required to provide the Services you have requested (e.g., scanning a document or managing your account).
- Legitimate Interest: To improve our products, maintain technical security, and prevent fraud. This includes the use of anonymous analytics to understand user behavior.
- Consent: In specific cases, such as personalized advertising through our partners, we rely on the consent you provide through the system-level prompts (e.g., App Tracking Transparency on iOS).
5. CHILDREN'S PRIVACY (COPPA)
Arandu Labs LLC's Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such information.
In compliance with the Children's Online Privacy Protection Act (COPPA), we do not use interest-based advertising (including remarketing) to target:
- Past or current activity by users known by us to be under the age of 13 years; or
- Past or current activity on sites or apps directed at users under the age of 13 years.
If any of our Services are determined to be covered by COPPA, we will notify Google through the appropriate channels and tag ad requests for child-directed treatment in accordance with AdMob requirements.
6. DETAILED THIRD-PARTY DISCLOSURE
Arandu Labs LLC does not sell your personal data. However, we integrate specialized services from trusted third-party partners to provide essential functionalities and support our free model through advertising.
6.1 Google Cloud & Firebase Ecosystem
AdMob by Google
Used to display advertisements. Google, as a third-party vendor, uses cookies and device identifiers to serve ads based on your prior visits to our Services or other sites/apps on the Internet. Google's use of advertising cookies and device identifiers enables it and its partners to serve ads to you based on your visits to our Services and/or other websites/applications. You can learn more about how Google handles data by visiting How Google Uses Data.
Privacy Policy
Google Analytics & Firebase Crashlytics
Used to monitor app performance and stability. All data is aggregated and anonymized. Firebase Privacy
6.2 Advertising Partners
Our advertising partners may collect anonymized data through their SDKs to serve and measure ads:
AppLovin
Ad serving and performance measurement.
Vungle / Liftoff
Video ad delivery and metrics.
StartApp
Monetization and advertising analytics.
AdColony
In-app video advertising solutions.
7. PERSONALIZED ADVERTISING
Arandu Labs LLC and our advertising partners may use cookies, device identifiers, and other technologies to deliver personalized advertisements based on your interests and browsing behavior. This practice is commonly known as "interest-based advertising" or "behavioral advertising."
AdChoices Icon: When you see personalized advertisements, you may notice an "AdChoices" icon (typically a small triangle with the letters "Ad" or "i"). This icon indicates that the ad is personalized based on your interests. Clicking on this icon will provide you with information about the advertising and options to opt out.
Opt-Out Options: You have the right to opt out of personalized advertising. You can exercise this right through:
- Google Ads Settings: You can opt out of personalized advertising served by Google by visiting Google Ads Settings.
- Device Settings: On mobile devices, you can limit ad tracking through system settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).
- Browser Settings: On web browsers, you can manage cookie preferences and use browser extensions that block third-party cookies.
- Industry Programs: You can opt out of interest-based advertising from participating companies through programs such as the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI), or by visiting AboutAds Choices.
Please note that opting out of personalized advertising does not mean you will no longer see advertisements. You will continue to see ads, but they may be less relevant to your interests.
8. DATA RETENTION & PURGE POLICY
We retain information only for as long as it is necessary to fulfill the purposes described in this Policy:
- Technical Logs: Anonymized crash reports are typically purged after 90 days.
- Aggregated Analytics: Retention depends on the third-party provider's policy, usually between 14 to 26 months.
- Direct Communication: If you contact us via email, we retain the correspondence as long as needed to resolve your query and for a reasonable period thereafter to comply with legal audit requirements.
9. YOUR RIGHTS (GDPR / CCPA)
Regardless of your location, Arandu Labs LLC respects your privacy rights. Depending on your jurisdiction (such as California or the European Union), you may have the following rights:
- Right of Access: You can request a copy of the technical data we hold about you.
- Right to Rectification: You can request the correction of inaccurate data.
- Right to Erasure (Right to be Forgotten): You can request the deletion of your data, provided it is not required for legal compliance.
- Right to Portability: You can request your data in a structured, commonly used, and machine-readable format.
- Right to Object/Opt-Out: You have the right to opt-out of personalized advertising through your device settings.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.
10. SECURITY MEASURES
We implement robust technical and organizational measures to protect your information:
- Encryption: All data transmitted to our few cloud services is protected using TLS/SSL protocols.
- Access Control: Only authorized personnel with a "need-to-know" basis can access administrative tools.
- Security Audits: We periodically review our third-party integrations to ensure they meet our privacy standards.
11. MODIFICATIONS
Arandu Labs LLC reserves the right to update this Privacy Policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. Significant changes will be notified through the Services or our website.
Transparency First
If you have questions about how we handle your data or need further clarification on our technical processes, our team is ready to assist.
[email protected]