Privacy Policy
Effective Date: October 2026
Last Updated: October 2026
Developer / Company: FutureSoftware (“we”, “us”, “our”)
Application: Masker (Android & iOS mobile applications)
Contact Email: contact.form.fsw@gmail.com
Website: https://futuresoftware-studio.github.io/masker-privacy
Terms of Service: https://futuresoftware-studio.github.io/masker-privacy/terms
1. INTRODUCTION & ZERO-KNOWLEDGE COMMITMENT
FutureSoftware created Masker with a strict “Privacy by Design” and “Zero-Knowledge” philosophy. We believe that your personal conversations, photos, videos, audio notes, and files belong solely to you.
Masker is architected so that:
- We cannot read your messages: Cloud messaging utilizes multi-device ECDH (X25519) key agreement and per-chat AES-256-GCM end-to-end encryption.
- We cannot view your vault files: All photos, videos, audio memos, documents, and notes stored in your primary vault are encrypted client-side on your device using AES-256 encryption.
- We do not possess your encryption keys: Encryption keys are derived on your physical hardware from your master PIN/password using Argon2id and PBKDF2-HMAC-SHA256. Keys are never transmitted to our servers or third parties.
- We do not require personal identification: You can use Masker anonymously without providing your legal name, physical address, or mandatory email registration.
- Master Credentials & Vault Content: We never store, log, or transmit your primary PIN, password, unlock patterns, recovery keys, or unencrypted files.
- Plaintext Messages & Media: Message text, voice memos, image attachments, and video files are encrypted on your physical device before entering cloud transit. Cloud servers operate as blind conduits and cannot inspect payload contents.
- Biometric Records: When using fingerprint or facial unlock, authentication is processed exclusively by your device’s operating system (Android BiometricPrompt / iOS LocalAuthentication). Masker never accesses or stores your raw biometric data.
- Plaintext Phone Numbers: Contact discovery uses cryptographic one-way SHA-256 hashing. Your plaintext telephone number is never exposed in a public directory.
- Financial & Payment Data: All payment processing for Masker Pro is conducted exclusively through the Google Play Store or Apple App Store. We do not collect or store credit card numbers, bank details, or billing addresses.
3. DATA PROCESSED LOCALLY ON YOUR DEVICE
- Interactive Camouflage Disguises: Disguise utilities (Calculator, Currency Converter, Audio Manager, News Aggregator, Finance Tracker, Calendar) execute computational routines, conversions, and local data persistence entirely on your device.
- Decoy Vault for Plausible Deniability: Masker features an optional duress defense decoy system accessed via a distinct Secondary PIN. The decoy vault permits storing up to 15 standard, unencrypted files and templates locally to simulate normal device use without exposing your private encrypted vault. Decoy files remain strictly on your device and are never backed up to external storage or cloud relays.
- Client-Side Cryptography: All encryption, decryption, and key derivations are performed in memory on your device’s local CPU/Isolates. Decrypted files are kept in protected sandboxed enclaves and purged immediately when closed or when the app locks.
4. THIRD-PARTY SERVICES & ADVERTISING
Masker utilizes industry-standard third-party developer SDKs to deliver advertisements, process subscription entitlements, and facilitate encrypted cloud message delivery:
A. Google AdMob (Advertising)
The free version of Masker displays non-intrusive advertisements served by Google AdMob (such as top adaptive banners and occasional full-screen interstitial ads).
- Information Collected by AdMob: AdMob may collect and process device identifiers (such as Google Advertising ID / GAID or IDFA), coarse geographic location, app performance indicators, interaction telemetry, and operating system metrics to deliver and measure ad performance.
- GDPR & European Economic Area (EEA) / UK Consent (Google UMP SDK): For users residing in the European Union, European Economic Area, and United Kingdom, Masker integrates the official Google User Messaging Platform (UMP) SDK. A consent dialog is presented on startup where required by law, allowing users to choose between personalized ads, non-personalized ads, or vendor-specific choices under the IAB TCF framework.
- Managing Ad & Privacy Preferences Anytime: Users can review, change, or revoke their advertising consent choices at any time directly within the app by navigating to:
Settings > Support & Legal > Ad & Privacy Preferences
- System-Wide Ad Opt-Out: You can reset or opt out of personalized ad tracking directly within your operating system settings (Settings > Privacy > Ads on Android; Settings > Privacy & Security > Tracking on iOS).
B. Google Play In-App Billing (Masker Pro Subscriptions)
- Premium upgrades (“Masker Pro” monthly subscriptions with free trials, yearly subscriptions, or lifetime passes) are processed through Google Play In-App Billing.
- When purchasing a subscription, Google Play handles the billing transaction and returns an encrypted digital purchase token and entitlement status to verify your Pro status.
- Masker does not collect or store credit card numbers, debit card details, or banking information. All billing disputes and renewals are governed by Google Play’s policies.
C. Google Firebase Infrastructure
- Firebase Anonymous Authentication: Assigns an anonymous pseudonymous user identifier (Firebase UID) enabling encrypted cloud message routing without linking your legal identity.
- Firebase Cloud Firestore & Storage: Acts as an encrypted relay for end-to-end encrypted chat messages and temporary media storage. Payloads are encrypted with AES-256-GCM before upload.
- Firebase Cloud Messaging (FCM): Delivers disguised push notifications to notify you of incoming messages. Notification bodies utilize benign skin-themed text (e.g. “Calculation sync complete” or “Market summary ready”) to prevent previewing confidential content on your lock screen.
5. DEVICE PERMISSIONS WE REQUEST
Masker requests the following device permissions only when actively needed to support user-initiated features:
- Storage & Media (
READ_MEDIA_IMAGES, READ_MEDIA_AUDIO / Storage Access Framework): Required to import files into the encrypted vault, export files upon user request, or store encrypted external backups to designated SAF directories.
- Camera (
CAMERA): Required to take private photos or record videos directly into the encrypted vault without saving copies to the unencrypted system gallery.
- Microphone (
RECORD_AUDIO): Required to record voice messages in encrypted chat conversations or record audio memos in the audio vault.
- Contacts (
READ_CONTACTS): Optional; requested solely when you choose to share a contact card in chat or search your address book for registered contacts using cryptographic SHA-256 hashes. Your contact address book is never uploaded or sold.
- Location (
ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION): Optional; requested only when you choose to share your GPS coordinates directly in an active chat conversation.
- Calendar (
READ_CALENDAR, WRITE_CALENDAR): Used strictly by the native Calendar disguise skin to display and edit your device calendar events during camouflage mode. Calendar data is processed in memory and never transmitted to our servers.
- Biometrics (
USE_BIOMETRIC, USE_FINGERPRINT): Enables rapid biometric unlock through the device hardware keystore.
- Notifications (
POST_NOTIFICATIONS): Required on Android 13+ to display disguised system tray notifications for incoming encrypted messages.
6. DATA RETENTION & ACCOUNT DELETION
- Ephemeral Message Auto-Purging: Users can configure disappearing message timers (
24 hours, 2 days, 10 days, 1 month, 3 months, 1 year). Expired messages and attachments are automatically deleted from both devices and server relays.
- In-App Account Deletion: You can permanently delete your Masker identity and all associated cloud data at any time inside the app by navigating to Settings > Account > Delete Account. Initiating deletion permanently wipes your Firestore account record, user presence records, active chats, and stored cloud media tokens.
- Local Data Eradication: Uninstalling Masker or clearing application data immediately and irreversibly wipes all local AES-256 encryption keys, Hive vaults, and cached files from your device.
7. SECURITY & USER RESPONSIBILITY
While Masker implements state-of-the-art cryptographic safeguards (Argon2id key derivation, multi-device X25519 ECDH, AES-256-GCM AEAD encryption), your security relies on safeguarding your credentials:
- No Password Recovery: Because we do not store your master PIN, password, or encryption keys, FutureSoftware cannot recover your data if you forget your credentials.
- Backups: We strongly recommend utilizing the in-app encrypted backup feature to safely store encrypted backup packages (
.mbk or external SAF) in a secure independent location.
8. CHILDREN’S PRIVACY
Masker is intended for general audiences aged 13 and older (or 16 in certain European jurisdictions). We do not knowingly collect, solicit, or maintain personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.
9. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The updated version will be published on our website with a revised “Last Updated” date. Continued use of Masker signifies acceptance of the updated terms.
If you have questions, feedback, or concerns regarding this Privacy Policy or your data rights, please contact us at: