Privacy policy

01 / ABOUT

Who this policy covers

Namib develops and publishes Mask & Mark, also listed as Mask & Mark: PDF Redactor for Android (package com.safedocument.app). In this policy, “we” and “us” mean Namib.

The app helps you prepare sharing copies of documents with opaque masks, purpose and recipient watermarks, handwriting and optional declarations. This policy explains data handling in the app and on this policy website.

No account is required. We do not operate a document-upload service, cloud document library or cloud OCR service for the app. The app has no separate developer analytics or crash-reporting service; Google’s advertising services have their own data processing, described below.

02 / LOCAL PROCESSING

Documents and signatures

The app accesses the images or unencrypted PDFs you select and photos you take through your camera app. These may contain sensitive information, including identity, financial, health or other personal information. You choose what to import and which details to hide.

Selected content is copied, decoded and re-encoded into private app storage on your device. The app processes page images, document names, masks, crop and rotation settings, recipient and purpose wording, dates, declarations and handwritten strokes locally to provide editing, recovery, saved documents and export.

Editable drafts and saved documents include unredacted source pages. Masks hide pixels in generated sharing copies; they do not erase the underlying private source pages kept for editing. Imported original files are not modified.

If you save reusable handwriting, its name, strokes and proportions are stored privately on your device. A drawn signature is used as visible ink, not as biometric identity verification or proof that a document is authentic.

We do not receive your document content through the app, and the app does not pass document images, text, names, file paths, recipient or purpose wording, declarations or signatures to the advertising APIs. Use other people’s documents only when you are authorized to do so.

03 / YOUR DESTINATIONS

Saving and sharing copies

Export creates fresh image-based pages, with opaque masks, watermarks and handwriting rendered into the visible pixels. Generated PDFs do not retain the original searchable text layer or original file attachments. Inspect every page before sending it.

When you tap Share, Android grants temporary read access to the generated files for your chosen app. When you save a PDF or image ZIP, the app writes it to the location you select. An email, messaging, storage or cloud provider you choose may upload, store or forward that copy under its own policy.

A selected input may also come from a cloud-backed Android file provider. That provider handles any download or network access needed to supply the file. Your camera app may keep its own copies according to its settings.

We cannot recall delivered files, delete copies held by recipients, or make watermark wording prevent copying or forwarding. Deleting a document inside Mask & Mark does not delete your original files or copies saved or shared elsewhere.

04 / GOOGLE SERVICES

Advertising and consent

The app uses Google AdMob (Google Mobile Ads SDK) for ads and Google User Messaging Platform (UMP) for consent and privacy choices. An eligible full-screen ad may open when export or saving starts. Document processing continues, and unavailable ads do not prevent file operations.

Google’s advertising SDK automatically collects and shares certain information for advertising, measurement, analytics and fraud prevention. Depending on settings and consent, this includes:

• IP address, which can be used to estimate general location.
• App and ad interactions, such as launches, taps and video views.
• Diagnostics and performance information.
• Device or account identifiers, such as advertising ID and app set ID.

Google describes these practices in its Mobile Ads SDK data disclosure and Privacy Policy. Google processes data on its services and may use service providers and infrastructure in other countries, as explained in that policy. Its retention rules apply to data it receives.

The app requests updated consent information at launch and shows Google’s consent forms when required. Ad initialization and requests are gated by UMP’s permission to request ads. Where available, revisit your choices through Document actions → Privacy and supported files → Ad privacy choices. This option appears when Google requires it.

You can also use Android’s advertising privacy controls, whose location and availability depend on your Android version. Choosing non-personalized ads does not necessarily stop all advertising data processing. See how Google uses information from apps that use its services.

05 / DEVICE ACCESS

What the app can access

• Selected files: Android’s system picker provides access to the inputs and save destinations you choose. The app does not request access to your entire photo library or storage.
• Camera capture: the app delegates taking a photo to your installed camera app and reads the resulting capture. It does not request its own camera permission.
• Network and advertising capabilities: Google’s SDKs use internet, network-state and Android advertising-related permissions for ads, measurement and consent. The app does not request precise or approximate device-location permission; an IP address can still indicate general location.

The app does not request access to your contacts or microphone.

06 / RETENTION & DELETION

What is kept, and how to remove it

Working draft

Edits are saved privately for recovery until you discard or replace the working draft. Starting or opening another document first keeps the current editable document in the Home library. Discarding the draft does not remove a previously saved version.

Saved documents

Editable documents, including private unredacted page copies and annotations, stay in the app until deleted. Delete a document from Home → Your documents to remove it and its active working copy. Duplicate documents are separate copies; delete each copy you no longer need.

Saved signatures

Reusable handwriting stays until deleted in Saved signatures. Deleting a template does not remove ink already applied to a document. Remove that ink from the document separately.

Temporary files

Camera-capture and generated-export cache files older than 24 hours are cleaned when the app next opens. This is not an exact 24-hour expiry. Android may clear cache sooner.

All private app data

Use Android’s app settings to clear Mask & Mark’s storage, or uninstall it, to remove private drafts, saved documents and saved signatures. The app disables Android automatic backup and excludes its data from Android cloud-backup and device-transfer rules.

Copies outside the app

Delete originals, saved exports, email attachments and cloud or recipient copies separately in their respective apps or services. Clearing this app’s cache, storage or installation does not remove those copies.

Namib cannot access your device’s private documents or delete them remotely. Google controls retention and deletion of advertising and consent data on its services under its own policies and available controls.

07 / SECURITY

How local content is protected

Drafts, saved documents and reusable signatures are kept in Android’s private app storage, outside the app’s file-sharing directories. File-sharing access is restricted to temporary captures and generated exports. Google states that Mobile Ads SDK data is encrypted in transit.

The app does not provide a separate password-protected or independently encrypted document vault. Device security, your screen lock, your chosen camera and sharing apps, and access to an unlocked or compromised device affect protection. No storage or transmission method guarantees absolute security, and deletion is not a guarantee of forensic erasure.

08 / SUPPORT

If you contact us

If you email Namib, we receive your email address and whatever you choose to send, such as your name, message, app version or attachments. We use this information to respond, troubleshoot and handle privacy requests. Email providers process those communications to deliver and store them.

We retain support correspondence only as needed to handle your request, resolve related issues or meet applicable legal obligations. You can ask us to delete correspondence we hold, subject to those obligations.

Please do not send identity documents, full document images, signatures or other unnecessary sensitive information to support. Use a fictional example or redact details when explaining a problem.

09 / YOUR CHOICES

Privacy rights and control

Depending on where you live, you may have rights to access, correct, delete or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or complain to your local data protection authority. The rights and exceptions depend on applicable law.

Manage documents and signatures directly on your device using the controls above. For information you have sent to Namib, or questions about your rights, email pat@namibapp.com. We may request only the information reasonably needed to verify and handle your request. We do not need a copy of your ID or document to explain these controls.

For data processed by Google, use Google’s privacy and advertising controls and the in-app consent options where available. Withdrawing consent does not undo processing that has already lawfully occurred.

If you are a parent or guardian with a concern about a child’s information, contact us at the same address. We do not receive a child’s document content merely because it is edited locally in the app.

10 / THIS WEBSITE

Hosting this policy

This page is hosted on GitHub Pages. We have not added advertising, analytics scripts, forms, tracking cookies or third-party fonts to this page.

GitHub logs and stores visitors’ IP addresses for security purposes, including visits without a GitHub account. See GitHub Pages data collection and the GitHub Privacy Statement. Following an external link or emailing us is subject to the destination service’s practices.

11 / UPDATES

Changes to this policy

We may update this policy when the app, its services or applicable requirements change. The current version will be published at this address with an updated date. We will provide any additional notice or consent required for material changes.