1. Scope and contact
Johnny Nesto operates Mask, including this download website, Mask Desktop and the Mask iPhone app. For privacy questions or requests, contact Jhonnesto2@gmail.com. This notice describes the current development-preview release; services you open separately have their own policies.
2. Website visits and interactive previews
The website serves downloads and instructions through Vercel. Hosting and network providers process connection information such as IP addresses, requested pages/files, timestamps and browser information to deliver and protect the site. This site has no Apple Account sign-in form, added advertising/analytics scripts or tracking cookies set by its own application code. Interactive map and settings previews run in your browser; they do not connect to or change your iPhone.
3. App access verification
The iPhone app creates a random installation credential. It sends that credential to the online access service for enrollment and periodic status checks; activation also sends your access code and consent-version value. The service uses Supabase infrastructure.
The access-record design stores hashes of the credential and access code, an administrator-chosen label, expiration/revocation status, enrollment and last-seen timestamps, and the consent version. Rate limiting uses request counts and time windows associated with a hashed network address or installation credential. Providers can also process network and operational logs.
This information is used to verify access, manage expiry or revocation, prevent abuse and troubleshoot access problems. Authorized administrators can view labels, access status and enrollment/last-seen times. The access-verification request does not include your selected coordinates, route, Apple password or pairing record.
4. Signing, device connection and local data
Installation and pairing use your computer and iPhone over USB. Device identifiers, pairing records and signing/provisioning information are processed to identify your phone and install the app. Apple signing and account verification contact Apple; signing features also use the configured remote signing helper, including the SideStore-hosted helper in the current desktop release. Those services can receive technical authentication/helper requests and connection metadata.
Enter Apple Account passwords and verification codes only into the app's sign-in flow—not this website, an email or a chat. Signing/session material may be retained locally in the operating system's credential store; account-storage behavior can differ between desktop and on-phone renewal features. Pairing records are sensitive device credentials. They are not included in public downloads and should not be shared with other users.
Locations, routes, favorites and preferences are processed by the iPhone app and can be saved locally. Map display, location searches and route planning may send queries or coordinates to Apple mapping/location services. Access verification is not a live-location sharing service. Local notifications and signing-expiry reminders use device permissions and settings.
5. Support and service providers
If you email support, your email address, message, attachments and related correspondence are processed to answer you. The contact address uses Gmail. Do not send passwords, verification codes, signing private keys or pairing files.
Information is processed by the providers needed for the features you use, including Vercel (website delivery), Supabase (access verification), Google/Gmail (email), Apple (signing/maps/device services) and the configured signing helper. Providers may process information outside your country under their own arrangements and policies. This app is not wholly offline. A third-party link or separate service is not controlled by this notice.
6. Retention and deletion
Access and enrollment records are not automatically deleted merely because an access code expires or you uninstall the app. They remain until removed by the operator; provider logs and backups have separate retention. The current rate-limit implementation removes older buckets during subsequent checks rather than promising an exact scheduled deletion time. Support correspondence can remain in the support mailbox. No universal automatic deletion deadline is currently promised.
You can remove app files using your device's controls, but uninstalling may leave operating-system credential-store entries and does not remove server records. Email Jhonnesto2@gmail.com to request access-record or support-data deletion, correction, or information about retention. Removing an access record may end access to the online service.
7. Choices, rights and security
Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, object to or restrict processing, withdraw consent where it is the basis for processing, or complain to a privacy authority. Contact the operator to exercise applicable rights; proportionate identity verification may be needed. Do not send account secrets as proof of identity. Some records may need to be retained to meet legal or security obligations.
You control device permissions and whether to use online features. Disabling required connectivity or permissions can prevent installation, renewal or access verification. Access credentials and signing information require careful handling; no system can guarantee absolute security.
8. Children and changes
Mask is not directed to children under 13. Contact the operator if you believe a child has submitted personal information so the situation can be reviewed. The notice may be updated as the service changes; the effective date will be updated here. Materially different processing may require additional notice or consent under applicable law.
Contact
Johnny Nesto · Jhonnesto2@gmail.com