SignalShelf Privacy Policy

1. Introduction

VRYTIS LABS (“we,” “us,” or “our”) develops and publishes SignalShelf, an offline-first Android application for capturing, organizing, and analyzing personal notes and signals. This Privacy Policy explains what information SignalShelf accesses, how it is processed and stored, and your rights regarding that information.

SignalShelf is designed as an offline-first application. Your user-created content is processed and stored locally on your Android device. SignalShelf does not require a user account, does not use cloud databases, and does not transmit your content to remote servers for processing or storage.

By installing and using SignalShelf, you agree to the practices described in this Privacy Policy.

2. What SignalShelf Accesses

SignalShelf may access the following information on your device, depending on how you use the application:

• Text input: Notes, signal content, and text that you type or paste into the application.
• Clipboard content: Text from your device clipboard, only when you explicitly initiate a paste or clipboard-capture action within SignalShelf.
• Camera: Images captured via your device camera for document or screenshot capture, only when you initiate this action within SignalShelf.
• Gallery/media: Images you explicitly select from your device gallery for use within the application.
• Shared content: Text and images shared into SignalShelf from other applications via the Android share system.
• Notification configuration: Your preferences for alerts and reminders configured within SignalShelf.
• App lock settings: Your optional 4-digit PIN configuration for app-level access protection.

3. What Is Stored Locally

All of the following data is stored exclusively on your Android device within SignalShelf’s private application storage:

• Notes and signal content entered or captured by you.
• Extracted information such as titles, actions, entities, and deadlines derived from your content.
• Categories and metadata you create or that are assigned locally.
• Image attachments captured by camera or selected from your gallery.
• Local analytics and insights calculated from your stored signals.
• Notification and reminder settings.
• App lock PIN (stored locally; not transmitted).
• Exported backup files (JSON bundles) that you create through the export function.

4. What Is Processed Locally

SignalShelf processes your content entirely on your device using deterministic regex and heuristic-based extraction. This includes:

• Extracting titles, action items, entities, and deadlines from notes and signals.
• Categorizing and organizing signal content.
• Calculating local analytics and insights from your data.
• Generating SHA-256 checksums to verify backup file integrity.

No cloud-based artificial intelligence, machine learning, or remote natural language processing services are used in the current version (V1) of SignalShelf. All extraction and analysis logic runs on your device.

5. What SignalShelf Does NOT Collect

SignalShelf does not:

• Require you to create a user account.
• Collect, transmit, or store your content on remote servers or cloud databases.
• Send your notes, images, documents, or signal content to any external service for processing or storage.
• Use advertising SDKs or display advertisements.
• Use analytics or telemetry SDKs to track your usage behavior.
• Use cloud-based AI or machine learning services to process your content.
• Collect your IP address for tracking purposes.
• Use cookies or web-based tracking technologies.
• Record your location.
• Access your contacts, call logs, or messages.

6. What SignalShelf Does NOT Share

Your user-created SignalShelf content (notes, signals, images, extracted data, analytics, and metadata) is not:

• Sold to any third party.
• Shared with advertisers.
• Transmitted to VRYTIS LABS or any external server for storage or analysis.
• Shared with any third party unless you explicitly initiate an export or share action (see Section 7).

7. When Information Can Leave Your Device

Information from SignalShelf may leave your device only in the following circumstances:

7a. User-Initiated Export and Sharing

You can export your data as a JSON backup bundle. You can also share text or images from SignalShelf to other applications using Android’s built-in share functionality. These actions are entirely initiated by you. Once data leaves SignalShelf through export or sharing, it is governed by the policies of the destination application, service, or storage location. VRYTIS LABS is not responsible for the privacy practices of those destinations.

7b. Play Integrity and Security Services

SignalShelf uses Google Play Integrity API to verify app authenticity and protect against tampered or unauthorized installations. This service requires internet access and communicates with Google’s servers. The information exchanged is limited to device and app integrity signals (such as whether the app is a genuine installation from Google Play) and does not include your notes, signals, images, or any other user-created content within SignalShelf.

For details on what data Google processes through Play Integrity, see Google’s Privacy Policy.

7c. Internet Permission

SignalShelf requests the INTERNET permission on Android. In the current version (V1), this permission is used solely for Play Integrity and security-related functionality described above. It is not used to upload your content or communicate with VRYTIS LABS servers.

8. Camera and Image Handling

SignalShelf may request access to your device camera and photo gallery. Camera access is used to capture documents or screenshots directly into SignalShelf. Gallery access is used to attach images you select. Captured and selected images are stored locally within SignalShelf’s private application storage. They are not uploaded to any server or shared with any third party unless you explicitly export or share them.

You can manage and remove locally stored image attachments through SignalShelf’s built-in storage management features.

9. Clipboard Handling

SignalShelf accesses your device clipboard only when you explicitly initiate a paste or clipboard-capture action within the application. SignalShelf does not monitor your clipboard in the background or read clipboard content without your direct action. Pasted content is treated the same as any other text you enter into the application and is stored locally.

10. Notifications

SignalShelf uses local notifications to deliver alerts and reminders that you configure. Notification scheduling and delivery are handled on-device. No notification data is transmitted to external servers. You can manage notification permissions through your Android device settings at any time.

11. Data Retention

SignalShelf retains your locally stored content according to your use of the application and any lifecycle or archive settings you configure within the app. Expired or archived data remains under your local control until you delete it using the app’s available deletion and storage management functions.

Because SignalShelf does not transmit your content to external servers, there is no remote data to retain or purge. All retention decisions are effectively yours.

12. Data Deletion

You can delete your SignalShelf data in the following ways:

• Within the application:Use SignalShelf’s built-in deletion and storage management features to remove individual notes, signals, image attachments, or all stored data.
• Uninstalling the application: Uninstalling SignalShelf from your device removes all locally stored application data, including notes, signals, images, settings, and analytics.
• Clearing app data:You can clear SignalShelf’s data through your Android device settings (Settings > Apps > SignalShelf > Storage > Clear Data).

Important regarding exported backups:JSON backup files that you have exported from SignalShelf are saved to locations you chose (such as your device’s Downloads folder, external storage, or cloud storage services). These exported files are not managed by SignalShelf and will not be deleted when you uninstall the application or clear app data. You are responsible for deleting exported backup files from wherever you stored them.

SignalShelf V1 does not require a user account. There is no remote account or server-side data to delete.

13. Backup and Export Responsibility

SignalShelf allows you to export your data as JSON backup bundles with SHA-256 checksums for integrity verification. Once exported, the security and privacy of those backup files is your responsibility. VRYTIS LABS does not have access to your exported backups and cannot recover lost or deleted data.

We recommend storing exported backups in secure locations and being mindful of where you transfer or share them.

14. Security Measures

SignalShelf includes the following security measures to protect your data:

• Optional app lock: A user-configurable 4-digit PIN that restricts access to SignalShelf content on your device.
• Play Integrity: Verifies that the installed copy of SignalShelf is authentic and has not been tampered with.
• Private application storage:SignalShelf data is stored within Android’s private app storage, which is not accessible to other applications under normal operating conditions.
• Backup integrity verification: SHA-256 checksums are used to verify the integrity of exported backup files.

While we implement reasonable measures to protect your data within the application, no method of digital storage is completely secure. The physical security of your device and any exported files remains your responsibility.

15. Children’s Privacy

SignalShelf is not directed at children under the age of 13. Because SignalShelf does not collect personal information or transmit user data to external servers, there is no server-side data collection from children or any other users. If you believe a child is using SignalShelf in a manner that raises privacy concerns, please contact us at admin@vrytislabs.com.

16. Third-Party Services

SignalShelf V1 integrates the following third-party service:

• Google Play Integrity API: Used to verify app authenticity and installation integrity. This service communicates with Google servers and is subject to Google’s Privacy Policy and Google’s Terms of Service.

SignalShelf V1 does not use Google Analytics, Firebase Analytics, Google AdMob, crash reporting services, cloud AI services, or any other third-party data collection SDKs.

17. Monetization

SignalShelf V1 does not include advertising, subscriptions, in-app purchases, or any other form of monetization. No financial transactions are processed within or through the application.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in SignalShelf’s functionality or to comply with applicable regulations. When we make changes, we will update the “Last updated” date at the top of this page. If a future version of SignalShelf introduces new data processing capabilities (such as cloud services or analytics), this Privacy Policy will be updated accordingly before those features are made available.

We encourage you to review this Privacy Policy periodically. Your continued use of SignalShelf after changes are posted constitutes your acceptance of the revised policy.

19. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or SignalShelf’s data practices, please contact us: