Effective date: September 25, 2026 Developer: DKMagnetVault Contact: support@dkbuilt.com
DKMagnetVault ("the app", "we") is an Android app for cataloging travel fridge magnets. This policy explains what data the app handles and your choices. We designed the app to keep your data on your device.
1. Summary (the short version)
- No account. No ads, and no advertising or crash-reporting SDK added by us. We do not sell or share your data for advertising. Google ML Kit, which does the app's on-device text reading, labeling and background removal, sends Google technical diagnostics and identifiers for Google's diagnostics and usage analytics, never your photos or the text read from them (see §3).
- Your catalog (magnets, places, tags, trips) and photos are stored only on your device.
- Photos leave your device only if you turn on the optional cloud AI feature (off by default). While cloud AI is on, each magnet photo you capture or import is sent automatically (downscaled) to Anthropic (the Claude API) using your own Anthropic API key to suggest a place and tags; a multi-magnet group photo may also be sent so Claude can find the individual magnets (see §3). With cloud AI off, no photo ever leaves your device.
- Maps are drawn using OpenStreetMap tiles, which load over the internet; on-device text/label reading uses Google ML Kit. With cloud AI on, the Map screen may look up place-name coordinates via the device's geocoding service (Google) — see §3.
2. What data the app processes, and why
| Data | Where | Why | Leaves device? |
|---|---|---|---|
| Magnet photos (camera or gallery) | On device | Catalog images; optional AI classification; on-device background removal & text reading | Only to Anthropic, and only while cloud AI is on — sent automatically when you capture or import a photo (see §3) |
| Catalog content (titles, places, tags, trips, dates, notes) | On device (local database) | Your collection | No |
| App settings, incl. your Anthropic API key | On device, encrypted (Android Keystore) | Run the app / enable cloud AI | Only to Anthropic: your API key authenticates each request (once when you tap Test & save, then every request while cloud AI is on), and those requests name the Claude model you picked (see §3). Your other settings stay on the device. |
| Map tile requests | Network | Display the map | Sent to the map tile provider (see §3) |
| Place names (for map pins) | Network — only while cloud AI is on | Look up coordinates to draw map pins | Sent to the device's geocoding service (Google) (see §3) |
| Technical diagnostics (device model and OS version, app version, performance and error data, per-installation identifiers, and a device identifier for the background-removal model) | Sent by Google ML Kit | Google's diagnostics and usage analytics for ML Kit | Yes, to Google (see §3); never your photos or text |
You add magnet photos using your device's camera app (via the system camera) or the Android photo picker — the app does not request the camera, storage/photos, location, or contacts permissions. It requests only two network permissions: Internet access (for optional cloud AI and map tiles) and network state (ACCESS_NETWORK_STATE, used by Android's WorkManager to schedule the optional cloud requests). The app itself does not read your contacts, advertising ID or any device identifier; Google ML Kit sends Google per-installation identifiers with its diagnostics, plus a device identifier for its background-removal model (see §3).
3. Third parties
- Anthropic, PBC (Claude API) — only if you enable cloud AI. While cloud AI is on, the app automatically sends each newly captured or imported magnet photo (downscaled) and a short text prompt (which includes any text the app read off the magnet on-device) to Anthropic to return a suggested place and tags, authenticated with your own Anthropic API key — no extra tap is required per photo. When you photograph several magnets at once, the group photo may also be sent (downscaled to at most 1024 px on its long edge) so Claude can locate each magnet's position in the frame; this happens only when on-device detection cannot confidently split the magnets itself. Your use of Anthropic is governed by Anthropic's terms and privacy policy: https://www.anthropic.com/legal/privacy and https://www.anthropic.com/legal/aup . Anthropic's API does not train on your inputs by default; retention follows Anthropic's policy. The Anthropic API is intended for adults (18+).
- Device geocoding service (Google) — only if cloud AI is on. To position pins on the map, the Map screen may look up the coordinates of place names in your catalog (e.g. "Paris, France") using the device's geocoding service, provided by Google Play services. Only the place name text is sent; the returned coordinates are stored locally. With cloud AI off, no geocoding lookups are made.
- OpenStreetMap — the map screen requests map image tiles from OpenStreetMap (https://operations.osmfoundation.org/policies/tiles/). Your approximate viewport and IP are visible to OpenStreetMap as part of a normal web request. Map data © OpenStreetMap contributors.
- Google ML Kit — on-device text recognition, image labeling, and subject segmentation (background removal) run locally; no image is uploaded for these. The segmentation model is downloaded once from Google Play services (no photo leaves your device). ML Kit does send Google technical diagnostics: device information (manufacturer, model, OS version and build), the app's package name and version, per-installation identifiers (plus a device identifier for the background-removal model delivered through Google Play services), performance metrics, API configuration, event types and error codes. Google uses them for diagnostics and usage analytics, to maintain and improve ML Kit and to detect misuse; they are encrypted in transit, ML Kit does not pass them to third parties, and they never include your photos, the text read from them, or the results. We do not receive this data. Details: https://developers.google.com/ml-kit/android-data-disclosure and https://developers.google.com/ml-kit/terms.
We add no advertising or crash-reporting SDK of our own; the ML Kit diagnostics above are the only analytics data the app's libraries send. Crash signals, if any, come only from Google Play's built-in Android vitals (OS-level; no data added by us).
4. International transfers
If you enable cloud AI, photos are sent to Anthropic, which processes data in the United States. Where required (e.g., for EEA/UK users), such transfers rely on appropriate safeguards under Anthropic's terms.
5. Legal bases (EEA/UK, GDPR)
- Consent — for sending photos to Anthropic for cloud classification and for geocoding place names, both active only while cloud AI is on (you opt in with an explicit in-app acknowledgement, and can turn it off anytime).
- Performance of the app you requested / legitimate interests — for on-device storage, map display, and the ML Kit technical diagnostics Google receives to keep the on-device features working and secure (§3).
You may withdraw consent at any time by switching off cloud AI in Settings.
6. Data retention
- On-device data stays until you delete it in the app or uninstall.
- Anthropic retains API data per its own policy (linked in §3); we keep no server copy (we have no server).
7. Your choices and rights
- Edit or delete any magnet and its photo in the app; delete multiple at once.
- Export your full catalog (Settings → Back up) and restore it (also for moving to a new phone).
- Turn cloud AI on/off anytime (Settings). Everything except the map works offline: the map needs a connection for its tiles, and pins appear only for places located while cloud AI is on.
- Uninstalling removes all on-device data.
- EEA/UK and California residents have rights to access, correct, delete, and port personal data; because data is stored locally and we hold no server copy, you exercise most of these directly in the app. For requests, contact support@dkbuilt.com.
8. Security
Network requests use HTTPS. Catalog data is in app-private storage. Your Anthropic API key is stored using Android Keystore–backed encryption and is excluded from cloud backup and device transfer.
9. Children
The app is not directed to children and is intended for users 18 and older. The cloud AI feature requires users to be 18+ (per Anthropic's terms). We do not knowingly collect data from children.
10. California (CCPA/CPRA)
We do not sell or share personal information (as those terms are defined under California law).
11. Changes
We may update this policy; the "Effective date" will change and material updates will be noted in the app or listing.
12. Contact
Questions or requests: support@dkbuilt.com.