LEGAL & COMPLIANCE • LAST AUDITED: OCTOBER 2026 • VERSION 3.2

Privacy by Architecture,
Not by Policy.

We engineer software under a strict paradigm: we should never possess your private data in the first place. You do not need to rely on corporate good intentions when our application runtime contains zero analytics SDKs, zero user databases, and zero servers to transmit your local files to.

cloud_off0 KB

Zero Telemetry

No pings, no beacons

memoryLocal

100% On-Device

Neural & GPU sandbox

no_accountsNone

No Accounts

No passwords or emails

block0 Trackers

Zero 3rd Parties

Zero vendor code

verified_userEXECUTIVE PRIVACY MATRIX

Privacy at a Glance

A precise technical overview of how Vlack Studio applications handle files, execution memory, and operating system permissions.

Dimension	Vlack Studio Standard (Our Architecture)	Typical Cloud Utilities
folder_offDocument & File Data	0 KB Collected or Uploaded Files processed in mmap virtual memory buffers. Everything remains on your device flash memory.	Documents routinely uploaded to AWS/GCP buckets for remote server rendering and caching.
developer_boardComputation Location	100% On-Device Silicon Executes strictly on Apple Neural Engine, iOS Metal, and Android NDK local libraries. Completely functional in Airplane Mode.	Offloaded to remote cloud workers requiring continuous internet handshake.
ads_clickAnalytics & Trackers	Zero Third-Party SDKs No Google Firebase, Mixpanel, Segment, Meta Graph API, or AppsFlyer compiled into our production binaries.	3 to 12 telemetry libraries gathering session lengths, IP addresses, and hardware fingerprints.
credit_cardPayment Processing	Platform Native Encrypted IAP Managed strictly by Apple App Store StoreKit 2 and Google Play Billing. We never touch credit cards, names, or addresses.	Custom checkout funnels with stored Stripe customer profiles and cross-service purchase records.
manage_accountsAccount Requirement	Zero Identity Sign-in Instant launch. You never enter an email address or password to access the full utility set.	Mandatory social authentication, email collection, and marketing opt-ins.

SECTION 01

Core Principle: Zero-Knowledge Architecture

Vlack Studio (“we”, “us”, or “our”) designs mobile utilities under a fundamental technical guarantee: your data belongs on your physical silicon. When you use PDFy to merge confidential contracts or Wait to cultivate digital focus, your workflows exist in private memory.

We do not maintain user databases, backend processing clusters, document indexing queues, or central analytics infrastructure. All computational transformations—including document parsing, optical character recognition (OCR), image re-compression, and notification scheduling—are executed natively on the device's CPU, GPU, or Neural Engine using sandboxed operating system runtime primitives.

terminalTechnical Execution Model: Sandboxed Volatile Memory

Documents are held temporarily in ephemeral address space (mmap virtual memory buffers) strictly during user-initiated actions. When the application closes or an operation concludes, the memory is deallocated and purged in accordance with iOS and Android application sandbox requirements.

SECTION 02

Device Permissions & Hardware Access

When Vlack Studio utilities request system permissions, they do so solely to provide immediate, user-initiated utility:

folder_open

File / Document Picker

We use system standard picker dialogs (UIDocumentPickerViewController and Android Storage Access Framework). The app gains transient access only to the explicit document you tap.

fingerprint

Biometrics (Face ID & Touch ID)

Used optionally to lock protected folders within utilities. Authentication occurs directly inside Apple Secure Enclave or Android StrongBox. We receive only a cryptographic boolean confirmation.

hourglass_top

Screen Time & DeviceActivity

In our app Wait, we interface with Apple's FamilyControls / Screen Time APIs. This local framework enforces app blockers without revealing to us which apps you open or your daily browsing minutes.

wifi_off

Network Access

Our apps run completely without an active internet connection. System network capability is present solely to validate one-time Pro purchases directly against Apple StoreKit or Google Play Billing servers.

SECTION 03

Data We Explicitly Do NOT Collect

To leave no room for ambiguity, the following categories of data are never intercepted, collected, logged, sold, or shared by Vlack Studio:

cancelPersonal Identifiers: Names, postal addresses, phone numbers, or email addresses.

cancelDevice Fingerprints: IDFA, Advertising IDs (GAID), MAC addresses, or custom IMEI strings.

cancelFile & Document Contents: Text, images, metadata, EXIF tags, or filenames of processed media.

cancelLocation Metrics: GPS coordinates, Wi-Fi tri-lateration, cell tower logs, or IP lookups.

cancelKeystrokes & Inputs: Any text typed into inputs, search fields, or document annotations.

cancelThird-Party Ad Networks: We do not show banner ads, interstitial videos, or reward ads from any exchange.

SECTION 04

Support Communications

When you voluntarily reach out to us via electronic mail (e.g. emailing hello@vlack.studio):

check_circlePurpose Limitation: Your email address and message contents are utilized solely to diagnose your technical issue or answer your question.
check_circleNo Marketing Ingestion: Support email addresses are never exported, sold, or synced with email newsletters or promotional marketing automations.
check_circleDeletion on Demand: If you wish to purge prior support correspondence from our encrypted mail server, email us anytime with the subject line “Purge Support History” and our team will erase it within 48 hours.

SECTION 05

Your Rights (GDPR, CCPA & Global Frameworks)

Modern data protection laws—including the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA)—grant individuals critical protections:

Right of Access & Portability

Because we do not store or transmit your records to any server, all of your files already reside exclusively in your personal physical custody on your device.

Right to Erasure (“Right to Be Forgotten”)

Deleting the application from your iOS or Android hardware immediately uninstalls all sandboxed local cache files. We possess no remote copies to scrub.

Right to Opt-Out of Data Sale

We have never sold, monetized, leased, or transferred personal data to any data broker or commercial vendor, and our architecture makes doing so impossible.

SECTION 06

Children's Online Privacy (COPPA & Family Friendly)

Vlack Studio utilities are designed for general audiences and are completely safe for users of all ages, including minors under the age of 13. We do not request, harvest, profile, or retain personal identifiers from any individual.

SECTION 07

Changes to This Policy & Public Audit Log

Should we update this policy to reflect new product features or statutory regulations, we will revise the “Last Audited” date at the top of this document. Every revision is publicly tracked via open-source Git commits on GitHub.

Recent Version Chronology

v3.2Updated Screen Time DeviceActivity disclosures for Wait 2.0

Oct 2026

v3.1Added StoreKit 2 local verification clarification

May 2026

v3.0Initial publication of Zero-Knowledge Architectural charter

Jan 2026

SECTION 08

Contact Legal & Data Protection

If you have any questions, regulatory compliance requests, or wish to review our source code sandboxing guarantees, you can reach our legal desk directly:

Vlack Studio Legal Operations

Attn: Privacy Officer • Software Sandboxing Team

maillegal@vlack.studio

keyPGP Fingerprint: 8F21 A47B 920E 3CD1 5590 E312 BFA1 0884

Guaranteed Response within 48 Business Hours

Need a signed Data Processing Addendum (DPA)?

Because our software is client-side offline, an enterprise DPA is rarely necessary—but we provide pre-executed certifications for institutional compliance.

Request DPA Certificationopen_in_new

Privacy by Architecture, Not by Policy.