AllValid privacy policy.

Who provides AllValid

AllValid is provided by Diego Russo. For support or privacy questions, email allvalid@diegor.it. This policy describes the current Release candidate and these support pages. The first TestFlight beta is being prepared; scanning and photo selection are planned for version 1.0 but are not yet enabled in this Release candidate. This policy will be updated before an enabled build is distributed.

Your household stays on your device

AllValid stores profiles, optional descriptors and citizenships; item titles, types, issuers and identifier hints; confirmed Start by and Expiry dates; notes, reminders, renewal history, record identities and app preferences. An item can be held or still needed. A needed item can be saved without dates.

There is no AllValid account, backend, live cloud sync, application network client, analytics SDK, advertising or tracking in the app. Diego Russo does not receive your household records. Core record workflows work offline. Apple services and destinations you choose have their own network and account behaviour.

Saved pictures and capture

Scanning, OCR, camera/Photos/Files intake and new profile-photo selection are disabled in Release. A supported photo backup can import one saved picture per item or profile. Imported pictures can be viewed or removed. They are bounded, sanitised JPEGs, but their visible pixels may still contain a portrait, signature, full identifier or machine-readable zone. Removing metadata does not redact a picture.

Item pictures remain through archive, date edits and renewal until explicitly removed or the item is permanently deleted. Profile pictures remain until removed or the profile is deleted. Metadata-only exports and one-way copies exclude pictures.

Device protection and backups

Database and durable picture files use iOS Data Protection. File access can remain possible after the first unlock, including during later locks. Optional App lock authenticates the device owner and covers inactive screens; it adds no separate database encryption. AllValid does not receive biometric data or the device passcode.

Database references and picture files are separate storage systems. Missing, unreadable or corrupt files and unfinished cleanup can block access until recovery. OS backups may include the database and picture files, but backup eligibility is not a guarantee of consistent recovery. Keep a separate backup of important records. Screenshot prevention, secure memory zeroisation and forensic erasure are not promised.

Optional permissions and reminders

Onboarding and help request no permissions. Notification permission follows an explanation and your explicit Continue action. Declining preserves records and rules. Notifications are generic by default. Detailed content may show names, titles and dates on the Lock Screen; notes and identifier hints are excluded. iOS retains notification content and an item identity for opening the record. Content changes update pending notifications when reconciliation succeeds; already-delivered alerts remain unchanged. iOS settings and Focus can affect delivery.

Optional App lock uses device-owner authentication with passcode fallback. Calendar copies use Apple’s editor without Calendar database access. Apple Reminders requests full access only after its explanation and Continue action; AllValid reads writable list names and sources, never existing tasks, and saves only your confirmed copy. Release requests no camera or Photos access.

Transfers you choose

Export creates an internal protected temporary file for your chosen destination. JSON metadata backups preserve identities, relationships and history. CSV cannot restore data. Backup with photos explicitly includes metadata and exact saved pictures. Exported files have no extra encryption and can be read without AllValid’s app lock. Internal cleanup is attempted after completion, cancellation, interruption and next launch; failures remain available for retry.

Import validates a bounded supported backup, previews changes and asks for your conflict choices and confirmation. Invalid input, cancellation, stale previews and failed database saves preserve existing records. Absent records or pictures are kept. Imports do not restore app settings or notification delivery state, and the source file remains at its original destination.

Send a copy shares one reviewed item. Notes, history and identifier hint start off; history notes follow the Notes choice. Calendar and Apple Reminders receive only the reviewed title, selected date and optional alert. Destinations may retain, forward or sync their copies. Later edits, renewal, archive, deletion or erase do not update those copies. Repeated transfers and external alerts can create duplicates.

Keeping and deleting records

Records stay until explicitly removed. Archive retains an item, picture and history. Permanent item deletion is available from Archived after confirmation; pictures can be removed separately. Erase All Data requires two confirmations and fresh device authentication when App lock is enabled.

A failed database save preserves records. A committed erase with unfinished cleanup is reported as cleanup pending and blocks access for retry; it is not reported as a complete erase. Removal is logical, not forensic: earlier bytes may remain in SQLite/WAL files or backups. Erase does not reset iOS permissions or remove external exports, shared copies, Calendar events, Reminders tasks or earlier backups. Remove those separately.

Purchases through Apple

Five active household items are free; archived items do not count. The optional non-consumable lifetime unlock allows unlimited active items with one payment and no subscription. Apple supplies the current localised price and processes and retains transactions. Purchase and Restore are explicit actions and may require Apple Account authentication.

AllValid keeps product, price, eligibility, ownership, access and operation status in memory. It has no receipt server and does not receive Apple Account credentials. Existing records remain readable, archivable, restorable, exportable and deletable in every purchase state. The five oldest active items are editable for free; surplus active items are read-only until a slot is freed or unlimited access is verified. Existing reminders continue. Family Sharing, where configured, provides purchase access rather than household records.

Support messages

AllValid sends no automatic support upload or app analytics. If you email support, your address and the information you choose to send are processed by the email services used to deliver and store the message. Diego Russo uses the correspondence to answer your request, investigate defects and maintain the app. Please send fictional steps, app/iOS versions and non-sensitive error codes rather than household documents, saved pictures, databases, backups, full identifiers or unredacted diagnostics.

Access is limited to Diego Russo and the email service providers needed to deliver and store the correspondence. Support correspondence is kept while needed to resolve your request, provide relevant follow-up, investigate related defects or meet legal obligations. Diego Russo periodically reviews it and deletes or anonymises personal information no longer needed. You can request deletion by email, subject to applicable legal requirements. Provider backups and records follow their own retention policies. No marketing list is created from support requests.

These website pages

These support and privacy pages are hosted on GitHub Pages. GitHub may process IP addresses, request times, browser/device information and other service logs to serve and secure the site, under its privacy statement. GitHub controls retention of its own service logs.

These two AllValid pages include no analytics scripts, ads, comment system, remote fonts, social embeds or support form. Email links open your email application; no message is sent unless you choose to send it.

TestFlight and Apple diagnostics

If you join a TestFlight beta, Apple automatically collects beta crash logs and usage information and shares them with the app provider. This is separate from the app having no analytics SDK. Feedback may include screenshots, comments and contact details. Read Apple’s TestFlight privacy notice before participating.

Diego Russo uses beta reports to investigate faults and evaluate app quality, not for advertising. Access to downloaded reports is limited to Diego Russo and necessary service providers. Downloaded reports are kept while needed to investigate the reported issue, verify its correction, evaluate the beta or meet legal obligations. Diego Russo periodically reviews them and deletes or anonymises personal information no longer needed. You can request deletion of copies held by Diego Russo, subject to applicable legal requirements. Apple retains its own records under its terms.

Questions and updates

Contact allvalid@diegor.it for privacy questions or requests concerning support correspondence. Your household records are local; Diego Russo cannot access or remotely delete them. Use the app’s export and removal controls for those records. This policy will be updated when the app’s supported capabilities or data handling change.