CDA2 - Camera Digital Authentication App
Privacy Policy
Effective Date: February 2026
1. INFORMATION WE COLLECT
CDA2 collects the following information:
LOCAL (on your device):
- Photos and videos you capture
- Full media files stored locally
- Watermark preferences and settings
- App usage preferences
CLOUD (for verification):
- SHA-256 hash of your media (NOT the actual photos/videos)
- Device ID (anonymized using SHA-256)
- Metadata (timestamp, camera used, photo ID)
- Email address (when you sign in with email/password or Google)
- Usage analytics (app crashes, feature usage, ad interactions)
- Advertising data: Device advertising ID, IP address (approximate location), app usage patterns for ad personalization (collected by Google AdMob)
ANONYMOUS MODE:
- Users can use the app without providing an email address
- Anonymous accounts still generate a unique Firebase user ID
- Limited data collected: device ID, hashes, timestamps only
- No email, no personal identifiers beyond device ID
IMPORTANT: Your actual photos and videos NEVER leave your device. We only store cryptographic fingerprints (hashes) in the cloud for verification purposes. This means your personal media remains completely private.
2. HOW WE USE YOUR INFORMATION
We use your information to:
- Verify photo/video authenticity
- Store your media securely on your device
- Sync verification data across your devices
- Improve app performance and fix bugs
- Provide customer support
- Prevent fraud and abuse
- Enable you to prove your photos are original
- Display relevant advertisements to support the app
We DO NOT:
- Upload your actual photos or videos to any server
- Share your media with third parties
- Use your photos for any purpose other than verification
- Sell your personal information
3. DATA STORAGE & SECURITY
Photos/Videos:
- Stored ONLY on your device's local storage
- Never transmitted to our servers
- Protected by your device's security features
Cloud Storage:
- Only SHA-256 hashes stored (mathematical fingerprints)
- Hashes cannot be reversed to recreate your photos
- Industry-standard encryption for all cloud data
- Secure Firebase infrastructure
How to Delete Your Data:
- Local media: Delete from Gallery screen (long-press to select)
- Cloud data: Sign out to stop syncing
- Account deletion: Submit request at https://forms.gle/JcKHU8SrNpZMrhJj9
- App uninstall: Removes all local data automatically
4. THIRD-PARTY SERVICES
CDA2 uses these third-party services:
- Google Firebase (authentication, database, analytics)
Privacy Policy: https://firebase.google.com/support/privacy
- Google Sign-In (optional authentication method)
Privacy Policy: https://policies.google.com/privacy
- Google AdMob (advertising)
Serves banner and interstitial ads throughout the app
Privacy Policy: https://support.google.com/admob/answer/6128543
Ad Technology: https://policies.google.com/technologies/ads
AdMob may use your device's advertising ID to show personalized ads
- Google User Messaging Platform (UMP) (GDPR/CCPA consent collection)
Collects user consent for personalized ads in EEA and other regulated regions
Privacy Policy: https://policies.google.com/privacy
- Firebase Crashlytics (crash reporting)
Privacy Policy: https://firebase.google.com/support/privacy
These services may collect and process data as described in their own privacy policies.
5. ADVERTISING
CDA2 displays advertisements provided by Google AdMob to support the free version of the app.
What AdMob collects:
- Device advertising ID
- App interactions (which ads you view/click)
- Device information (model, OS version)
- Approximate location (based on IP address)
- Ad performance data
Ad Personalization Consent:
- When you first launch the app, you'll see a consent dialog
- You can choose to consent to personalized ads or see non-personalized ads
- Your choice is stored and respected throughout your use of the app
- This consent mechanism complies with GDPR, CCPA, and other privacy regulations
You can change your ad preferences anytime:
- Android: Settings → Google → Ads → Opt out of Ads Personalization
- Learn more: https://support.google.com/ads/answer/2662922
6. YOUR RIGHTS
You have the right to:
- Access your personal data
- Delete your account and all associated data
- Export your data (GDPR compliance)
- Withdraw consent at any time
- Request information about data we store
- Correct any inaccurate information
- Opt out of personalized advertising
- Use the app anonymously (without providing email)
To exercise these rights, contact us at: george.java7@gmail.com
Or submit account deletion request: https://forms.gle/JcKHU8SrNpZMrhJj9
7. DATA RETENTION
- Local media: Kept until you manually delete it
- Cloud verification data: Kept while your account is active
- Analytics data: Automatically deleted after 60 days
- Account data: Deleted 30 days after account deletion request
- Crash reports: Retained for 90 days
- Ad interaction data: Managed by AdMob (see their privacy policy)
- Anonymous accounts: Data retained while account is in use
8. ANALYTICS & CRASH REPORTING
Firebase Analytics and Crashlytics are automatically enabled to:
- Track app performance and stability
- Identify and fix bugs and crashes
- Understand which features are most useful
- Measure ad performance
- Improve the app experience
This data collection is required for the app to function properly and provide you with the best experience. We only collect app usage data, never photo or video content.
9. CHILDREN'S PRIVACY
CDA2 is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent and believe your child has provided us with personal information, please contact us immediately at george.java7@gmail.com.
Users aged 13-17 should have parental consent before using the app.
10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Updating the "Effective Date" at the top
- Showing an in-app notification for major changes
- Requiring re-acceptance for significant changes
Continued use of the app after changes constitutes acceptance.
11. CONTACT INFORMATION
If you have questions, concerns, or requests regarding this Privacy Policy:
Email: george.java7@gmail.com
Account Deletion: https://forms.gle/JcKHU8SrNpZMrhJj9
Response Time: Within 48 hours
For bug reports or technical issues, use the same email address.
12. LEGAL BASIS FOR PROCESSING
We process your information based on:
- Your consent (when you create an account and accept ad personalization)
- Legitimate interests (for app functionality, security, and improvement)
- Legal obligations (when required by law)
13. DATA PROTECTION
For privacy-related inquiries, contact:
Email: george.java7@gmail.com
Subject Line: Privacy Inquiry - CDA2
14. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.
15. COOKIES AND TRACKING
CDA2 does not use cookies directly. However, third-party services (AdMob, Firebase) may use cookies and similar technologies for analytics and advertising purposes as described in their privacy policies.
---
Your Privacy is Our Priority
CDA2 was designed with privacy in mind. By keeping your photos and videos on your device and only storing hashes in the cloud, we ensure your memories remain yours alone while still providing powerful verification capabilities.
Last Updated: February 2026