Vindico — NGN Consulting Corp

Privacy Policy

Last updated: August 18, 2026

1. Information we do not collect

• No account, sign-up, email, or login is required to use Vindico.
• No analytics, advertising, tracking, or device fingerprinting.
• We do not collect your name, contacts, location, or app-usage data.
• We never receive your claims, receipts, credentials, or purchases.

2. Information stored on your device

Everything you add to Vindico is stored in an encrypted database on your phone (SQLCipher, AES-256, with the key held in your device's hardware-backed keystore). This can include:

• Claims you scan or track — case names, claimant IDs, PINs, filing deadlines, and payouts.
• Purchases captured from receipts you scan.
• Recall and settlement records used for matching.

This data sits behind your device biometric or PIN app-lock and is excluded from cloud backup and device-to-device transfer. It never leaves your phone.

3. Camera and document scanning

When you scan a receipt or a paper notice, the camera and text recognition run entirely on your device using Google's ML Kit (part of Google Play services). Images are processed locally to read the text on the page. The app does not upload your photos to us or to any third party, and does not retain the images after processing.

4. Network activity

Vindico makes only outbound, download-only requests to fetch public information:

• Product-recall data from the public CPSC, FDA, and NHTSA APIs.
• The open-settlements catalogue from our hosted public file.

These requests download public data to your phone. They do not include your claims, purchases, credentials, or any personal data. The matching of that public data against your purchases happens locally on your device.

5. Permissions

• Internet — to download recall and settlement data.
• Biometric — to lock the app to you.
• Receive boot completed — to reschedule the background recall check after your phone restarts.

Vindico does not request the camera permission itself; scanning is handled by the Google Play services document scanner.

6. Third-party services

• Google Play services / ML Kit — provides on-device document scanning and text recognition. Governed by Google's Privacy Policy.
• GitHub Pages — hosts the public settlements catalogue file that the app downloads. As with any web host, GitHub may log standard request metadata (such as IP address) when serving the file; we do not receive or store this information.
• Google Play Billing — processes the optional one-time Vindico Pro purchase. Google Play handles your payment entirely; we do not receive, see, or store your payment details. Governed by Google's Privacy Policy and the Google Play Terms of Service.

7. Data sharing and sale

We do not sell, rent, or share your information. There is nothing to share — your data never leaves your device.

8. Children's privacy

Vindico is not directed to children under 13 and does not knowingly collect data from anyone.

9. Data retention and deletion

Your data lives only on your device. You can delete individual claims inside the app, or remove everything by uninstalling Vindico or clearing its data in your Android settings. Because we hold none of your data, there is nothing for us to delete on our end.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted at this page with a revised "last updated" date.

11. Contact

Questions about this policy or your privacy can be sent to:
NGN Consulting Corp
ngn.consulting.corp@gmail.com