Effective date: 2026-10-21
Publisher: CLOUDWARE EDGE LLC, contact cloudwareedge@gmail.com

Mitra Home is a phone companion for the Mitra family-admin software that you run on your own computer ("your PC"). This policy covers the Android app and the iPhone app, both called "Mitra Home". Where they differ, each paragraph says which one it is about.

Short version

We do not collect your data. The app has no accounts, no ads, no analytics of its own and no crash-reporting service. Your information moves only between your phone and your own PC on your home network. The one exception is outside our control: on Android, the Google scanners the app uses send Google technical diagnostics about themselves (see Third-party components). The iPhone app embeds no third-party code that sends anything anywhere.

What the app handles

• Pairing details: the address of your PC, a certificate fingerprint and a pairing token, from the QR code you scan. Stored on your phone: on Android encrypted with an Android Keystore key, on iPhone in the Keychain (this device only, never in backups).
• Family data from your PC: bills, appointments, items, lists and notes that your PC lets this phone see. Kept on your phone as one encrypted file so you can read it away from home.
• Changes you make: ticks, new items and notes wait in an encrypted file on your phone until your PC is reachable, then are sent to it.
• Files you send: papers you scan, or PDFs, images and spreadsheets you share to the app. Held encrypted in the app's private storage until sent to your PC, then removed. On iPhone the Share sheet entry ("Mitra Home") is a small separate part of the app that encrypts the file and leaves it for the app to send; it has no network access and cannot see the pairing token or any of your family data.
• Reminder and lock settings: your chosen reminder hour and lock options, stored on the phone.

Where data goes

Only to your PC, over your home network, using an encrypted connection pinned to your PC's certificate. We (the publisher) never receive it and operate no server that stores it.

Third-party components

• Google Play services document scanner and code scanner (ML Kit) are used to scan papers and the pairing QR code. They run on your device; the scanned pages and codes are not sent to Google by the app. ML Kit does send Google technical diagnostics about its own use: device and app information, device identifiers, performance measurements, settings such as image size, and error codes, used by Google for diagnostics and usage analytics and encrypted in transit. This is not your documents, pages or codes, and we (the publisher) never receive it. See Google's ML Kit data-disclosure page (developers.google.com/ml-kit/android-data-disclosure) and Google's privacy policy; this is collected by Google, under its terms.
• On-device assistant for quick add (optional). If you type a sentence on the Add tab and tap Fill in, the app reads it with its own rules on the phone. On phones that have one, it may also ask the phone's own language model (Apple's Foundation Models on iPhone; Google's Gemini Nano through ML Kit on Android). The model runs on the phone, the sentence is not sent to us or to a server, and nothing is saved until you check the form and tap Add. On Android, ML Kit's technical diagnostics (above) also apply to this feature.
• Android biometric / screen-lock prompt and, on iPhone, Face ID / Touch ID / passcode (Apple's LocalAuthentication) are used only if you turn on app lock. The app never receives your fingerprint, face or PIN; the phone only tells it whether you passed.
• iPhone document scanner (Apple's VisionKit) scans papers on your device; nothing is sent to us or to a third party by the app. The iPhone app uses only Apple's own system frameworks and the open-source Capacitor shell (MIT licence), which collects nothing. The apps themselves include no advertising, analytics or crash-reporting SDKs of their own.

Permissions

• Internet: to reach your PC.
• Camera (Android: through Google's scanners; iPhone: Apple's scanner and camera): to scan papers and the QR code.
• Local Network (iPhone): to reach your PC on your home Wi-Fi; nothing else on your network is looked at.
• Notifications: for the optional daily reminder. Notifications avoid amounts and details; the title is only a count ("N things need you today"), and if your phone hides previews or sensitive content the lock screen shows no details.
• Face ID (iPhone): for the optional app lock.
• Run at startup: to set the daily reminder again after a restart.
• Biometric / screen lock: for the optional app lock (USE_BIOMETRIC; older Android also lists USE_FINGERPRINT).
• Network state: to tell whether the phone is on a network before trying to reach your PC.

Storage, security and backups

The family copy, waiting changes, waiting scans and reminder rows are encrypted at rest with a key held in the Android Keystore (iPhone: the Keychain, this device only); your reminder and lock settings are plain preferences that contain no family data. Android cloud backup is turned off for this app, and on iPhone the encrypted files and the Keychain items are kept out of iCloud and device backups. "Forget this phone" in the app deletes the encrypted copy, waiting scans and changes, reminder data and pairing token from the phone at once; removing the phone on your PC does the same the next time the phone reaches your PC (until then, the daily reminder may still show the rows it already had, but never from a copy older than 14 days: after that the reminder stops and its rows are deleted). Uninstalling the Android app removes everything it stored. On iPhone, deleting an app does not remove its Keychain items (iOS keeps them); the app erases them the first time it is installed again, and they cannot be read by other apps. To remove them at once, use "Forget this phone" before you delete the app, or remove the phone on your PC, which makes the stored pairing token useless.

Children

The app is for families. A parent pairs a child's phone, and the child sees only what the parent allows. We do not knowingly collect any information from children, since we collect none from anyone.

Sharing and sale of data

None. We do not sell, share or transfer your data.

Your PC's data

What your PC software stores, and any optional Google Calendar or Gmail connections you set up there, are covered by the Mitra PC software's own documentation and the Google terms you accept there, not by this app.

Changes

Updates to this policy will be posted at https://rnetgit.github.io/mitra-home/privacy.html with a new effective date.

Contact

CLOUDWARE EDGE LLC, cloudwareedge@gmail.com